Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-JUvBds2LpoOy0756A-KBm52kDg.roa
File: 1-JUvBds2LpoOy0756A-KBm52kDg.roa (raw, json)
Hash identifier: OCTuD00hquiBHJUx/msnydbst49m6CqBqKyiwH2/rfM=
Subject key identifier: F8:95:2F:05:DB:36:2E:9A:0E:CB:4E:F9:E8:0F:8A:06:6E:76:90:38
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 289C7B3D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-JUvBds2LpoOy0756A-KBm52kDg.roa
Signing time: Thu 20 Jan 2022 13:34:19 +0000
ROA not before: Thu 20 Jan 2022 13:34:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62006
IP address blocks: 95.47.103.0/24 maxlen: 24
92.38.43.0/24 maxlen: 24
95.46.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681343805 (0x289c7b3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 20 13:34:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8952f05db362e9a0ecb4ef9e80f8a066e769038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:ef:6d:b8:f5:36:b4:9b:77:cf:e6:d6:29:
ee:5d:80:19:8a:58:8a:70:a6:b6:d7:e3:18:29:2e:
dd:63:cd:36:22:d0:ef:a3:d3:55:65:96:10:09:48:
00:f0:76:17:af:71:8b:1e:18:ef:90:ee:08:70:40:
f6:f1:02:26:68:be:e5:c4:72:b2:8c:a3:31:fa:54:
a4:52:8f:86:8e:96:d0:19:f0:32:bc:77:16:34:66:
d8:f6:1e:8a:96:b2:d0:c5:6b:00:d2:50:3a:f9:1b:
84:83:72:89:4d:40:ac:26:2b:a6:3d:a7:66:85:71:
38:c6:48:7f:7b:56:21:0e:b9:00:48:a9:66:2f:6c:
21:63:50:04:d7:74:08:c4:9f:21:09:85:2a:61:41:
0f:77:8b:14:45:8b:54:71:a8:ed:86:da:67:3e:b2:
03:a1:a2:04:70:81:d6:de:71:d8:c8:70:cf:a7:cc:
a8:81:95:de:38:6f:31:79:24:81:59:76:5b:84:b9:
a2:98:51:d5:ab:af:8f:ab:8d:ae:96:79:29:0e:c2:
9b:9b:5c:3b:da:7d:77:ff:d1:e7:9d:8b:b3:f9:51:
2b:d5:90:96:13:cf:c9:b8:57:22:4e:4f:5f:47:79:
02:90:33:72:26:93:3b:96:34:09:4f:0f:9a:6f:74:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:2F:05:DB:36:2E:9A:0E:CB:4E:F9:E8:0F:8A:06:6E:76:90:38
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-JUvBds2LpoOy0756A-KBm52kDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.43.0/24
95.46.105.0/24
95.47.103.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d5:bb:8d:e1:be:29:16:a7:96:81:8f:73:86:bc:80:aa:5b:
0d:11:c7:0f:0a:d7:73:99:32:8b:79:d2:5b:0a:75:20:c3:23:
4e:d4:37:1a:6c:ef:33:c5:63:32:ed:01:c7:87:8d:40:36:f5:
ab:8c:bb:31:1d:1a:11:36:68:f9:a1:35:d7:90:cd:27:31:40:
46:17:d2:c5:11:46:c4:86:dc:1e:7b:0d:d2:fe:22:76:47:a8:
92:76:57:ef:9c:46:89:49:14:77:a0:ef:82:c8:a6:62:c4:f2:
59:ab:3c:4d:36:0a:29:37:2f:01:2b:6c:c4:5a:27:fb:3c:d6:
2b:15:82:91:db:93:a0:84:d7:f7:a8:35:76:25:14:74:79:bf:
96:0e:94:da:18:bc:af:87:4b:4a:22:af:c0:54:85:67:67:d1:
e6:24:95:49:f6:01:14:4e:04:4c:86:e1:07:21:22:f4:a8:61:
ee:ce:51:5a:92:85:78:63:64:41:90:70:2a:39:8c:80:33:dd:
0c:8e:26:d3:4d:72:ac:73:35:cd:1c:12:0f:c9:dd:6b:f0:ff:
37:69:51:e2:3e:50:1c:c6:2c:55:93:8d:76:ba:9b:84:e9:7c:
67:78:62:75:d7:f9:2b:7d:86:84:49:d4:f7:5a:a7:ae:e4:e3:
55:39:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:37 2025 by rpki-client