Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tzSCF4EpPOUUiA4t27tmCHDkCRA.roa
File: tzSCF4EpPOUUiA4t27tmCHDkCRA.roa (raw, json)
Hash identifier: jVFzbv+EstptrC06zljTrPWEtOzCu6qPljIe8AZT0AE=
Subject key identifier: B7:34:82:17:81:29:3C:E5:14:88:0E:2D:DB:BB:66:08:70:E4:09:10
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8BC27776A5946773454F39D07657
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tzSCF4EpPOUUiA4t27tmCHDkCRA.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16066
IP address blocks: 93.170.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:c2:77:76:a5:94:67:73:45:4f:39:d0:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b734821781293ce514880e2ddbbb660870e40910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:44:ee:18:18:b5:6e:86:9c:8f:6a:81:93:
30:f4:29:b4:9b:2b:fb:be:08:0d:8e:ba:43:de:30:
b9:5b:98:51:be:af:ba:fc:28:5d:c5:6e:60:bc:02:
0f:94:c1:d8:d1:55:18:f2:bc:64:1f:c8:2a:43:79:
b9:1b:03:96:3d:1d:34:26:13:19:76:b7:fb:72:b2:
3d:c2:30:5d:7e:85:1f:76:35:43:46:30:fd:75:82:
b0:1f:ae:c0:77:80:13:14:4d:dd:e5:1b:ce:4b:21:
7b:5d:c5:10:ef:54:ad:01:11:e3:a8:a8:9a:da:a9:
e0:bd:1e:db:cf:87:e9:08:21:5a:89:cf:6b:17:05:
a8:52:70:d2:7f:35:d5:58:14:b9:ed:10:cb:e0:14:
83:e6:cc:b3:96:b1:77:0e:e8:05:22:92:46:9d:68:
2d:a9:ec:11:8c:2b:50:90:08:ce:24:11:87:57:ed:
3c:b7:2f:6e:b9:9d:35:f7:fc:ec:78:c5:a8:3e:9f:
a1:92:c0:3d:c3:1d:fa:12:e6:11:ac:e7:d7:26:ad:
9e:b0:cd:be:a4:c7:17:49:d5:58:0e:48:cb:52:d8:
47:17:d0:29:c0:13:8c:37:4b:f3:13:ed:1f:da:e9:
22:f2:6f:13:f1:dc:22:0b:30:d3:c6:3b:e8:5f:34:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:34:82:17:81:29:3C:E5:14:88:0E:2D:DB:BB:66:08:70:E4:09:10
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tzSCF4EpPOUUiA4t27tmCHDkCRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.81.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6a:7e:f2:09:95:3c:b3:56:9a:2d:a6:54:4a:fd:c4:00:f7:
13:94:ed:a9:ba:6b:41:20:21:97:23:43:68:4b:7e:96:a7:91:
dd:23:b4:3e:2a:f5:54:98:36:91:bb:df:bb:71:32:0e:21:4b:
88:92:f3:dc:5f:b2:af:78:74:cb:7c:5a:68:69:cd:fe:86:4b:
2e:24:05:57:4f:44:d9:ca:c0:f1:b7:53:29:44:a8:43:3e:fa:
e9:47:39:e2:86:b6:b9:a8:69:a0:7f:95:bb:ee:7c:ce:1b:01:
03:0a:75:6c:19:70:ec:8c:84:88:f9:26:ff:ba:70:f9:d9:c8:
96:a8:8a:dc:25:48:a8:de:1a:a2:e5:59:93:1a:48:41:05:fb:
28:93:78:fa:70:04:91:96:f9:26:96:fd:89:76:67:d0:35:6c:
3e:fb:19:bc:b2:95:46:e9:67:0f:ff:c2:fa:cb:99:5a:44:c7:
d1:f1:3a:5d:74:24:a2:17:9d:1b:46:08:69:e2:d5:83:e5:68:
d7:62:ab:ba:79:af:44:08:f3:ef:cb:5f:00:49:a8:e3:c4:99:
ac:2f:f8:c9:86:fc:ea:9e:ca:26:8a:5e:f4:30:18:54:20:31:
71:1b:e4:45:b0:fc:be:10:e0:2b:3c:af:a1:ad:d7:ee:9e:02:
9b:e5:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:38 2025 by rpki-client