Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1X2Kb-JWDbrROai3pGIiyhFSEUc.roa
File: 1X2Kb-JWDbrROai3pGIiyhFSEUc.roa (raw, json)
Hash identifier: leIXdSCYUsHQVyOBvNz3Ip27csXHjX/LcH5haq7QJt0=
Subject key identifier: D5:7D:8A:6F:E2:56:0D:BA:D1:39:A8:B7:A4:62:22:CA:11:52:11:47
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27960152
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1X2Kb-JWDbrROai3pGIiyhFSEUc.roa
Signing time: Sat 01 Jan 2022 16:08:22 +0000
ROA not before: Sat 01 Jan 2022 16:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44834
IP address blocks: 95.47.243.0/24 maxlen: 24
95.47.170.0/23 maxlen: 23
95.47.170.0/24 maxlen: 24
31.148.202.0/24 maxlen: 24
31.148.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664142162 (0x27960152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d57d8a6fe2560dbad139a8b7a46222ca11521147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:37:27:91:e5:6d:dd:80:57:0c:de:ca:97:
0b:11:e0:f8:72:02:b4:0f:9b:e1:5a:53:ec:4c:df:
3c:36:ac:ca:d4:6d:14:76:1a:68:92:1b:b3:29:b1:
56:6f:7b:df:31:50:cd:f1:87:b1:a1:b2:36:c4:15:
aa:0a:f4:3d:46:d5:f2:e2:58:18:0b:f4:09:98:07:
af:f7:9e:9a:b9:46:c8:b7:5e:3b:a0:d5:c4:c7:d8:
98:94:00:87:10:e9:1b:5b:b7:63:cc:ed:3a:70:2a:
77:11:5f:7b:d5:e6:fa:33:e1:39:7a:24:a3:c4:a6:
66:cc:ca:12:b6:ac:e1:77:dc:df:39:41:6a:79:1c:
82:88:9d:58:07:4a:bd:b4:65:65:87:49:12:a7:f4:
fb:ba:61:df:b3:d0:4f:09:24:28:e6:a1:e2:ab:51:
88:8b:89:72:7e:bc:12:87:7f:8d:6b:05:3d:bd:b5:
fd:43:3c:bd:09:bc:c1:c4:84:ac:21:bb:19:aa:1f:
72:72:ee:88:c2:a4:1f:eb:61:0e:82:21:8c:74:5d:
3d:f5:45:4c:2d:69:d6:4a:8a:67:76:09:da:37:91:
3e:eb:a3:5a:f3:54:9f:64:b3:71:ea:f2:95:74:1b:
5f:12:3c:73:7f:2f:ba:4b:80:6a:19:01:4c:a7:ce:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:8A:6F:E2:56:0D:BA:D1:39:A8:B7:A4:62:22:CA:11:52:11:47
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1X2Kb-JWDbrROai3pGIiyhFSEUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.202.0/23
95.47.170.0/23
95.47.243.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7c:f6:7c:cf:42:51:dd:3f:f9:53:30:0e:0b:1e:45:fe:16:
80:f7:da:53:41:29:83:c4:4d:a8:b5:ab:e5:e2:72:71:f6:f9:
60:5d:40:bb:0c:83:5b:83:b3:25:fa:08:3e:b5:09:7b:9d:f9:
c7:bd:77:33:42:87:f1:a2:77:79:3d:29:a1:0e:7f:94:5e:28:
c7:67:94:3c:ae:16:e6:0e:c0:d0:53:4d:49:1a:33:07:ef:41:
40:dd:00:0b:ae:30:91:96:e1:78:49:e6:bd:47:be:9b:63:da:
b3:22:de:31:d5:87:c0:66:19:ab:e5:79:44:cc:d6:92:ed:3e:
85:58:9f:fc:14:b0:0e:03:98:68:10:00:dc:a6:0d:9e:dd:c3:
17:ed:db:5a:68:bb:19:0a:f4:c4:a9:1e:77:2a:23:8b:6a:12:
9e:66:e4:d8:ab:d5:9a:2e:ba:4a:37:7e:ac:76:9e:e8:b6:3a:
bc:74:ab:19:1b:97:cb:11:3d:b5:f7:10:21:2f:ef:e7:a9:cc:
95:03:d8:cd:8e:1a:c9:e9:f5:51:5c:0f:fd:77:ae:54:62:f3:
45:af:76:d6:6b:10:a4:aa:a1:c5:43:a0:a5:60:16:50:4e:d0:
58:05:61:69:8c:69:1a:28:f2:2e:5c:5a:fb:e4:ca:de:d8:e3:
fc:3c:48:cf
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEJ5YBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDgyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDU3ZDhhNmZlMjU2
MGRiYWQxMzlhOGI3YTQ2MjIyY2ExMTUyMTE0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANriNyeR5W3dgFcM3sqXCxHg+HICtA+b4VpT7EzfPDasytRt
FHYaaJIbsymxVm973zFQzfGHsaGyNsQVqgr0PUbV8uJYGAv0CZgHr/eemrlGyLde
O6DVxMfYmJQAhxDpG1u3Y8ztOnAqdxFfe9Xm+jPhOXoko8SmZszKEras4Xfc3zlB
ankcgoidWAdKvbRlZYdJEqf0+7ph37PQTwkkKOah4qtRiIuJcn68Eod/jWsFPb21
/UM8vQm8wcSErCG7GaofcnLuiMKkH+thDoIhjHRdPfVFTC1p1kqKZ3YJ2jeRPuuj
WvNUn2SzcerylXQbXxI8c38vukuAahkBTKfOM/UCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTVfYpv4lYNutE5qLekYiLKEVIRRzAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzFYMktiLUpXRGJyUk9haTNwR0lpeWhGU0VVYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAR+UygMEAV8vqgMEAF8v8zANBgkq
hkiG9w0BAQsFAAOCAQEAJnz2fM9CUd0/+VMwDgseRf4WgPfaU0Epg8RNqLWr5eJy
cfb5YF1AuwyDW4OzJfoIPrUJe535x713M0KH8aJ3eT0poQ5/lF4ox2eUPK4W5g7A
0FNNSRozB+9BQN0AC64wkZbheEnmvUe+m2PasyLeMdWHwGYZq+V5RMzWku0+hVif
/BSwDgOYaBAA3KYNnt3DF+3bWmi7GQr0xKkedyoji2oSnmbk2KvVmi66Sjd+rHae
6LY6vHSrGRuXyxE9tfcQIS/v56nMlQPYzY4ayen1UVwP/XeuVGLzRa921msQpKqh
xUOgpWAWUE7QWAVhaYxpGijyLlxa++TK3tjj/DxIzw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:28 2025 by rpki-client