Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uoRmXImmo-6kmuwCxXI_6n1thzo.roa
File: uoRmXImmo-6kmuwCxXI_6n1thzo.roa (raw, json)
Hash identifier: iVOtwVUmQEjW/7GIbxvoTNhqF5l64NIihs76/qVqCWc=
Subject key identifier: BA:84:66:5C:89:A6:A3:EE:A4:9A:EC:02:C5:72:3F:EA:7D:6D:87:3A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095C176DF04FFD54738D225370B1B6C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uoRmXImmo-6kmuwCxXI_6n1thzo.roa
Signing time: Mon 02 Jan 2023 03:45:40 +0000
ROA not before: Mon 02 Jan 2023 03:45:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212913
IP address blocks: 93.170.123.0/24 maxlen: 24
95.46.114.0/24 maxlen: 24
95.46.8.0/24 maxlen: 24
31.148.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:c1:76:df:04:ff:d5:47:38:d2:25:37:0b:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba84665c89a6a3eea49aec02c5723fea7d6d873a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:e0:fa:42:3a:d5:42:06:e5:7c:94:bf:0f:
cb:4f:f3:34:ce:15:18:3d:28:55:0b:de:0c:ce:64:
5d:4a:df:0a:d8:77:c1:aa:96:af:b8:17:5e:86:8d:
32:6f:ef:a6:dd:eb:f3:95:9e:32:ce:6d:23:d2:b9:
e2:e8:c4:35:05:06:c7:50:5c:df:06:36:8a:c3:33:
13:56:21:24:83:ea:a1:4e:09:ce:a9:ee:0f:b2:6d:
a7:11:95:69:0d:3d:93:42:e2:19:f1:27:67:79:fb:
55:35:b7:19:fb:50:97:4b:cb:99:89:55:2f:20:40:
47:bf:a1:0e:fa:28:67:bb:34:76:f1:ff:95:f8:d2:
a1:2b:32:ce:2a:b5:fa:2f:29:79:2c:1a:2e:25:a5:
56:c9:bc:ef:fa:55:d2:40:de:73:be:b4:fa:1f:15:
07:11:89:84:04:0b:8f:2f:3c:2b:0d:f7:81:5d:4e:
20:d9:7b:57:8c:4d:7c:73:2c:9e:47:c7:31:2c:11:
48:b2:92:41:7b:17:d5:75:36:3b:52:96:f5:52:58:
03:fb:47:8d:60:81:20:2f:72:fc:a0:df:cd:25:2d:
96:4a:11:f0:5d:6d:30:84:bf:61:45:69:e9:37:7f:
7c:9e:8f:e1:44:8e:b3:57:26:fc:3f:36:83:ec:8b:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:66:5C:89:A6:A3:EE:A4:9A:EC:02:C5:72:3F:EA:7D:6D:87:3A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uoRmXImmo-6kmuwCxXI_6n1thzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.99.0/24
93.170.123.0/24
95.46.8.0/24
95.46.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:25:fb:28:d3:99:79:0f:34:3f:f8:d8:87:0a:c0:f5:72:34:
97:a7:37:68:7d:05:0a:67:dd:38:71:0e:0b:27:61:ce:bd:3e:
fc:a3:9f:5a:6c:2e:4e:a6:e4:dd:a9:f4:0b:54:a0:18:57:32:
ae:34:53:e1:8f:88:54:eb:f4:52:7a:d8:7a:48:5a:12:ef:42:
fb:d6:c2:87:a8:6a:76:ad:6e:35:a0:fb:e8:66:b4:04:c3:c4:
af:7d:4b:ad:5f:b3:29:15:4c:52:fe:72:3f:01:3a:e7:9b:08:
77:08:40:56:75:f2:f2:73:02:59:bf:59:84:4b:1d:d4:cc:68:
12:7e:9a:67:2b:0a:31:8e:d1:c1:8d:f0:17:43:96:d4:96:de:
41:19:45:b7:32:57:45:a5:22:a6:bb:16:0e:64:75:79:0a:75:
b3:d3:43:44:4e:89:6e:36:f9:32:4a:d5:f8:de:7f:84:b0:f3:
d0:64:7d:0f:64:a7:a2:29:6d:9d:5e:a3:a3:9e:9e:44:3f:d1:
30:69:56:eb:03:4b:9d:b6:0d:85:2f:e9:24:be:27:fa:43:b3:
99:8f:5c:83:53:72:43:c7:1d:74:ef:99:63:7f:4b:c4:0b:4d:
9c:b3:10:85:71:ea:e4:b8:ca:1b:00:75:07:35:f2:94:c9:71:
d2:de:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:19 2025 by rpki-client