Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/34l7zKFMueaGpG1fIjcsis0dz1k.roa
File: 34l7zKFMueaGpG1fIjcsis0dz1k.roa (raw, json)
Hash identifier: /YQ83gL4xHI5VB2NxuFVdIZo4BHczeVj7mw5JK48aHI=
Subject key identifier: DF:89:7B:CC:A1:4C:B9:E6:86:A4:6D:5F:22:37:2C:8A:CD:1D:CF:59
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FAAC4D2321B9C02649DA4D76B6F04
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/34l7zKFMueaGpG1fIjcsis0dz1k.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47463
IP address blocks: 95.46.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:aa:c4:d2:32:1b:9c:02:64:9d:a4:d7:6b:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df897bcca14cb9e686a46d5f22372c8acd1dcf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:c7:b2:d1:e6:7b:a8:b4:ab:81:ec:19:73:
2d:9c:42:f3:d8:f0:2f:e0:34:e6:62:78:82:57:2e:
99:a5:7f:db:ac:ae:a1:5b:d3:20:66:76:38:f5:8d:
33:9e:46:e1:be:05:e9:7b:0f:cf:7c:f2:fd:ac:7c:
74:05:05:9c:3c:fa:45:40:50:2b:2f:ae:0c:1d:b0:
44:91:ce:d8:0a:b5:1e:fc:9b:43:2f:aa:e4:73:fb:
da:2a:59:cf:ee:3b:23:5c:80:8b:3d:2f:b6:e7:9f:
8f:26:f6:24:84:af:e3:ee:c8:cb:54:60:b9:4f:7f:
b5:73:0a:3e:25:3b:6d:52:ee:e4:90:38:61:c0:61:
f9:91:ce:bb:64:41:e3:84:5b:6f:d8:55:cf:06:86:
8d:cd:f9:0a:77:b3:2c:6b:f1:be:8b:2d:3e:67:90:
35:10:35:11:3d:4a:bc:c5:5e:2c:1b:51:24:eb:ee:
77:6b:0c:54:e7:40:93:8d:8e:c5:93:ed:cf:81:b8:
db:07:cd:5f:78:ff:64:04:aa:0f:5f:c0:22:4e:10:
4e:f7:55:23:6e:0a:c5:38:be:ee:de:c0:7e:62:d9:
c4:3d:4e:aa:90:d2:30:97:4d:85:71:ad:48:6d:a5:
c1:5e:96:89:7e:b6:de:6b:de:86:49:b0:8e:9d:03:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:7B:CC:A1:4C:B9:E6:86:A4:6D:5F:22:37:2C:8A:CD:1D:CF:59
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/34l7zKFMueaGpG1fIjcsis0dz1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.124.0/24
Signature Algorithm: sha256WithRSAEncryption
56:92:6c:0c:c3:0d:58:2d:3f:82:3f:9b:7a:61:78:36:a8:15:
93:6c:cd:fb:e3:33:42:33:b7:61:cc:e1:54:22:70:9d:f9:81:
41:f2:6b:41:9e:78:dd:da:ea:1a:21:4d:a1:43:f3:5f:f1:20:
7b:1e:1b:8a:8e:30:a7:5f:6a:44:a0:c2:62:e4:cb:5f:59:8a:
ce:7d:d1:ce:34:26:88:ae:7a:9a:57:0c:73:25:8f:f5:dc:42:
72:6d:65:10:d5:18:86:44:0d:15:2e:93:14:c2:66:c7:6e:eb:
80:4d:20:91:ee:aa:2c:99:ed:73:55:bf:0f:33:d4:fc:c1:f0:
64:dc:2b:e8:41:77:04:94:b7:a9:4a:46:99:78:0a:d8:13:1f:
8b:1d:07:c5:9c:5e:c9:7c:33:78:c1:d5:a6:3d:e5:cf:bd:f3:
10:d7:82:f6:56:02:5b:d7:b0:bb:9a:19:4b:1b:1b:4c:b3:2c:
a7:61:3b:64:ef:c2:33:8f:8b:69:36:30:7b:48:7a:9a:5b:57:
22:55:4a:43:0d:d4:0b:0d:f5:7d:4b:56:72:cd:04:ba:9c:a9:
be:6c:33:dc:72:bc:b8:0f:ca:8d:99:80:1b:42:5c:ef:6d:0f:
0a:99:7f:18:04:d3:d7:de:7b:2b:2e:c4:9b:39:87:a9:47:c0:
98:5c:bf:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6rE0jIbnAJknaTXa28EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjg5N2JjY2ExNGNiOWU2ODZhNDZkNWYyMjM3MmM4YWNkMWRjZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCLHstHme6i0q4HsGXMtnELz2PAv
4DTmYniCVy6ZpX/brK6hW9MgZnY49Y0znkbhvgXpew/PfPL9rHx0BQWcPPpFQFAr
L64MHbBEkc7YCrUe/JtDL6rkc/vaKlnP7jsjXICLPS+255+PJvYkhK/j7sjLVGC5
T3+1cwo+JTttUu7kkDhhwGH5kc67ZEHjhFtv2FXPBoaNzfkKd7Msa/G+iy0+Z5A1
EDURPUq8xV4sG1Ek6+53awxU50CTjY7Fk+3PgbjbB81feP9kBKoPX8AiThBO91Uj
bgrFOL7u3sB+YtnEPU6qkNIwl02Fca1IbaXBXpaJfrbea96GSbCOnQPKAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+Je8yhTLnmhqRtXyI3LIrNHc9ZMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMzRsN3pLRk11ZWFHcEcxZklqY3NpczBkejFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy58MA0G
CSqGSIb3DQEBCwUAA4IBAQBWkmwMww1YLT+CP5t6YXg2qBWTbM374zNCM7dhzOFU
InCd+YFB8mtBnnjd2uoaIU2hQ/Nf8SB7HhuKjjCnX2pEoMJi5MtfWYrOfdHONCaI
rnqaVwxzJY/13EJybWUQ1RiGRA0VLpMUwmbHbuuATSCR7qosme1zVb8PM9T8wfBk
3CvoQXcElLepSkaZeArYEx+LHQfFnF7JfDN4wdWmPeXPvfMQ14L2VgJb17C7mhlL
GxtMsyynYTtk78Izj4tpNjB7SHqaW1ciVUpDDdQLDfV9S1ZyzQS6nKm+bDPccry4
D8qNmYAbQlzvbQ8KmX8YBNPX3nsrLsSbOYepR8CYXL/w
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:17 2025 by rpki-client