Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8RwIkEm5k9H8cH_wa9Gxi8heqiM.roa
File: 8RwIkEm5k9H8cH_wa9Gxi8heqiM.roa (raw, json)
Hash identifier: MVriis8OV/hCR2HI3E+FYoQgclpryOMHJhp2qHp/3v0=
Subject key identifier: F1:1C:08:90:49:B9:93:D1:FC:70:7F:F0:6B:D1:B1:8B:C8:5E:AA:23
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01847AB30C36E2AB2B928062C3249C436F5D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8RwIkEm5k9H8cH_wa9Gxi8heqiM.roa
Signing time: Tue 15 Nov 2022 09:51:05 +0000
ROA not before: Tue 15 Nov 2022 09:51:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41575
IP address blocks: 95.46.144.0/24 maxlen: 24
95.46.34.0/23 maxlen: 24
31.148.224.0/20 maxlen: 24
93.171.48.0/20 maxlen: 24
31.148.32.0/21 maxlen: 24
93.171.80.0/20 maxlen: 24
92.253.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:b3:0c:36:e2:ab:2b:92:80:62:c3:24:9c:43:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 15 09:51:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f11c089049b993d1fc707ff06bd1b18bc85eaa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:3f:a2:8f:1d:da:a7:04:9b:f2:d8:54:38:
85:86:50:cc:49:02:3a:94:2a:6d:2c:6b:8d:db:f6:
1c:44:4d:a7:87:93:b1:7f:1a:ba:b2:32:24:3f:d4:
1c:fe:80:9e:fb:f9:3f:2a:eb:74:ae:f5:80:06:64:
26:c2:8d:c8:67:cb:10:24:56:f9:9f:fb:63:56:bb:
54:50:bb:b1:bc:00:ba:fd:39:ea:cd:b9:28:98:2e:
59:1e:7d:a8:d8:45:28:e5:1d:91:09:ec:55:9b:77:
f5:21:1a:33:b2:dd:db:44:68:d4:41:0a:56:32:ea:
5b:67:c3:dd:fb:e4:4c:ce:eb:c6:e6:81:2d:70:87:
59:5b:f2:96:be:18:31:19:d6:c1:cf:af:1b:ab:31:
5e:43:31:8d:aa:c8:76:47:b3:1b:9d:5f:84:c2:a3:
ae:22:e3:b9:df:eb:4f:d5:aa:f5:1d:bd:29:64:0c:
1f:8b:5e:05:fc:b8:86:ac:7f:ae:97:9a:60:b8:6b:
4c:57:10:bd:e2:62:db:c1:e6:36:27:05:c9:a8:fc:
f3:bc:67:a3:f6:18:a6:10:e8:8a:04:72:94:e1:5c:
40:c5:a8:0e:ab:b6:e7:3c:d3:8b:18:51:69:ad:0a:
f5:eb:6c:0c:e4:7b:f6:4c:11:82:71:20:87:42:25:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:08:90:49:B9:93:D1:FC:70:7F:F0:6B:D1:B1:8B:C8:5E:AA:23
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8RwIkEm5k9H8cH_wa9Gxi8heqiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.32.0/21
31.148.224.0/20
92.253.240.0/20
93.171.48.0/20
93.171.80.0/20
95.46.34.0/23
95.46.144.0/24
Signature Algorithm: sha256WithRSAEncryption
33:26:ab:33:47:70:57:ca:07:bf:3a:65:90:8d:52:a1:b1:6e:
10:b0:d4:94:62:bb:36:36:8f:a5:90:c4:cb:c6:c3:14:2b:43:
ea:44:64:c8:cd:3d:2a:f7:25:04:93:34:46:95:5d:5d:1c:c7:
43:33:a5:53:30:24:d2:4f:c2:2d:b5:2b:6f:25:b4:c5:d3:14:
1c:73:b8:f3:69:d6:c0:93:37:6e:dd:fe:be:0d:19:ba:53:b3:
0f:b8:ac:f1:50:43:f5:5f:c2:1b:53:14:18:01:7d:fb:b3:e4:
3d:7b:e5:a5:b9:5c:eb:00:ec:5a:d6:ac:58:ce:00:9a:e2:15:
7e:5e:ce:13:74:16:c9:d8:04:54:99:b5:cd:5a:38:3d:8b:65:
ec:84:19:9d:2c:06:96:9c:df:e4:e3:81:d6:50:f8:cf:77:7c:
ec:ab:9b:ec:39:33:a8:38:2a:80:0e:80:d0:89:77:1c:f7:71:
10:b3:4a:da:45:c8:a7:95:d4:dd:c6:49:cb:73:fc:e7:58:d8:
a5:66:81:09:c1:2e:89:ee:78:19:b4:27:7a:a6:6b:bf:98:43:
a3:e8:af:b0:a0:3c:87:99:ff:79:d1:62:ac:a6:4c:68:cc:47:
fc:fb:f5:b4:76:3f:1e:0d:e8:da:ae:42:cd:8e:ee:7b:8e:8c:
cc:40:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:04 2025 by rpki-client