Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7UlmHhS2qsKHOHkSzPsGjy12Lao.roa
File: 7UlmHhS2qsKHOHkSzPsGjy12Lao.roa (raw, json)
Hash identifier: YrJRTCTubxmAE7yIv3aHH91kSht0LKVpdCBfBD9DqgY=
Subject key identifier: ED:49:66:1E:14:B6:AA:C2:87:38:79:12:CC:FB:06:8F:2D:76:2D:AA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018A602EA7882473077F45570005CD197E0D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7UlmHhS2qsKHOHkSzPsGjy12Lao.roa
Signing time: Mon 04 Sep 2023 12:33:04 +0000
ROA not before: Mon 04 Sep 2023 12:33:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59734
IP address blocks: 95.47.240.0/23 maxlen: 24
95.46.120.0/23 maxlen: 24
93.171.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:2e:a7:88:24:73:07:7f:45:57:00:05:cd:19:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 4 12:33:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed49661e14b6aac287387912ccfb068f2d762daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:6b:19:da:a3:42:3f:0e:d9:df:be:93:56:
f8:fb:f3:71:4a:36:99:ff:96:d8:00:99:e6:7d:4c:
d6:88:ca:dd:29:8e:3e:ae:19:b6:b7:21:dc:20:b7:
64:76:af:94:93:95:c9:5c:04:95:54:1f:8e:b4:c0:
4c:78:b9:b8:f0:93:c1:c3:f2:7b:de:8a:06:d8:bb:
cb:3a:f4:93:41:c1:14:8c:27:90:3c:78:e1:c8:9f:
8f:42:ba:3b:a8:87:b0:8b:3a:87:d7:b0:16:98:d0:
89:45:cb:f8:98:3c:77:e4:4d:c7:a7:5a:56:28:93:
66:1a:7a:e8:a8:73:76:8e:26:a2:41:ec:d6:ba:69:
0b:78:8b:92:8a:ed:d3:06:de:79:67:69:1d:28:e0:
0b:48:28:e6:f5:74:b7:61:7a:c5:de:73:46:b8:a2:
85:f5:ae:f0:a6:55:d1:b9:c8:34:1d:ec:69:fb:c1:
a0:8d:23:9a:9b:cf:bc:b4:fe:c2:84:e2:e2:64:3e:
84:3d:60:7e:00:12:6e:fc:30:a5:6e:26:1c:01:21:
ab:52:20:b1:5d:d9:09:e6:a9:4a:3d:00:95:07:f7:
9b:7f:ba:e1:de:c1:7a:59:db:08:18:4d:cb:ca:7b:
9d:d1:c0:6c:14:a7:14:0b:d5:f2:51:8a:3c:d0:ce:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:66:1E:14:B6:AA:C2:87:38:79:12:CC:FB:06:8F:2D:76:2D:AA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7UlmHhS2qsKHOHkSzPsGjy12Lao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.32.0/23
95.46.120.0/23
95.47.240.0/23
Signature Algorithm: sha256WithRSAEncryption
93:69:fc:52:5d:ca:90:eb:7f:30:51:9c:8e:e0:34:c2:1a:b5:
19:72:5b:19:b4:3e:1e:7b:ba:6d:77:25:42:20:60:83:19:7a:
54:f5:ba:54:48:c9:68:b4:98:62:09:c9:9b:d1:cd:dc:24:54:
80:89:95:ef:ba:37:ec:4f:89:5b:49:fb:8f:1b:08:32:f0:c7:
a9:e6:c2:9e:71:a6:3a:49:ab:74:dc:3f:98:18:8a:78:a4:12:
94:ba:35:a3:3b:90:75:3e:21:a2:89:68:85:84:20:24:8b:cd:
03:30:37:9a:b9:b8:a7:b7:88:47:41:19:e5:ff:10:7d:9d:6b:
f9:de:5a:bb:bc:15:b6:3a:0f:2e:a2:0d:13:22:95:70:0e:a5:
9f:ba:a6:25:99:8c:38:47:b0:78:6c:ec:64:6e:b8:ab:46:e6:
5b:45:0b:00:87:0e:99:02:94:a2:e3:85:98:97:99:b9:54:9a:
f9:56:31:6f:e6:95:18:4f:78:14:ad:76:99:e4:a5:02:e8:7e:
27:f4:4d:cf:28:0a:0e:2c:b4:7b:a3:cb:e3:11:25:a7:9c:ec:
31:9b:8b:76:40:b5:64:61:ee:0d:c3:cb:8c:27:ce:94:fd:43:
6c:2b:94:34:cb:bf:0d:1a:1f:9c:5a:1a:ba:a6:e5:ce:79:03:
68:06:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:06 2025 by rpki-client