Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6iM52dH3-VmQPwNBIodV-oq0hA0.roa
File: 6iM52dH3-VmQPwNBIodV-oq0hA0.roa (raw, json)
Hash identifier: Za5AXiS4DN/3CE+AFyhjUY8xylS0i2K8S1SPqcry6Z8=
Subject key identifier: EA:23:39:D9:D1:F7:F9:59:90:3F:03:41:22:87:55:FA:8A:B4:84:0D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2822F5A8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6iM52dH3-VmQPwNBIodV-oq0hA0.roa
Signing time: Sat 01 Jan 2022 16:09:40 +0000
ROA not before: Sat 01 Jan 2022 16:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201147
IP address blocks: 95.46.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673379752 (0x2822f5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea2339d9d1f7f959903f0341228755fa8ab4840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:91:c4:a1:d4:90:77:e4:b0:02:72:74:83:
17:f2:0e:67:7c:03:1b:3a:04:1c:9b:2e:3e:6e:07:
6e:d8:ac:66:f4:00:ce:84:0b:1a:d7:90:da:4b:a5:
e6:49:30:96:f2:af:30:fa:f6:4a:ea:e1:11:0e:52:
55:87:7d:83:e3:4e:43:98:c9:3c:a1:11:7c:24:27:
da:aa:45:18:12:cc:ec:e9:a6:b3:e1:0b:8d:2d:c7:
7d:49:73:d9:12:ef:93:63:1e:47:1b:41:63:2e:ec:
85:00:07:f6:1f:11:56:e2:65:fd:23:a6:a2:b1:66:
1c:45:c1:1b:0e:28:ac:7d:30:2b:f9:41:bb:3f:70:
9a:39:5c:23:09:35:f0:89:15:83:50:f8:d1:e7:2f:
d6:e3:be:ff:94:96:84:04:e7:7b:42:8b:a4:a3:4b:
2d:60:87:a1:0d:9e:5d:6c:5d:e7:99:b3:a4:c4:64:
8a:7d:db:08:31:d6:83:1c:93:c2:56:f0:93:5f:62:
4e:c6:8b:df:d2:18:93:19:40:f9:42:a7:5e:52:e1:
41:bd:b0:70:c7:85:33:88:9e:ef:62:fd:04:5c:d3:
78:0f:49:b3:4c:e4:9f:aa:99:72:f5:1d:b6:96:9c:
f7:4c:a7:0e:c1:89:10:70:19:7e:9f:3c:c9:d8:f5:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:39:D9:D1:F7:F9:59:90:3F:03:41:22:87:55:FA:8A:B4:84:0D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6iM52dH3-VmQPwNBIodV-oq0hA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.176.0/21
Signature Algorithm: sha256WithRSAEncryption
24:f3:55:48:6e:d7:a7:da:ba:b5:6b:42:86:6e:9d:5c:70:86:
36:c0:f2:f8:f5:dc:8e:40:5c:0a:2a:84:1f:84:7a:bf:8d:dd:
c6:41:a2:4f:03:16:68:c5:75:6d:5e:08:32:5b:f6:8c:aa:b3:
a6:42:31:4e:48:3a:12:a7:09:17:f5:b0:48:2a:f5:b4:48:18:
8b:ee:1f:bc:9a:d2:35:1d:2c:8a:c6:e4:95:58:46:b2:d5:ce:
c4:54:61:89:c5:ef:a7:21:bb:34:75:f7:52:13:cb:98:c5:f7:
42:8c:30:db:2c:46:8e:a4:c4:ed:7b:37:b6:8b:c5:cf:62:2f:
d4:b5:5b:4c:94:78:6a:80:94:06:0c:dc:cc:fc:06:14:ac:70:
e3:ca:d2:9f:2c:58:27:a9:96:4e:e6:03:c3:2e:51:66:26:7c:
2b:91:3c:04:79:48:4e:87:9b:9e:a1:a4:b9:fe:48:a8:5e:aa:
98:a8:bb:46:17:4f:1b:15:15:2d:ff:cd:0e:71:0a:ce:03:80:
9e:aa:37:64:7d:62:dc:eb:b5:d8:30:f7:23:4a:31:59:ed:b2:
60:e4:9d:cf:28:49:cd:21:6f:dd:42:09:76:a9:9a:48:0e:12:
8f:25:04:e4:00:6a:01:86:d3:1b:3e:f5:aa:8c:27:85:00:c5:
f2:b6:c8:a6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKCL1qDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWEyMzM5ZDlkMWY3
Zjk1OTkwM2YwMzQxMjI4NzU1ZmE4YWI0ODQwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL0FkcSh1JB35LACcnSDF/IOZ3wDGzoEHJsuPm4HbtisZvQA
zoQLGteQ2kul5kkwlvKvMPr2SurhEQ5SVYd9g+NOQ5jJPKERfCQn2qpFGBLM7Omm
s+ELjS3HfUlz2RLvk2MeRxtBYy7shQAH9h8RVuJl/SOmorFmHEXBGw4orH0wK/lB
uz9wmjlcIwk18IkVg1D40ecv1uO+/5SWhATne0KLpKNLLWCHoQ2eXWxd55mzpMRk
in3bCDHWgxyTwlbwk19iTsaL39IYkxlA+UKnXlLhQb2wcMeFM4ie72L9BFzTeA9J
s0zkn6qZcvUdtpac90ynDsGJEHAZfp88ydj1NZcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqIznZ0ff5WZA/A0Eih1X6irSEDTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzZpTTUyZEgzLVZtUVB3TkJJb2RWLW9xMGhBMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA18usDANBgkqhkiG9w0BAQsFAAOC
AQEAJPNVSG7Xp9q6tWtChm6dXHCGNsDy+PXcjkBcCiqEH4R6v43dxkGiTwMWaMV1
bV4IMlv2jKqzpkIxTkg6EqcJF/WwSCr1tEgYi+4fvJrSNR0sisbklVhGstXOxFRh
icXvpyG7NHX3UhPLmMX3Qoww2yxGjqTE7Xs3tovFz2Iv1LVbTJR4aoCUBgzczPwG
FKxw48rSnyxYJ6mWTuYDwy5RZiZ8K5E8BHlIToebnqGkuf5IqF6qmKi7RhdPGxUV
Lf/NDnEKzgOAnqo3ZH1i3Ou12DD3I0oxWe2yYOSdzyhJzSFv3UIJdqmaSA4SjyUE
5ABqAYbTGz71qownhQDF8rbIpg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:21 2025 by rpki-client