Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7hMi9i-CSiNLfu5DhXwFGdePGkc.roa
File: 7hMi9i-CSiNLfu5DhXwFGdePGkc.roa (raw, json)
Hash identifier: Jp+Z90jEUHu+MHcvOxe1hwUPEqmvNd0xHzpPRk14rwo=
Subject key identifier: EE:13:22:F6:2F:82:4A:23:4B:7E:EE:43:85:7C:05:19:D7:8F:1A:47
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27CF806F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7hMi9i-CSiNLfu5DhXwFGdePGkc.roa
Signing time: Sat 01 Jan 2022 16:08:54 +0000
ROA not before: Sat 01 Jan 2022 16:08:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57016
IP address blocks: 95.46.80.0/20 maxlen: 24
31.148.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667910255 (0x27cf806f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee1322f62f824a234b7eee43857c0519d78f1a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:be:b7:8b:88:0a:ca:17:a5:85:14:fd:3f:
80:61:d9:a4:9a:39:60:ce:59:56:97:59:d6:ae:69:
0c:70:2a:a8:79:e9:34:59:67:e8:07:56:36:7e:2c:
8a:66:f3:83:7c:e5:9e:bd:9f:d6:d5:f8:6d:5c:01:
b2:1c:d4:dd:a5:b2:a1:29:61:0d:ef:ee:ee:58:3e:
5e:62:da:bc:0e:0c:3e:22:23:de:44:07:7c:29:d1:
3b:d2:75:00:2a:e6:84:08:67:64:4b:3a:ba:53:1b:
cc:db:37:34:76:a0:20:55:07:1c:ff:bf:aa:74:51:
9b:3b:ca:a0:10:99:11:bb:12:1c:99:d4:64:96:dd:
4b:64:6f:d6:eb:e7:07:7c:03:12:44:d3:41:26:e9:
f8:95:d3:12:67:80:ed:a6:f0:69:7e:cd:65:8d:4e:
0e:62:ea:cf:66:26:ef:28:97:07:0c:95:a3:87:f2:
05:b7:39:8e:a3:ed:d9:86:a6:62:e4:67:6c:1b:c6:
b1:00:87:1c:8d:4a:7e:a7:32:92:15:32:1f:f5:97:
19:31:1c:0b:bc:c4:06:03:ed:4c:fb:bb:f6:9b:a0:
70:c8:f9:20:70:b4:70:95:b6:f5:d2:87:40:29:40:
08:5c:75:28:5d:7c:02:07:69:4c:f6:c3:93:aa:c7:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:13:22:F6:2F:82:4A:23:4B:7E:EE:43:85:7C:05:19:D7:8F:1A:47
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7hMi9i-CSiNLfu5DhXwFGdePGkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.160.0/21
95.46.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:f7:a9:93:f9:7c:35:a2:95:3d:ee:3b:e2:ef:bb:b3:99:4c:
e8:1a:1d:15:18:b0:5a:29:6f:37:09:0f:fd:b7:20:8c:05:13:
a4:99:02:45:df:ec:75:ed:a4:86:29:08:bf:c3:43:f5:6b:df:
27:e2:2f:a6:1c:45:b6:be:19:59:84:ff:1e:29:64:36:cd:49:
f0:96:8d:12:25:f8:1b:94:80:06:6b:41:fd:1c:f1:f1:e0:12:
55:88:bb:54:59:d4:45:88:96:44:29:e3:b5:1d:bb:d9:08:81:
b0:59:a0:77:a4:cf:32:03:ff:c1:6b:c9:c2:5f:97:20:60:a0:
1b:20:06:48:40:fc:2b:1a:b3:7f:b5:d7:f9:67:c8:18:04:5b:
82:ec:7b:6f:e4:1a:4e:c1:5e:bf:92:fa:df:f7:dd:c6:1f:0c:
42:77:d1:15:04:ef:b1:fd:5c:f9:be:c1:ce:08:72:9d:10:50:
65:05:3c:77:4d:62:74:1d:97:94:ff:3f:9c:6a:17:b9:0d:15:
25:2b:d0:4d:ea:84:1d:1a:99:7d:b7:be:74:3f:dc:f2:c0:4c:
a9:d6:dc:93:3b:8c:7b:c9:31:1b:19:47:af:e8:83:da:e4:aa:
70:d0:ba:3d:53:c5:82:7f:d5:34:0f:eb:d1:3d:f2:ef:31:20:
42:c3:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:33 2025 by rpki-client