Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/XHTVlBNL2E4qjQNiJZhfddytPyc.roa
File: XHTVlBNL2E4qjQNiJZhfddytPyc.roa (raw, json)
Hash identifier: MidoFhaToR9htSIpZGuDPTaDv5xJ6ZTM/6vNgBH/fIw=
Subject key identifier: 5C:74:D5:94:13:4B:D8:4E:2A:8D:03:62:25:98:5F:75:DC:AD:3F:27
Certificate issuer: /CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Certificate serial: 781F
Authority key identifier: 48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/XHTVlBNL2E4qjQNiJZhfddytPyc.roa
Signing time: Mon 31 Jan 2022 15:54:02 +0000
ROA not before: Mon 31 Jan 2022 15:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 93.177.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30751 (0x781f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Validity
Not Before: Jan 31 15:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c74d594134bd84e2a8d036225985f75dcad3f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:fa:b7:87:2a:67:e0:50:ec:04:c2:e0:7b:
1b:c4:e3:65:ac:45:56:8a:1d:ad:71:a5:38:e7:2b:
1d:a0:60:e2:7d:4a:49:d0:12:42:6b:ab:81:f6:de:
a6:70:3e:5d:65:61:e4:e0:5a:54:c5:e4:b7:ec:bc:
ac:23:eb:2e:87:3b:1c:b5:3e:96:0c:2c:07:ff:9a:
1a:1d:71:8c:99:89:83:c4:2e:0c:94:5c:b0:e5:c6:
64:c0:69:93:24:c6:93:ca:ed:1b:41:39:d6:2a:fe:
39:ef:60:c7:93:7e:f6:1d:2b:2e:bf:4b:3b:e7:5d:
ce:ce:2b:9e:79:26:18:f0:6a:38:4f:9e:6c:68:8a:
b3:e2:09:4f:38:55:4d:01:a6:1e:cc:7a:d9:56:68:
1d:c3:4b:94:ba:7c:62:fe:6c:8e:69:b4:06:98:1b:
3b:41:14:ab:ad:5a:fa:b6:9b:6f:6d:87:c3:78:23:
86:7a:25:d0:e8:6b:80:2a:59:ca:a7:ec:13:14:1c:
67:af:62:5a:25:d5:25:ac:d2:f4:92:31:81:e8:b9:
b1:f7:30:f9:d7:bf:51:ef:1f:f9:46:0b:7f:28:cd:
ec:87:ac:35:d3:83:83:35:e5:bd:2f:fc:c1:6f:49:
38:9e:29:91:ce:52:f5:e5:84:64:c1:c9:a9:ff:7e:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:D5:94:13:4B:D8:4E:2A:8D:03:62:25:98:5F:75:DC:AD:3F:27
X509v3 Authority Key Identifier:
keyid:48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/XHTVlBNL2E4qjQNiJZhfddytPyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.105.0/24
Signature Algorithm: sha256WithRSAEncryption
49:94:96:0b:90:aa:0b:f5:65:8e:6e:5e:f2:cc:2f:20:25:6d:
d8:c9:a1:46:60:68:f2:73:0b:48:ed:30:a5:8a:92:18:be:b6:
32:b6:ce:88:0b:40:c0:54:74:66:54:67:37:65:3f:ac:86:02:
d0:57:9e:3d:c0:70:c7:26:53:17:b8:74:5f:08:23:30:a3:c0:
1e:1d:1a:d0:27:d1:19:25:9f:ff:8e:33:42:eb:10:c2:99:89:
20:e2:6f:04:30:4b:96:8f:00:c5:9a:ef:9b:ea:e4:f6:0c:e9:
d7:c3:ef:f7:83:c0:85:67:69:49:41:7d:4a:96:fd:20:89:36:
eb:b9:91:f9:93:e2:7d:51:e4:2e:bf:e1:ae:12:78:b7:b0:a3:
01:40:89:6f:da:db:c6:50:2b:08:25:f0:13:ae:07:fd:23:fd:
50:87:bb:02:c5:3d:51:63:74:dc:ab:fd:19:db:6b:81:75:99:
b8:d2:4e:ca:81:f6:a7:e0:24:e9:9b:4e:b3:37:9c:e2:d9:61:
7a:f9:e2:05:13:14:80:b9:43:a0:5a:16:88:b6:a2:63:5a:c8:
ef:a4:81:8d:94:68:c2:83:33:66:37:ed:9a:5b:1c:86:86:e2:
30:8e:c9:ad:1a:d1:1a:fd:14:f8:83:ee:a9:d5:d5:0c:6f:df:
19:dc:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:15 2025 by rpki-client