Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhKxNSQ3Nr8dOn2Qi2kpyjVb6F0.roa
File: xhKxNSQ3Nr8dOn2Qi2kpyjVb6F0.roa (raw, json)
Hash identifier: TpAhkhf6Ow24t/7jpweUeND+iNL1kH4L6VoQNONRDxE=
Subject key identifier: C6:12:B1:35:24:37:36:BF:1D:3A:7D:90:8B:69:29:CA:35:5B:E8:5D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27CB0C46
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhKxNSQ3Nr8dOn2Qi2kpyjVb6F0.roa
Signing time: Sat 01 Jan 2022 16:08:52 +0000
ROA not before: Sat 01 Jan 2022 16:08:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56527
IP address blocks: 93.170.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667618374 (0x27cb0c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c612b135243736bf1d3a7d908b6929ca355be85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:f1:76:b8:68:4a:21:9f:56:37:3c:80:53:
1b:73:be:07:d7:0b:93:48:cf:7c:3c:d8:3e:f9:f0:
e3:8e:6c:d4:6b:73:5c:6e:d3:be:55:aa:72:d2:22:
7d:c3:66:18:93:ea:0d:6a:11:56:07:f4:b0:8c:69:
cb:dc:56:31:01:5f:bc:83:51:94:bc:ad:a7:55:ec:
fd:95:26:70:ea:8d:60:b4:6c:74:e3:88:b7:0a:e0:
cd:2f:d7:e3:e5:75:66:52:de:ef:17:8f:3d:8c:1c:
e1:7d:94:ba:69:ac:fc:02:4e:20:aa:9d:09:47:08:
89:78:e1:89:b8:76:8e:11:e5:87:e5:9c:a9:52:ee:
7f:67:37:c3:23:cc:7b:78:5c:1d:6b:92:f2:f8:d5:
16:82:9f:3a:be:03:46:01:33:0c:4d:a1:ec:65:69:
bf:78:a7:ca:3a:cc:ba:a3:f8:df:f4:f0:03:66:c4:
b3:0e:27:b2:76:a8:b4:62:05:82:ae:92:5e:d5:14:
43:9a:73:bf:b8:8c:61:27:5f:48:61:45:f8:84:2e:
52:f5:57:56:96:55:a7:a2:f8:21:cd:96:ca:5f:df:
d7:9e:e7:37:89:9c:41:08:e0:e0:ad:28:2d:94:92:
b7:8a:7e:5b:e5:79:d7:d4:71:c5:92:99:ed:b9:c2:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:B1:35:24:37:36:BF:1D:3A:7D:90:8B:69:29:CA:35:5B:E8:5D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhKxNSQ3Nr8dOn2Qi2kpyjVb6F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.80.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1d:a7:68:7b:ba:f9:a9:35:7d:66:15:54:68:d0:9d:02:76:
aa:48:37:c0:60:d8:65:01:8a:e0:82:00:e0:f5:af:91:13:30:
70:39:e9:ce:d6:ac:a2:d3:92:42:41:6a:af:f2:16:6e:e4:69:
36:b5:6a:3a:b7:7e:f7:eb:62:c0:f6:ed:a7:92:a6:3a:26:01:
69:ab:e7:16:03:fc:2e:39:a0:ec:30:48:47:9d:a6:21:db:cd:
f1:b0:fb:79:39:ac:25:40:65:cb:5e:80:f6:26:18:2d:aa:f5:
75:fe:d5:53:00:de:c3:37:5d:b9:7d:35:42:d1:5e:aa:5d:4f:
44:44:a9:f1:bf:ea:8d:94:6f:c6:03:60:44:b7:82:33:54:4a:
7d:85:b0:3a:81:bc:df:a5:ac:24:29:ab:69:8d:bf:42:2f:75:
de:19:7e:e8:fd:d6:e0:41:a2:71:67:cb:bc:36:02:5a:f0:cb:
bc:51:8e:10:6e:4a:db:23:91:8c:8a:f6:16:49:d5:bd:84:1c:
74:00:e6:99:60:3e:ed:4f:56:d4:a5:01:70:e4:56:74:91:d0:
59:67:b8:2a:70:eb:53:ad:e1:8b:14:18:f0:53:d5:63:99:7c:
1c:cb:22:22:31:70:0c:62:a2:b7:7b:0b:0f:b6:3c:19:17:e4:
c0:e4:fd:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ8sMRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDg1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzYxMmIxMzUyNDM3
MzZiZjFkM2E3ZDkwOGI2OTI5Y2EzNTViZTg1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnr8Xa4aEohn1Y3PIBTG3O+B9cLk0jPfDzYPvnw445s1Gtz
XG7TvlWqctIifcNmGJPqDWoRVgf0sIxpy9xWMQFfvINRlLytp1Xs/ZUmcOqNYLRs
dOOItwrgzS/X4+V1ZlLe7xePPYwc4X2Uumms/AJOIKqdCUcIiXjhibh2jhHlh+Wc
qVLuf2c3wyPMe3hcHWuS8vjVFoKfOr4DRgEzDE2h7GVpv3inyjrMuqP43/TwA2bE
sw4nsnaotGIFgq6SXtUUQ5pzv7iMYSdfSGFF+IQuUvVXVpZVp6L4Ic2Wyl/f157n
N4mcQQjg4K0oLZSSt4p+W+V519RxxZKZ7bnC/rsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTGErE1JDc2vx06fZCLaSnKNVvoXTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L3hoS3hOU1EzTnI4ZE9uMlFpMmtweWpWYjZGMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2qUDANBgkqhkiG9w0BAQsFAAOC
AQEAJB2naHu6+ak1fWYVVGjQnQJ2qkg3wGDYZQGK4IIA4PWvkRMwcDnpztasotOS
QkFqr/IWbuRpNrVqOrd+9+tiwPbtp5KmOiYBaavnFgP8Ljmg7DBIR52mIdvN8bD7
eTmsJUBly16A9iYYLar1df7VUwDewzdduX01QtFeql1PRESp8b/qjZRvxgNgRLeC
M1RKfYWwOoG836WsJCmraY2/Qi913hl+6P3W4EGicWfLvDYCWvDLvFGOEG5K2yOR
jIr2FknVvYQcdADmmWA+7U9W1KUBcORWdJHQWWe4KnDrU63hixQY8FPVY5l8HMsi
IjFwDGKit3sLD7Y8GRfkwOT9qQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:56 2025 by rpki-client