Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wJHgSAav_5YScRa5uXT6NNq0ZE0.roa
File: wJHgSAav_5YScRa5uXT6NNq0ZE0.roa (raw, json)
Hash identifier: bYz4lP6jIFYQ+Q5ag8cfKWKe4TkZ27yRjMTxk26psOs=
Subject key identifier: C0:91:E0:48:06:AF:FF:96:12:71:16:B9:B9:74:FA:34:DA:B4:64:4D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 285620C0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wJHgSAav_5YScRa5uXT6NNq0ZE0.roa
Signing time: Sat 01 Jan 2022 16:10:16 +0000
ROA not before: Sat 01 Jan 2022 16:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210778
IP address blocks: 93.170.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676733120 (0x285620c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c091e04806afff96127116b9b974fa34dab4644d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:fe:c5:00:be:dd:6c:bb:be:e9:1c:8a:c6:
c0:e9:d7:4d:5a:23:75:7e:0c:a0:96:72:85:91:0c:
a2:5d:c4:99:72:d8:54:59:88:d2:16:1c:5c:85:11:
d1:9b:97:8a:f2:b7:0a:03:9d:dc:5c:44:5e:f5:70:
87:b6:40:01:b1:36:93:b8:32:dc:fd:e0:66:72:29:
50:7a:34:01:71:ef:f1:e9:63:9e:8f:b8:fe:a1:95:
7f:2e:f6:d2:68:68:9d:81:c3:7a:73:84:07:fb:4f:
11:ef:bc:5d:5e:77:13:d7:af:02:01:3c:82:71:6a:
ad:be:36:4e:69:c5:2d:38:c9:62:74:95:f9:1b:5b:
20:ef:26:20:17:9b:aa:c0:9c:65:c5:f1:1f:2e:6f:
e2:88:2f:bd:ae:d4:e1:dd:76:29:70:e8:3e:f0:8e:
89:54:92:36:51:8a:a7:21:be:45:3f:30:73:d3:fd:
2d:ef:14:2b:1f:3a:5b:fb:58:31:27:b5:70:b7:24:
19:70:56:8e:10:25:90:47:58:74:24:3d:17:9e:8a:
2f:38:fe:40:35:a6:46:ed:42:2a:d7:9d:08:f7:37:
1e:4a:b4:c1:ea:cc:be:8f:8b:51:75:c6:db:94:e4:
49:c9:bc:d0:b3:c8:a8:22:c1:6e:e5:ca:b9:c0:5a:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:E0:48:06:AF:FF:96:12:71:16:B9:B9:74:FA:34:DA:B4:64:4D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wJHgSAav_5YScRa5uXT6NNq0ZE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.112.0/23
Signature Algorithm: sha256WithRSAEncryption
42:25:41:18:d8:cf:c2:a0:84:ad:92:8f:17:4b:e0:63:9e:0c:
b0:66:1c:eb:c8:17:85:59:20:56:a5:52:75:6f:89:2e:e7:21:
3a:d7:a3:dd:30:93:9e:cd:8a:a6:2c:c2:dd:26:61:31:f2:7b:
a6:eb:f5:21:15:bc:28:26:a9:79:1b:64:16:bb:72:b3:95:0b:
d1:50:7d:87:0d:3c:d7:46:32:5b:b7:e0:29:3d:48:37:b2:88:
ee:1a:45:fc:e0:48:e2:c4:68:e8:e1:12:6b:ef:fa:16:e8:52:
f7:2a:5c:16:44:4d:53:b6:4e:b1:41:c1:ed:29:32:1c:46:ee:
55:46:91:b8:20:59:dc:e7:ad:c6:3d:9d:e8:33:62:e2:6c:69:
eb:7a:d1:93:f2:c5:d7:fb:ed:05:64:bb:9c:0d:a3:80:c0:4e:
99:ca:df:26:9a:87:ee:96:b2:48:97:e5:3e:8a:55:de:31:b7:
4e:43:25:21:48:c7:3e:cb:bc:ac:b9:90:63:46:0f:27:85:24:
a9:1c:a9:66:cd:73:f8:ad:6a:e4:f2:92:f3:ce:4e:25:91:01:
46:53:95:6c:90:99:9b:88:c6:9b:fb:4c:84:15:f0:40:3f:4f:
fe:30:39:c3:bf:c0:18:5d:e5:a9:6a:1d:f3:22:eb:28:ae:b8:
35:97:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:05 2025 by rpki-client