Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxzQIfC_U6eRDrbnBG5i3Tp83zc.roa
File: wxzQIfC_U6eRDrbnBG5i3Tp83zc.roa (raw, json)
Hash identifier: yYDI3KX2pcSm6nwtm7bWxDf5Ug6gZ08JKlXrmuYi7ys=
Subject key identifier: C3:1C:D0:21:F0:BF:53:A7:91:0E:B6:E7:04:6E:62:DD:3A:7C:DF:37
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425900D79C7AAC1D2914EF248B1BF7FDC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxzQIfC_U6eRDrbnBG5i3Tp83zc.roa
Signing time: Thu 02 Jan 2025 05:49:45 +0000
ROA not before: Thu 02 Jan 2025 05:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212303
IP address blocks: 93.170.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:0d:79:c7:aa:c1:d2:91:4e:f2:48:b1:bf:7f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c31cd021f0bf53a7910eb6e7046e62dd3a7cdf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:1e:ba:ff:2b:e7:8b:13:20:43:97:83:f1:
aa:7d:cf:96:e7:4e:78:ff:5a:6f:94:76:30:87:e3:
8e:b8:42:12:09:a6:58:82:4b:ab:1a:1d:c0:34:3d:
76:e3:c4:a5:0e:8d:2c:2e:7d:33:ba:47:c9:de:a3:
12:2e:51:8b:b4:97:5a:95:99:1b:b5:29:7d:5d:60:
e8:e1:9c:68:03:a6:40:0d:84:03:64:d1:b8:1e:ec:
a0:83:85:48:0e:c9:09:28:11:4e:e6:49:ca:43:27:
42:c0:80:76:33:83:9d:51:40:91:dc:19:94:ea:8a:
3a:d2:d8:29:3c:9f:b8:b6:98:5c:4d:ce:bc:91:c1:
89:5d:2e:29:a0:4c:8f:b6:7b:ac:1c:2b:2e:88:d8:
7b:06:b3:4a:66:d6:db:1a:0a:8e:fe:1d:cd:1e:9d:
49:3b:4e:5f:9c:13:80:24:9c:e0:34:0c:a5:1b:32:
25:fe:f1:33:97:53:75:87:f7:35:89:34:57:99:de:
b9:5e:43:b6:97:47:ba:2d:39:2e:13:7d:3f:17:f7:
f2:2a:9b:47:fb:91:b2:3c:82:d3:60:a8:b8:9b:4d:
fd:e6:24:1a:58:9c:ac:ec:44:49:6e:eb:34:b9:6f:
f5:06:48:aa:00:4e:57:30:84:1f:39:2e:a1:36:af:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1C:D0:21:F0:BF:53:A7:91:0E:B6:E7:04:6E:62:DD:3A:7C:DF:37
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxzQIfC_U6eRDrbnBG5i3Tp83zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:11:b3:ee:3a:0a:00:72:14:83:a2:27:41:86:e6:9b:0d:02:
8e:d7:ad:08:82:bf:72:f6:28:7c:f0:8e:24:4b:18:31:25:1e:
a6:99:4e:b3:79:7b:7d:0c:7d:a4:8c:61:95:19:9f:de:35:fd:
77:17:38:15:8a:2c:29:e7:7d:44:b1:26:26:61:69:c5:d7:74:
2c:62:4b:b9:f9:2a:68:83:22:58:b4:d4:4c:ae:63:f5:5e:a5:
93:5c:4d:0b:82:e9:59:b9:99:9e:67:af:95:4a:40:20:85:9e:
db:5a:b0:8d:45:ba:cc:c9:82:df:de:06:20:f8:53:f2:a5:b7:
7d:11:ec:2a:3f:dd:6f:ea:5c:5c:b3:44:09:1f:36:73:c8:d3:
fa:ff:7d:d2:0d:e3:9f:43:01:32:7e:0f:04:cc:3b:f4:50:3e:
ed:d8:62:c8:54:21:5d:51:6d:e2:30:5a:73:77:b8:42:1b:a7:
d1:5e:d9:45:1c:94:31:47:fd:71:f7:c0:d4:40:90:4e:91:d4:
a6:b5:19:77:d7:d6:45:b5:39:dc:b9:61:31:07:b1:1b:8c:0c:
bc:ce:75:04:6f:be:c3:54:c5:e2:d5:bd:65:86:d6:8b:a8:6b:
fc:af:21:76:37:c6:b0:a9:56:38:a1:72:c6:7b:5a:c5:61:22:
3c:88:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:29 2025 by rpki-client