Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhmdbAg2m5pBqdtITC0j843StuU.roa
File: xhmdbAg2m5pBqdtITC0j843StuU.roa (raw, json)
Hash identifier: l9objA78/I4ythHnGoganLC8WJzTaJD87YP1bjrgKsQ=
Subject key identifier: C6:19:9D:6C:08:36:9B:9A:41:A9:DB:48:4C:2D:23:F3:8D:D2:B6:E5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2815015B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhmdbAg2m5pBqdtITC0j843StuU.roa
Signing time: Sat 01 Jan 2022 16:09:34 +0000
ROA not before: Sat 01 Jan 2022 16:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62366
IP address blocks: 146.158.76.0/23 maxlen: 24
95.46.1.0/24 maxlen: 24
93.171.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672465243 (0x2815015b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6199d6c08369b9a41a9db484c2d23f38dd2b6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:c8:d9:48:5e:5c:e5:f7:22:88:f6:e2:23:
91:34:a0:1d:d9:9c:5b:a6:70:2c:08:7c:86:55:20:
b0:7a:0d:c7:66:a3:78:bf:a2:07:8d:9a:da:b6:c9:
ad:67:85:29:db:9b:0e:8c:c8:65:b8:cf:29:e5:b2:
3b:d8:93:c5:82:51:0e:b6:87:b9:14:64:90:0e:60:
8b:10:88:49:85:86:a5:41:40:0d:7d:b2:37:06:96:
2f:7b:89:d7:ee:b8:d8:6a:ee:86:5b:8f:7f:ca:6b:
d5:28:7b:d9:52:4b:34:79:44:97:0d:3c:cf:69:7c:
69:4b:2c:69:f6:2e:88:07:48:6c:cc:be:3d:fc:b2:
04:27:cf:f6:50:e2:c4:00:53:69:f7:a6:ee:de:b0:
ab:49:c7:d2:aa:e4:7b:31:5e:c9:bc:3b:09:49:b7:
c3:f3:19:25:13:c9:10:f1:3c:59:ba:6f:0a:cf:b2:
2d:b1:d7:87:42:5e:91:8d:b3:c2:22:de:f0:a9:ce:
8e:2e:fa:b1:cd:95:02:c0:00:73:3d:b5:f9:0a:92:
1a:13:bd:79:0a:c9:3f:0e:72:c5:51:6d:67:3e:82:
46:54:95:ca:54:b4:8a:b1:8b:4c:de:4f:81:a6:ca:
a3:26:c5:4c:79:6e:e0:6d:2a:75:f3:49:10:ab:d9:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:9D:6C:08:36:9B:9A:41:A9:DB:48:4C:2D:23:F3:8D:D2:B6:E5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhmdbAg2m5pBqdtITC0j843StuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.135.0/24
95.46.1.0/24
146.158.76.0/23
Signature Algorithm: sha256WithRSAEncryption
30:f9:3a:5d:90:91:ea:57:a6:a8:3e:41:c5:b1:2d:5f:db:ad:
13:a7:3c:3a:4e:14:cf:97:72:77:8e:b9:71:4d:4a:39:62:de:
b0:64:5e:d7:10:83:38:03:c1:ad:06:d7:5f:59:34:07:ff:ec:
c2:19:d8:6d:20:bb:09:17:c7:ca:23:ca:38:43:ef:a3:37:a5:
b9:a9:3f:20:1a:69:43:0a:ca:ac:e6:cb:59:b5:5c:34:ed:61:
80:61:02:af:d1:51:7c:86:cf:d2:60:c6:af:b4:4f:48:66:02:
ae:3f:cb:b0:7a:a1:ba:e1:d7:0f:06:84:a5:47:52:8c:ab:86:
fd:5d:c1:7b:9a:ae:66:19:78:17:69:ce:58:37:d7:f4:2c:72:
ce:6f:b5:ff:ae:37:63:33:ab:c9:22:04:7e:45:b8:6a:ef:77:
20:43:d8:ee:c0:1a:3a:46:94:a0:0f:88:09:4b:f6:3d:80:4e:
be:46:0e:e2:ed:b1:05:07:2e:cf:62:c5:c7:c7:a3:08:a9:df:
c4:0f:9b:be:e1:59:cf:9a:28:34:4d:86:9e:33:9d:45:e0:64:
f9:5f:32:a9:fe:f4:c5:7c:5d:1d:63:8f:5c:ab:fb:2c:55:21:
41:ff:98:5a:fb:a6:1e:a5:4f:66:c5:06:9a:91:d3:ca:24:c5:
3a:af:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:47 2025 by rpki-client