Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/thpcGLmdg2mnddX99r-IZXvOZUE.roa
File: thpcGLmdg2mnddX99r-IZXvOZUE.roa (raw, json)
Hash identifier: aZGccst6I/xtC3Pf8DsH05kT4gwVYvrwxFEw3qHoXBw=
Subject key identifier: B6:1A:5C:18:B9:9D:83:69:A7:75:D5:FD:F6:BF:88:65:7B:CE:65:41
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FBA4945CA2110096CA5CCD1DD046C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/thpcGLmdg2mnddX99r-IZXvOZUE.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50916
IP address blocks: 93.170.124.0/22 maxlen: 24
2a02:128:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ba:49:45:ca:21:10:09:6c:a5:cc:d1:dd:04:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b61a5c18b99d8369a775d5fdf6bf88657bce6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9e:65:6a:55:09:21:ee:43:33:89:7c:f6:80:
85:dc:dd:1e:6c:21:e6:bf:56:14:04:5b:3a:1e:75:
b4:95:f1:62:af:f4:c8:e8:03:d7:dc:72:8e:94:12:
88:0e:af:00:c7:91:bf:83:1c:02:7f:87:ab:b7:1e:
5d:c5:c9:d2:4b:d6:3c:ba:0f:6b:76:32:d4:cf:0b:
a8:ea:d6:1e:62:25:d3:16:c9:9c:69:38:e4:d7:94:
6d:8e:ff:03:13:d1:13:ec:58:c8:3d:5d:6d:a8:10:
ed:57:2c:ae:c5:c0:d1:25:bf:2b:f4:7c:d7:3e:72:
ca:9c:c8:11:cd:f9:59:3e:cb:cd:28:22:25:ba:f1:
c9:bf:21:69:02:ee:cc:37:7a:57:d6:ea:7a:6b:22:
62:f5:d5:41:bb:65:68:50:10:be:0a:82:11:ba:7e:
6e:d7:98:37:b4:47:73:85:c4:7b:74:9d:81:db:6e:
47:f1:20:e5:ba:82:1b:a2:0c:84:88:52:e9:64:96:
bc:d3:3c:ec:4b:4b:37:47:55:e6:1a:72:2c:2d:62:
e0:70:bd:f2:b9:05:af:e4:e7:3e:98:81:55:a2:97:
89:cd:6a:16:07:08:52:86:5c:e7:c9:66:ac:ee:90:
a7:16:c3:8f:a2:8c:6c:98:0b:97:79:ae:c6:b6:54:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:5C:18:B9:9D:83:69:A7:75:D5:FD:F6:BF:88:65:7B:CE:65:41
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/thpcGLmdg2mnddX99r-IZXvOZUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.124.0/22
IPv6:
2a02:128:8::/48
Signature Algorithm: sha256WithRSAEncryption
54:19:b8:62:eb:ab:1d:18:3e:27:e9:8d:25:d6:43:80:65:13:
cf:47:44:cb:e4:5e:96:78:48:d9:d3:3c:e0:88:7c:07:0b:89:
df:0a:a4:be:65:1e:97:67:bd:8f:8e:2b:9e:d8:60:a6:20:3e:
68:4e:fe:38:f6:1e:b7:24:80:67:73:d2:64:cd:9b:8c:74:c5:
f6:1e:6b:10:f3:94:8e:57:6d:94:cc:c2:85:b6:cb:b7:8f:64:
be:6e:07:7c:55:8d:ce:7b:ef:47:ef:8e:5f:15:ea:5c:a5:e3:
c0:3c:a3:63:6b:11:e9:cd:5a:21:4f:1a:d0:3e:94:39:3c:04:
9e:70:6e:8b:f1:23:7c:18:9a:03:66:fa:45:5b:ba:7b:2e:1d:
a6:0b:8d:4c:f5:ec:8f:e2:dc:c8:de:86:5d:a7:3e:86:19:58:
4a:c1:3e:a2:57:41:e3:3a:af:63:e4:f2:98:4a:b3:19:8e:94:
ba:ca:35:31:a5:99:c5:c1:62:dd:fa:bb:f3:20:5b:7a:42:21:
b9:2f:f4:8a:aa:11:16:e8:26:d5:56:a4:51:3d:07:89:28:13:
6f:39:bb:64:d3:3e:32:38:af:e8:38:4c:ef:9a:dc:9f:f2:20:
22:bc:7c:5d:7d:6c:10:df:68:dd:68:08:5f:5c:32:32:da:4f:
35:51:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:04 2025 by rpki-client