Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xxN6Hyluw98J5xWSMOSr1nHb-8k.roa
File: xxN6Hyluw98J5xWSMOSr1nHb-8k.roa (raw, json)
Hash identifier: FIQWeEBhUXl8INCFmTijCDb6jd9dgp99TFXk5qK4x7c=
Subject key identifier: C7:13:7A:1F:29:6E:C3:DF:09:E7:15:92:30:E4:AB:D6:71:DB:FB:C9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27B2CC8F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xxN6Hyluw98J5xWSMOSr1nHb-8k.roa
Signing time: Sat 01 Jan 2022 16:08:38 +0000
ROA not before: Sat 01 Jan 2022 16:08:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49963
IP address blocks: 146.120.176.0/22 maxlen: 22
93.170.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666029199 (0x27b2cc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7137a1f296ec3df09e7159230e4abd671dbfbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:b0:35:f2:83:ba:c8:4b:f4:8f:fa:c8:75:
8f:47:09:9a:18:88:df:fd:82:86:40:5c:79:74:16:
20:d5:e7:e4:06:02:e1:af:24:d1:d2:77:0b:5f:61:
64:5a:b6:10:39:b8:ca:b4:ac:98:34:32:09:e0:ca:
ec:4f:8d:0d:7b:1f:50:d2:9c:6e:36:53:e4:21:64:
50:05:4e:44:f3:ea:63:0b:f0:01:f0:88:f6:7c:4f:
29:30:f8:b7:5e:b8:82:db:70:87:63:39:12:8b:e1:
d4:9b:ef:6d:2c:9f:87:15:84:8e:f0:63:34:a9:49:
c5:3f:2e:6d:15:59:ed:e2:0d:b2:d3:b8:7e:04:d5:
16:cd:fb:ed:ca:14:2f:cc:d3:90:63:da:d3:8f:a0:
cd:fa:d6:d4:0f:f7:41:08:4b:b5:be:b2:e8:a4:cf:
b8:7d:f6:6f:b5:fe:79:7b:ab:c4:b3:f9:cf:29:75:
2d:ce:57:e6:8a:44:57:55:8f:43:f4:c3:28:4e:31:
ed:bf:9f:6e:31:30:4e:6c:6e:ad:7d:98:5c:62:62:
49:8b:0d:f1:fe:1e:82:b2:83:bd:74:29:cd:b9:e5:
59:06:9c:ed:27:c5:52:ee:f4:52:cf:b7:52:ca:c8:
78:71:31:f1:43:49:e9:39:0f:62:27:bf:6e:f5:a3:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:13:7A:1F:29:6E:C3:DF:09:E7:15:92:30:E4:AB:D6:71:DB:FB:C9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xxN6Hyluw98J5xWSMOSr1nHb-8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.108.0/22
146.120.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ce:5e:42:96:a2:96:78:68:38:04:4f:b4:ff:b6:b2:20:a1:
da:61:df:08:0e:aa:ab:70:5f:7f:07:06:b4:30:b9:64:1f:c9:
a0:89:19:4b:4b:3d:8c:12:9e:56:f6:6d:47:71:d5:45:d2:e2:
57:af:7b:2f:e1:3d:1a:31:e8:a5:e0:4b:fe:be:1b:be:b4:00:
b8:1a:c0:8e:d2:3a:7b:df:12:5e:b5:27:77:3a:f6:b8:24:5e:
bc:e8:48:03:8c:23:05:1b:05:9d:02:85:17:f9:4a:2a:c6:a7:
48:75:34:97:ed:86:ca:a8:f9:de:3b:6a:d2:30:c4:1f:d8:8a:
ad:83:bb:32:27:5d:a2:c9:89:ff:3a:5e:67:8f:cb:08:2b:e0:
c9:22:02:0e:7d:9e:71:c1:f8:40:07:a5:f6:4a:25:04:80:4e:
42:f9:37:d7:61:c4:d6:2e:ea:61:20:26:69:08:d7:e2:93:d2:
7c:4b:83:62:59:20:6d:c0:58:01:15:0e:f8:23:c2:06:e2:2b:
4a:b3:75:fc:55:7c:20:02:d2:79:86:86:85:56:6e:07:19:a5:
a8:b2:91:96:ef:37:08:be:32:75:35:fa:1b:e9:12:ab:13:a5:
8e:07:d3:fd:96:a9:0f:c2:44:1b:04:a3:93:ac:e1:19:71:16:
9e:72:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:41 2025 by rpki-client