Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ygJ6WpvbCrvAm7XfjPFViqrPdxo.roa
File: ygJ6WpvbCrvAm7XfjPFViqrPdxo.roa (raw, json)
Hash identifier: +PTashea36pKcMXsh5W0ndk2oYh3akWJuj3ZOT8XzHI=
Subject key identifier: CA:02:7A:5A:9B:DB:0A:BB:C0:9B:B5:DF:8C:F1:55:8A:AA:CF:77:1A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27AF81D6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ygJ6WpvbCrvAm7XfjPFViqrPdxo.roa
Signing time: Sat 01 Jan 2022 16:08:36 +0000
ROA not before: Sat 01 Jan 2022 16:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49682
IP address blocks: 93.170.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665813462 (0x27af81d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca027a5a9bdb0abbc09bb5df8cf1558aaacf771a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:d1:6f:21:97:90:3c:29:26:5e:b2:3b:c0:
79:20:3e:62:40:83:9e:b2:59:f3:fc:4d:6d:d2:de:
9b:ca:ec:2b:16:4f:5b:19:e7:c0:4f:db:a9:fd:3e:
62:f3:7e:7a:4f:4e:f4:2a:17:97:c2:1a:4e:3f:c1:
60:22:6e:02:fa:79:51:ac:ff:ad:a3:66:a0:76:d5:
19:c5:e7:ea:82:69:5d:9d:dd:25:0a:4a:32:e1:70:
6f:4f:4f:28:6e:ef:92:52:68:85:8b:9a:01:25:97:
bb:af:e9:65:e0:06:ca:8d:23:b2:7d:0c:b1:25:6f:
b6:20:01:52:f4:b6:7f:a4:d3:c4:0c:3d:62:f5:44:
e8:de:4d:be:43:84:fc:c6:50:9e:fb:35:a7:84:fa:
aa:63:01:c2:1e:16:5e:b6:f3:53:43:93:e2:39:0c:
d9:f5:9d:04:33:02:9d:d7:19:0e:d7:f7:21:77:e0:
69:b9:08:5d:d2:b7:b1:8f:6b:e9:c3:f3:b7:90:fc:
cd:6f:01:ad:c7:ad:cb:e5:e6:5c:72:ea:5e:61:c0:
00:62:0a:bc:7a:a7:a2:c4:42:b1:e8:b4:fc:02:b4:
9d:14:38:cf:2b:aa:c9:b7:29:aa:2c:2d:63:2b:e2:
64:a7:d3:47:98:31:d6:1b:33:e9:39:17:40:b7:d8:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:7A:5A:9B:DB:0A:BB:C0:9B:B5:DF:8C:F1:55:8A:AA:CF:77:1A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ygJ6WpvbCrvAm7XfjPFViqrPdxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.34.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ca:ca:69:49:4d:54:67:38:e8:57:41:e1:04:2d:9b:8e:29:
f1:0a:d4:eb:93:f6:cb:36:31:a6:15:a6:ff:96:6f:3f:8f:06:
07:f4:d7:a2:c0:48:e9:18:40:81:64:d6:c0:63:a1:42:80:5d:
4f:02:9b:03:13:b6:8c:2c:38:43:8e:e9:fd:7d:2b:1f:1d:47:
6d:26:c1:4c:04:71:ad:cb:6f:25:ad:aa:c2:43:24:62:56:bb:
78:14:a6:06:77:ab:9d:7c:e2:a8:14:94:96:dc:35:30:a0:4b:
ff:53:a5:c2:49:66:f0:90:f1:31:4c:f8:c8:95:5d:6d:ff:5c:
23:eb:0a:8e:a1:71:a5:40:0b:3e:99:d8:85:91:78:38:6e:14:
1a:99:ae:f2:7a:f4:92:ad:cd:0a:fd:e8:5d:50:12:32:56:0d:
67:45:d5:2e:8a:6a:43:37:db:ad:60:da:d9:a8:06:b0:1b:59:
58:2c:6f:0d:93:a7:c3:80:9c:f5:75:39:d6:97:83:e0:19:a3:
85:86:63:54:42:b7:25:cf:58:5f:e7:fc:b7:3d:c4:d5:a4:58:
96:0d:c2:41:91:2c:97:e9:7f:be:b4:53:0f:76:e9:cd:10:b2:
f0:9f:43:60:b9:f8:10:37:69:f8:2e:41:5c:c3:2e:33:26:1d:
35:aa:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:30 2025 by rpki-client