Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/y5slfcjsXu_q4jgXsdlqGZ5XRE8.roa
File: y5slfcjsXu_q4jgXsdlqGZ5XRE8.roa (raw, json)
Hash identifier: fihOJKHgua5TU4qRyIHaSmuHxPIvJrrGIDWxHiogyTM=
Subject key identifier: CB:9B:25:7D:C8:EC:5E:EF:EA:E2:38:17:B1:D9:6A:19:9E:57:44:4F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709514D520E3B7FA5053626806274023
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/y5slfcjsXu_q4jgXsdlqGZ5XRE8.roa
Signing time: Mon 02 Jan 2023 03:44:56 +0000
ROA not before: Mon 02 Jan 2023 03:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40983
IP address blocks: 93.170.216.0/24 maxlen: 24
93.171.231.0/24 maxlen: 24
93.171.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:14:d5:20:e3:b7:fa:50:53:62:68:06:27:40:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb9b257dc8ec5eefeae23817b1d96a199e57444f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:0a:6f:1b:35:70:5a:dc:32:23:f4:68:f9:
99:7e:cd:21:16:e5:70:a0:66:a9:f3:c5:ae:6e:84:
05:34:be:c1:a5:20:95:ae:fe:44:7a:65:50:c2:e9:
42:4b:00:24:d3:36:82:79:06:a8:f1:8a:55:67:21:
b7:b4:21:e7:86:0a:5f:c6:98:45:71:2b:da:69:38:
b8:ff:21:4f:72:95:5f:48:98:a5:2f:82:7b:f2:e3:
e7:4c:d7:6b:69:20:39:60:f2:4c:04:44:a9:e2:ac:
d2:6c:df:89:b8:5a:11:c8:70:83:a1:e4:92:be:32:
99:ac:44:24:af:9e:62:ed:dd:77:cd:78:23:a1:db:
3d:71:d2:d6:95:f4:6c:c3:4b:ad:e3:d9:2c:00:ed:
66:bd:87:31:90:f0:e1:23:95:53:cb:77:ba:71:5b:
e8:e7:a8:cc:8d:63:03:62:ad:2c:a0:d3:ac:7f:14:
49:0e:f0:1c:e9:ad:6b:9c:36:1a:3a:0a:67:bc:8f:
69:b4:f1:5c:3c:9f:69:9c:d6:c0:b7:99:73:b7:0f:
05:32:b8:b2:c9:58:7b:9f:80:ca:3c:30:96:5d:33:
6d:46:38:6e:15:6e:8f:3d:17:32:98:71:0c:ab:a5:
ca:e2:8c:6d:d3:d8:60:7f:88:ac:d5:28:9e:d1:c7:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:25:7D:C8:EC:5E:EF:EA:E2:38:17:B1:D9:6A:19:9E:57:44:4F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/y5slfcjsXu_q4jgXsdlqGZ5XRE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.216.0/24
93.171.231.0/24
93.171.245.0/24
Signature Algorithm: sha256WithRSAEncryption
30:06:0e:87:21:06:d2:a6:fc:11:78:bd:91:f1:e1:1f:ce:a9:
98:1e:10:45:c2:8f:32:7e:62:4d:34:60:5d:b4:88:0c:06:0f:
2f:9b:72:9a:ab:28:96:3f:3a:61:21:b2:80:51:cb:22:47:8a:
35:3f:31:d6:ff:21:67:29:25:47:29:c8:2b:90:03:e8:6d:fe:
00:12:50:f3:85:86:06:45:2d:10:b6:55:0f:ee:53:c9:b7:6e:
62:9f:00:38:f1:ad:2e:02:4b:b5:5c:c1:8c:0c:92:67:fa:b9:
2f:40:96:11:ad:c3:3f:63:6b:5a:ad:de:0e:9a:b8:e3:47:d6:
49:7e:f7:2f:10:66:e0:1a:b9:7a:f7:3b:6f:9f:3d:a8:c6:0d:
0c:03:6f:74:17:70:ef:26:2f:60:18:87:fb:89:16:c4:34:0f:
90:af:31:2d:7f:67:7e:07:3b:94:37:05:58:21:61:56:14:f3:
72:ce:f2:59:00:55:17:d5:73:89:0f:0f:f8:c7:2b:70:18:8a:
16:a4:b6:84:b7:53:78:63:63:f9:1b:d2:41:41:b0:ab:8d:c3:
c4:8c:be:58:7d:83:9e:4f:5f:7e:b2:4a:3e:b3:32:b0:07:be:
2f:19:ba:ba:e3:3b:8c:ab:5d:27:2a:0f:e5:e2:3c:17:c1:4c:
0c:b3:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:32 2025 by rpki-client