Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tqU2SFZQQTltVVZuYeFx6vELrKw.roa
File: tqU2SFZQQTltVVZuYeFx6vELrKw.roa (raw, json)
Hash identifier: iUGVHZtv3oMdWFo+FhUR+Aruwe4oOrkRt+2gklydcSA=
Subject key identifier: B6:A5:36:48:56:50:41:39:6D:55:56:6E:61:E1:71:EA:F1:0B:AC:AC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01955DE0AD930EA31AA7C84671D08A507433
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tqU2SFZQQTltVVZuYeFx6vELrKw.roa
Signing time: Mon 03 Mar 2025 21:19:20 +0000
ROA not before: Mon 03 Mar 2025 21:19:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204584
IP address blocks: 92.38.41.0/24 maxlen: 24
93.171.214.0/24 maxlen: 24
95.47.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:e0:ad:93:0e:a3:1a:a7:c8:46:71:d0:8a:50:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 3 21:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6a53648565041396d55566e61e171eaf10bacac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:ac:55:7c:59:d1:c7:4e:05:a5:6c:9e:b3:
2a:8e:2f:b5:5b:7e:0e:e1:2a:a4:cd:f3:f4:8d:51:
32:01:c9:3e:e2:d0:78:8e:80:95:b4:f8:cd:19:96:
b7:b3:4f:4d:57:5a:ef:2d:25:a1:0a:48:40:6c:36:
cc:75:38:57:89:63:1f:6d:5c:59:a3:e8:2d:73:5c:
91:2a:93:f9:71:70:ec:db:ee:1d:2c:95:0b:2f:10:
04:00:25:9d:dd:f1:de:77:14:6b:f2:45:9c:11:db:
ec:c9:55:ee:d2:ae:da:49:91:1f:e3:2e:a9:36:49:
56:02:24:43:47:1a:ed:7d:57:5b:f0:92:7c:9d:9d:
b4:97:3c:e2:0d:01:72:13:46:bb:75:84:e5:71:ad:
a9:09:30:9f:44:a9:fb:71:63:ef:53:74:74:4a:37:
57:eb:96:ce:d5:30:25:87:71:3b:26:b0:2a:c9:8f:
29:53:67:dc:97:a9:3c:28:ee:e8:60:c4:d1:af:aa:
40:d9:40:9f:c6:8c:f3:7f:24:d4:a3:b8:a6:25:7b:
00:17:d8:c8:af:cd:e0:17:3e:78:b4:38:79:0c:c3:
85:cd:f2:4d:5c:fd:c3:ae:e5:46:fa:e4:76:8a:01:
14:f2:6f:6e:a2:81:9c:bc:52:1a:5e:aa:25:48:ad:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A5:36:48:56:50:41:39:6D:55:56:6E:61:E1:71:EA:F1:0B:AC:AC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tqU2SFZQQTltVVZuYeFx6vELrKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.41.0/24
93.171.214.0/24
95.47.110.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:e0:7a:2a:c9:c4:8b:e6:9b:0e:19:b8:55:4c:82:b2:b8:5c:
9f:ba:96:11:e9:56:45:8a:73:6c:4d:ee:d4:76:9e:91:b5:88:
2e:d9:98:fd:8a:b3:03:7d:fb:28:aa:25:f2:2c:c3:82:34:2d:
26:82:b9:73:d0:4b:35:a1:a5:69:3a:9e:7d:65:5e:bc:ed:72:
28:68:73:e2:f0:ba:7a:20:e4:7e:4e:cf:c0:a8:f5:64:de:9b:
52:5a:eb:77:93:89:42:b8:7a:03:02:21:a2:92:32:57:da:0a:
f7:20:58:58:9f:2a:ae:49:6d:48:23:ff:0f:ee:1e:6b:2d:f9:
89:d3:61:4e:49:dc:4a:a5:56:16:22:a3:d0:2d:ed:75:0f:df:
27:4c:92:0e:6c:51:bf:60:48:79:c3:6e:7b:f2:96:69:74:af:
c2:f9:af:36:c0:2c:ba:5d:a6:e4:7f:9b:29:a2:12:4a:26:9c:
21:b0:34:b1:db:f8:15:21:4d:78:11:db:23:b1:19:69:91:53:
7d:7b:fd:30:33:8d:c5:e4:10:6f:74:8a:14:db:94:95:e8:20:
60:47:5f:74:d8:7f:25:59:af:73:74:a4:d5:5a:bf:fa:a0:9d:
a3:cf:4f:fc:7e:88:e9:68:f0:44:d3:03:65:e7:4f:1b:03:5b:
e7:8c:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:54 2025 by rpki-client