Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4jQ-tSCrYZhAdaSJYvEHWg9IE3A.roa
File: 4jQ-tSCrYZhAdaSJYvEHWg9IE3A.roa (raw, json)
Hash identifier: /WLV87dd1nbTM80M1bW1Gg5gSZW9Ub0uDWFI4tXYiBI=
Subject key identifier: E2:34:3E:B5:20:AB:61:98:40:75:A4:89:62:F1:07:5A:0F:48:13:70
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095AEFF60E68D63F0FFD8FFA22E4140
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4jQ-tSCrYZhAdaSJYvEHWg9IE3A.roa
Signing time: Mon 02 Jan 2023 03:45:35 +0000
ROA not before: Mon 02 Jan 2023 03:45:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209398
IP address blocks: 95.46.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:ae:ff:60:e6:8d:63:f0:ff:d8:ff:a2:2e:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2343eb520ab61984075a48962f1075a0f481370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:3d:03:38:cb:62:28:a0:79:63:63:a9:f6:
82:bb:a5:07:e2:02:9e:31:12:d4:4d:f3:35:91:fc:
a3:d2:15:81:b0:c4:92:bd:33:2d:70:f8:fc:c2:2c:
61:32:52:ce:68:e4:51:57:ef:90:93:13:9c:e7:a0:
08:c7:59:ad:22:38:27:e0:4f:92:10:ba:f0:4e:11:
62:8d:a4:bc:c6:07:90:59:de:90:ad:1a:2f:fc:19:
50:34:a6:29:06:ad:f8:43:7d:a0:65:e5:fd:5d:e8:
d8:46:8f:7d:bd:2f:04:07:03:ed:91:a1:a4:63:02:
a8:71:cb:6e:91:4d:14:d2:b2:ed:0d:09:ef:07:5a:
0f:93:35:58:c0:c6:af:d0:9d:a2:ef:d7:0a:53:bb:
5d:43:3d:0a:37:ac:17:e5:37:31:ee:28:e3:d0:f2:
db:12:7b:99:e0:a0:7b:ed:57:7d:1f:4f:83:9e:64:
d4:b1:ba:af:c4:3c:d1:9b:f9:32:b7:34:f3:2a:cf:
96:0a:92:31:50:e5:b0:c6:d0:5c:73:20:04:63:74:
f8:fb:47:29:a8:ed:34:93:63:ad:ce:ee:09:1a:03:
8a:4a:c8:ca:27:f0:bd:28:8c:6b:94:92:f0:ba:65:
38:da:ba:29:29:4b:4d:64:8a:cd:a3:c4:e3:2a:0f:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:3E:B5:20:AB:61:98:40:75:A4:89:62:F1:07:5A:0F:48:13:70
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4jQ-tSCrYZhAdaSJYvEHWg9IE3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2b:77:bd:7d:fd:1d:a9:ca:b7:85:40:b0:fd:88:c8:a8:ce:
84:62:bd:12:70:c5:17:74:59:67:01:16:1a:b6:1e:73:e6:85:
86:62:be:5c:38:49:a0:ee:50:0b:01:45:8e:72:16:a7:79:65:
4d:06:f2:3d:5a:29:f4:c0:c0:cb:84:dd:77:f8:f3:d7:a7:9c:
86:61:f5:ce:9d:6d:4a:21:99:94:fb:0f:c0:1f:ed:38:34:19:
e0:f2:c8:88:12:df:5c:38:93:6a:39:dc:23:9f:6d:71:bb:c6:
1e:de:8f:9d:45:e4:55:81:59:fa:1a:5a:27:ef:c7:23:be:93:
85:34:c0:ea:26:31:a0:d6:84:93:40:8f:19:ed:8b:25:e3:97:
1c:5e:28:77:8f:1b:39:88:25:3d:98:9c:74:77:8a:ad:f2:ba:
3b:1f:3d:5e:a1:0a:15:c0:15:3b:d4:f5:e5:37:82:90:85:1a:
46:a8:92:b9:b7:9b:4e:c0:08:a7:d3:35:74:93:c1:63:7d:74:
f8:7e:9e:71:ea:95:08:e6:39:44:a8:87:84:35:5d:6a:0f:8f:
e6:16:29:79:d3:46:7d:05:2b:df:30:8a:76:72:a9:19:2c:77:
59:dd:c6:d6:48:e9:7e:61:e8:ff:e4:03:4c:95:e9:31:a6:c5:
19:84:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:27 2025 by rpki-client