Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AFzo6w1C7MdakeStA9Eduv_tEmE.roa
File: AFzo6w1C7MdakeStA9Eduv_tEmE.roa (raw, json)
Hash identifier: UOuSCULST5WR7/V6DN0Nc3xRAQIdEsGRlDLZGvADv7E=
Subject key identifier: 00:5C:E8:EB:0D:42:EC:C7:5A:91:E4:AD:03:D1:1D:BA:FF:ED:12:61
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956C81E794DA0EAD28E22277517BE0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AFzo6w1C7MdakeStA9Eduv_tEmE.roa
Signing time: Mon 02 Jan 2023 03:45:18 +0000
ROA not before: Mon 02 Jan 2023 03:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60603
IP address blocks: 95.47.147.0/24 maxlen: 24
93.171.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6c:81:e7:94:da:0e:ad:28:e2:22:77:51:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=005ce8eb0d42ecc75a91e4ad03d11dbaffed1261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:e3:e8:22:21:4e:a7:62:d5:e2:b8:39:00:
00:39:92:52:f6:94:94:b4:f4:29:b8:f6:55:40:d4:
20:29:ee:93:8f:cd:9e:22:91:e7:ee:c6:e7:dc:be:
81:b9:5a:96:6e:79:b1:0d:68:f8:ef:ef:f1:88:96:
18:e3:11:1e:8b:4e:c8:6b:84:98:10:36:9c:17:58:
36:ac:54:18:2f:1c:c2:c9:38:34:f3:76:fb:69:dd:
43:5b:17:0e:fa:7c:71:2c:f2:1b:ca:fb:c8:26:0a:
9f:e4:f6:f6:f4:71:f6:80:2a:96:5e:53:30:fe:57:
15:57:16:4c:64:df:12:ea:3f:07:8f:12:67:f4:e6:
ca:ed:99:8c:c9:92:1a:9a:89:f4:59:6f:68:1a:4b:
47:74:6e:e5:1e:9e:c7:76:ff:29:1d:91:b1:df:78:
08:7d:05:58:b4:cf:e0:b1:c2:ad:73:bc:df:e3:7e:
b7:d9:99:07:dc:5e:fc:8d:58:1a:af:cb:34:0d:14:
75:bb:16:ad:18:3b:8e:38:a4:15:a3:18:ae:1d:51:
e9:1e:3c:46:10:24:8a:0a:c2:01:99:43:2a:2f:c9:
97:cd:5e:d6:52:bb:7b:4c:00:19:0b:0b:b9:fd:0e:
f9:b9:de:16:11:30:42:1c:b2:a9:1a:e7:1e:c8:8e:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:E8:EB:0D:42:EC:C7:5A:91:E4:AD:03:D1:1D:BA:FF:ED:12:61
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AFzo6w1C7MdakeStA9Eduv_tEmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.10.0/23
95.47.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8d:88:f5:81:0f:7a:14:d5:f0:4c:67:ba:07:04:de:25:55:
3e:1e:c5:7b:c1:f5:b1:55:3e:1d:fd:4e:bd:0c:8d:77:25:92:
5d:8f:10:4f:ff:c5:04:95:5d:c2:df:25:72:9a:f7:48:05:db:
86:fc:64:73:8b:6e:33:d0:cc:d8:d3:26:f4:af:6c:a5:16:91:
db:f0:79:70:0b:e1:ac:fe:f7:82:a8:a2:ac:c1:d9:a2:73:81:
ed:0f:a2:27:01:e8:ab:4f:55:d0:95:54:15:45:c3:ae:ca:6b:
a6:6d:e7:f8:28:fa:4a:d8:f9:98:6a:77:a0:2c:08:d0:f8:4d:
81:f2:94:7b:24:a1:44:72:e6:3f:bc:91:3c:60:13:b0:dc:2b:
62:29:49:12:55:36:b0:93:97:b7:97:6d:70:4d:44:3a:63:ee:
bc:23:90:76:b4:f7:8e:9e:3d:11:7b:94:78:7a:cf:29:f1:ad:
5d:83:45:c7:8d:1b:37:08:32:41:f7:1e:d2:88:fc:b2:9a:c6:
98:3a:57:37:ca:25:9f:7a:6f:9a:85:b5:dd:95:b5:45:77:14:
52:02:c2:e6:c8:71:9e:25:8a:fb:d8:e9:76:87:8b:e7:7c:15:
a1:f5:d0:77:60:d8:ef:5d:e3:61:f2:95:fa:5e:fe:39:27:66:
f2:2f:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:28 2025 by rpki-client