Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/97xPfI8g3zwilT-wWhQKF9qN2pU.roa
File: 97xPfI8g3zwilT-wWhQKF9qN2pU.roa (raw, json)
Hash identifier: SuVTnINpQFMuRaBUknoQnsmSLRAXiBEMTaTOgt66f6M=
Subject key identifier: F7:BC:4F:7C:8F:20:DF:3C:22:95:3F:B0:5A:14:0A:17:DA:8D:DA:95
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2757DCA1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/97xPfI8g3zwilT-wWhQKF9qN2pU.roa
Signing time: Sat 01 Jan 2022 16:07:46 +0000
ROA not before: Sat 01 Jan 2022 16:07:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6876
IP address blocks: 95.46.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660069537 (0x2757dca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7bc4f7c8f20df3c22953fb05a140a17da8dda95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:99:09:b3:be:15:ad:cb:71:08:da:db:fa:
b4:b2:a3:79:52:87:0e:c3:0d:43:f9:bc:c7:c5:35:
3e:80:4b:11:fd:6b:e6:9f:88:a8:05:94:fe:90:a5:
82:a9:14:51:82:3f:c7:2d:8c:74:23:ee:52:07:e9:
8d:89:c4:43:68:d5:a2:04:d3:58:2c:84:6b:e4:e5:
84:80:7f:ff:10:54:ab:36:86:56:4f:55:1c:f0:c7:
a9:84:12:1f:d6:12:05:04:22:8f:72:5d:2c:7b:13:
00:04:bc:74:13:3d:34:01:a1:06:14:4e:94:e3:6e:
70:27:14:c3:d8:8d:35:31:25:58:3c:c0:3e:bf:2a:
ac:ed:86:85:29:86:f3:48:82:81:4d:88:3b:d1:d7:
b5:bd:79:22:53:51:c6:fa:6d:32:f1:c8:94:16:56:
83:c6:ec:fc:9d:5d:38:28:75:f6:30:25:d6:73:23:
9b:1e:15:94:70:6b:65:01:58:01:4f:77:f0:10:f5:
e6:d4:8b:81:8b:64:6c:59:81:89:63:4a:ce:15:29:
b9:34:d9:11:65:3b:0a:66:d7:ca:f4:28:b3:4f:af:
93:54:a7:a8:71:c4:2e:ab:7a:26:57:d5:2a:44:2d:
77:04:c1:d5:96:d3:17:18:73:7a:fb:01:b0:34:b0:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:4F:7C:8F:20:DF:3C:22:95:3F:B0:5A:14:0A:17:DA:8D:DA:95
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/97xPfI8g3zwilT-wWhQKF9qN2pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.107.0/24
Signature Algorithm: sha256WithRSAEncryption
35:dc:4c:a6:0f:53:2a:8d:3c:dd:36:3b:9c:a6:a2:6e:16:52:
48:c6:34:91:d8:8b:03:39:6f:ad:24:51:52:e4:c7:4b:03:67:
9d:3f:74:e5:cf:4b:3b:d9:26:55:0c:e2:ab:c6:d8:8e:e3:0f:
ef:47:13:66:1e:3a:be:20:2b:30:00:84:08:78:43:7b:d9:ce:
d7:69:57:ab:ea:c9:74:c7:07:5c:0a:52:96:b8:c4:96:8f:15:
47:06:77:d3:2b:a5:7b:2b:ad:d8:d4:32:f1:d3:9c:0b:f7:14:
72:93:45:87:7b:2a:f3:fd:e3:a5:59:5f:08:64:96:a2:fa:64:
47:ed:ff:4c:eb:ff:c5:d1:b5:c0:39:50:7c:91:9f:11:63:35:
d3:f6:cc:49:85:a2:55:5a:33:2f:4f:d7:a2:e9:05:9d:d6:e5:
96:26:a9:46:96:ef:87:3f:75:6a:9f:5f:cb:6e:83:db:6c:74:
9a:91:ea:f2:ab:b6:ea:a2:c3:08:9c:40:cf:da:4d:84:1a:d7:
94:c0:68:c5:f8:17:2e:b8:f7:fa:03:ae:71:75:10:6e:ae:40:
f0:8c:a7:22:b4:9a:b8:dc:36:12:59:1c:37:37:54:c5:41:8b:
8f:9d:8c:05:f3:5f:2e:12:44:d8:0b:15:e1:5f:e2:29:87:09:
d0:fd:e3:f3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ1fcoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjdiYzRmN2M4ZjIw
ZGYzYzIyOTUzZmIwNWExNDBhMTdkYThkZGE5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIQYmQmzvhWty3EI2tv6tLKjeVKHDsMNQ/m8x8U1PoBLEf1r
5p+IqAWU/pClgqkUUYI/xy2MdCPuUgfpjYnEQ2jVogTTWCyEa+TlhIB//xBUqzaG
Vk9VHPDHqYQSH9YSBQQij3JdLHsTAAS8dBM9NAGhBhROlONucCcUw9iNNTElWDzA
Pr8qrO2GhSmG80iCgU2IO9HXtb15IlNRxvptMvHIlBZWg8bs/J1dOCh19jAl1nMj
mx4VlHBrZQFYAU938BD15tSLgYtkbFmBiWNKzhUpuTTZEWU7CmbXyvQos0+vk1Sn
qHHELqt6JlfVKkQtdwTB1ZbTFxhzevsBsDSw/j0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT3vE98jyDfPCKVP7BaFAoX2o3alTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
Lzk3eFBmSThnM3p3aWxULXdXaFFLRjlxTjJwVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF8uazANBgkqhkiG9w0BAQsFAAOC
AQEANdxMpg9TKo083TY7nKaibhZSSMY0kdiLAzlvrSRRUuTHSwNnnT905c9LO9km
VQziq8bYjuMP70cTZh46viArMACECHhDe9nO12lXq+rJdMcHXApSlrjElo8VRwZ3
0yuleyut2NQy8dOcC/cUcpNFh3sq8/3jpVlfCGSWovpkR+3/TOv/xdG1wDlQfJGf
EWM10/bMSYWiVVozL0/XoukFndblliapRpbvhz91ap9fy26D22x0mpHq8qu26qLD
CJxAz9pNhBrXlMBoxfgXLrj3+gOucXUQbq5A8IynIrSauNw2ElkcNzdUxUGLj52M
BfNfLhJE2AsV4V/iKYcJ0P3j8w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:54 2025 by rpki-client