Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1bEndbmsdvw0YY1vEEo8rl5Wg9k.roa
File: 1bEndbmsdvw0YY1vEEo8rl5Wg9k.roa (raw, json)
Hash identifier: MSf5om0SYmJbPaHl6Aaf8SOxkCEApdtLfPLy0y4aN9Y=
Subject key identifier: D5:B1:27:75:B9:AC:76:FC:34:61:8D:6F:10:4A:3C:AE:5E:56:83:D9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095944591B4A17BB0AF7DBDB672A703
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1bEndbmsdvw0YY1vEEo8rl5Wg9k.roa
Signing time: Mon 02 Jan 2023 03:45:28 +0000
ROA not before: Mon 02 Jan 2023 03:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202969
IP address blocks: 95.47.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:94:45:91:b4:a1:7b:b0:af:7d:bd:b6:72:a7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5b12775b9ac76fc34618d6f104a3cae5e5683d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:62:3d:4d:81:44:61:5d:7f:4e:e1:59:37:
d4:bf:87:98:0a:0d:a1:b5:e0:cf:18:ad:db:a4:51:
66:13:2a:85:60:9b:c7:e3:3b:76:1d:4b:8c:0e:23:
48:89:23:5e:88:3e:b2:be:57:0b:da:e3:93:5a:64:
4b:8e:03:96:5b:52:9d:fd:73:38:56:b3:c0:b8:3f:
be:3b:42:ba:32:bd:5d:9e:b6:d6:32:1f:fa:7c:74:
d3:9e:db:fa:27:18:a6:cd:ba:68:96:ee:b9:07:36:
ca:0c:46:84:77:40:2f:a1:6d:33:f2:53:75:1c:b5:
15:68:51:19:be:76:bf:ec:b7:ad:58:61:4b:4e:c7:
cf:de:30:f6:19:8c:68:e1:ba:ba:2a:2c:81:3f:3b:
4b:d9:1e:6c:e4:23:1f:8c:fb:7c:31:f4:d1:07:c9:
49:66:a0:3b:eb:a9:6e:f1:ec:9e:d3:9d:e5:22:62:
d9:3b:30:0e:71:63:1c:7c:9e:f2:e6:bd:7c:3a:4b:
59:cd:03:12:0b:1d:89:7b:5f:d8:98:09:97:17:80:
39:55:66:9d:90:09:76:73:ed:af:39:fe:41:74:19:
d9:9d:f0:2b:ff:51:48:68:2e:68:dc:6c:7f:ee:a0:
a6:c5:63:86:71:39:73:ef:9d:9e:3b:d9:c8:b5:75:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:27:75:B9:AC:76:FC:34:61:8D:6F:10:4A:3C:AE:5E:56:83:D9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1bEndbmsdvw0YY1vEEo8rl5Wg9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.158.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ee:7a:c6:01:d3:53:56:a0:7e:40:88:64:0e:28:c7:c5:f3:
ad:19:80:2b:92:c9:5a:b3:84:dc:4f:fa:bd:af:a3:67:e4:7f:
01:6b:76:e0:dd:20:05:f2:0b:ca:85:0d:ec:4a:6c:55:a9:fe:
f2:96:7d:06:7d:d8:a5:93:16:20:4b:75:c1:f2:02:6b:48:9e:
bc:68:9a:c2:82:6a:38:57:94:da:66:9c:e6:ca:7d:9a:44:80:
df:58:cd:c5:b7:05:a0:cf:a7:ff:65:fe:de:dc:d3:c4:62:1d:
97:26:ec:54:94:da:9f:62:71:21:2f:e0:96:a6:53:fb:22:48:
af:7d:ed:92:60:c7:ca:d0:9a:56:5e:f2:7c:62:36:77:fe:5f:
3e:08:50:e6:c7:f4:09:60:90:40:06:04:2c:46:9d:48:bf:48:
a2:e2:3a:1e:19:bc:bd:5f:e2:34:5d:c3:19:c2:48:76:26:af:
39:3f:80:8e:9e:1a:36:68:e1:6b:61:02:a8:e5:94:4f:28:76:
7f:3e:1f:46:7a:66:45:54:3b:cc:ba:1e:19:98:76:29:93:63:
48:be:54:0b:cc:bc:31:8d:ee:c6:1b:98:26:29:f6:7b:11:7c:
d6:ff:21:69:23:bd:f3:7d:49:19:12:e0:83:33:63:cc:eb:33:
60:f5:8d:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlZRFkbShe7Cvfb22cqcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWIxMjc3NWI5YWM3NmZjMzQ2MThkNmYxMDRhM2NhZTVlNTY4M2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuZiPU2BRGFdf07hWTfUv4eYCg2h
teDPGK3bpFFmEyqFYJvH4zt2HUuMDiNIiSNeiD6yvlcL2uOTWmRLjgOWW1Kd/XM4
VrPAuD++O0K6Mr1dnrbWMh/6fHTTntv6Jximzbpolu65BzbKDEaEd0AvoW0z8lN1
HLUVaFEZvna/7LetWGFLTsfP3jD2GYxo4bq6KiyBPztL2R5s5CMfjPt8MfTRB8lJ
ZqA766lu8eye053lImLZOzAOcWMcfJ7y5r18OktZzQMSCx2Je1/YmAmXF4A5VWad
kAl2c+2vOf5BdBnZnfAr/1FIaC5o3Gx/7qCmxWOGcTlz752eO9nItXX1owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWxJ3W5rHb8NGGNbxBKPK5eVoPZMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMWJFbmRibXNkdncwWVkxdkVFbzhybDVXZzlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy+eMA0G
CSqGSIb3DQEBCwUAA4IBAQA47nrGAdNTVqB+QIhkDijHxfOtGYArkslas4TcT/q9
r6Nn5H8Ba3bg3SAF8gvKhQ3sSmxVqf7yln0GfdilkxYgS3XB8gJrSJ68aJrCgmo4
V5TaZpzmyn2aRIDfWM3FtwWgz6f/Zf7e3NPEYh2XJuxUlNqfYnEhL+CWplP7Ikiv
fe2SYMfK0JpWXvJ8YjZ3/l8+CFDmx/QJYJBABgQsRp1Iv0ii4joeGby9X+I0XcMZ
wkh2Jq85P4COnho2aOFrYQKo5ZRPKHZ/Ph9GemZFVDvMuh4ZmHYpk2NIvlQLzLwx
je7GG5gmKfZ7EXzW/yFpI73zfUkZEuCDM2PM6zNg9Y0y
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:20 2025 by rpki-client