Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0g00fuEp6ul_HUHHJF6FRk7WMy8.roa
File: 0g00fuEp6ul_HUHHJF6FRk7WMy8.roa (raw, json)
Hash identifier: Fw+7RqOAa74v0io3pemxp1mhP5quvCACfH+C/lpQdro=
Subject key identifier: D2:0D:34:7E:E1:29:EA:E9:7F:1D:41:C7:24:5E:85:46:4E:D6:33:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FAE7766654AA53392C5A8CF95CB55
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0g00fuEp6ul_HUHHJF6FRk7WMy8.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48277
IP address blocks: 95.46.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:77:66:65:4a:a5:33:92:c5:a8:cf:95:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d20d347ee129eae97f1d41c7245e85464ed6332f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:f9:26:f0:70:a1:bc:17:10:f8:fe:52:6c:
f5:d2:fb:9e:d9:69:5e:c2:e2:36:9b:f8:dc:ae:a0:
1e:11:af:af:db:8a:40:2c:01:f3:0e:2e:5e:b6:96:
8f:e9:a5:4a:ee:50:6e:a6:8a:8b:e7:1c:70:c8:79:
e9:32:42:bd:ee:69:de:08:ce:ca:36:ca:ef:18:1d:
7f:c1:8c:15:75:bc:e9:4d:35:ab:ed:6b:e2:ee:09:
da:c0:09:15:1a:46:84:d6:3c:57:79:84:e0:db:70:
4e:18:03:42:50:1d:b3:80:e6:84:02:93:6d:1e:ce:
40:99:72:4a:a5:27:16:90:34:cb:4a:6a:e3:ed:71:
22:2b:fe:97:a9:ff:f3:78:44:89:3b:cc:e4:41:5a:
1f:95:7d:14:fa:7f:36:7c:89:7c:4b:8a:51:20:9b:
db:0b:23:6f:c2:21:39:6a:e4:d2:98:8d:cb:21:a4:
69:9b:e9:9a:86:69:2a:88:27:a8:94:db:c3:05:ad:
93:85:ea:ad:58:64:7f:45:bc:b3:7c:23:58:7e:79:
23:f1:d8:2d:58:ba:61:d1:9c:a9:39:a4:b7:bb:05:
97:81:6a:11:e9:07:e2:e9:99:1a:f8:f3:9b:9c:f4:
30:2f:c1:a3:c2:6b:a3:73:36:e1:77:b1:3e:0f:6c:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:34:7E:E1:29:EA:E9:7F:1D:41:C7:24:5E:85:46:4E:D6:33:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0g00fuEp6ul_HUHHJF6FRk7WMy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2b:03:c5:77:a2:ce:79:bc:53:49:d5:ac:27:b9:ff:ae:f8:
f2:fd:79:7a:a5:4f:36:21:eb:d1:50:e1:91:fb:b3:f8:f7:f2:
89:5c:ae:25:a2:c0:a3:b3:e0:0a:d4:b5:05:e8:21:b0:93:29:
9d:14:59:da:6b:67:9c:5d:4e:3d:e4:75:b9:4a:98:82:ed:c9:
8e:ba:15:91:57:f6:e2:ff:3f:1c:a9:78:14:02:41:04:23:a0:
07:46:e8:63:e2:64:9a:f6:c3:19:d7:f2:a8:4d:2a:0a:12:16:
31:7e:05:a3:db:fe:2b:11:c4:c8:b7:52:40:72:c5:63:bf:bd:
54:a3:0e:57:50:5d:6b:b6:ca:aa:58:38:d5:93:f2:35:62:24:
a6:b2:f2:79:d5:b2:f5:cd:be:ff:25:70:83:0f:68:ed:9d:83:
1b:89:eb:35:29:c7:2f:b1:17:57:2a:14:4c:78:cd:88:76:a0:
ca:43:53:66:c8:97:55:47:0a:f3:13:7b:e0:50:81:b6:a5:ca:
27:b7:55:0e:3b:93:64:ec:20:73:18:0a:05:50:15:2e:e2:09:
b1:eb:49:46:66:7b:5a:5b:98:68:e7:00:97:2e:8b:f0:38:ae:
0c:bc:01:bf:ac:fb:11:90:9f:b9:0b:e3:63:78:a4:42:27:55:
2d:e7:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:18 2025 by rpki-client