Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AzRRGWHHX95QHZndmrMt0QzKx68.roa
File: AzRRGWHHX95QHZndmrMt0QzKx68.roa (raw, json)
Hash identifier: pPWbvfmgx/yZe45/TIklNrg0blrk7IvnOobNLyrbCps=
Subject key identifier: 03:34:51:19:61:C7:5F:DE:50:1D:99:DD:9A:B3:2D:D1:0C:CA:C7:AF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF73A95FD58E939D4D93B79884146
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AzRRGWHHX95QHZndmrMt0QzKx68.roa
Signing time: Thu 02 Jan 2025 05:49:39 +0000
ROA not before: Thu 02 Jan 2025 05:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206326
IP address blocks: 95.47.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f7:3a:95:fd:58:e9:39:d4:d9:3b:79:88:41:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0334511961c75fde501d99dd9ab32dd10ccac7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:45:68:8a:0f:e6:ba:8e:07:c9:27:16:62:
4c:5c:69:9f:6c:52:ed:aa:ef:86:7b:d2:6b:cb:ca:
c1:42:27:eb:ee:c1:2b:f0:ee:25:1a:a8:dc:2d:52:
29:a5:2c:ba:37:a4:c5:93:47:c9:5b:52:15:1f:03:
22:0d:80:fd:ec:85:c1:92:d6:6b:a4:ce:dd:90:40:
e9:b7:59:20:c9:1e:1a:03:66:0c:60:03:e5:3b:a5:
02:37:92:92:d7:ad:29:54:83:d8:87:db:e7:97:f1:
36:32:2c:4f:6e:fc:24:75:ba:4b:ad:cd:3b:f3:40:
4c:cf:f8:99:e1:54:d8:e7:b4:37:3a:9a:39:23:f7:
73:66:67:70:f7:e3:14:e5:be:c9:f1:77:ea:cf:e6:
b2:aa:72:e5:da:f3:32:f7:a8:1a:8c:a5:e5:49:b5:
98:60:82:b7:4f:cc:b5:27:76:78:e0:3b:e4:30:65:
76:8b:9a:a0:7e:66:dc:0e:ae:5c:e5:d4:25:ba:c4:
cb:42:e3:28:29:f0:21:fc:07:23:fb:2b:1b:51:97:
bc:2d:8f:2f:f3:e7:b3:ca:e9:5b:f5:ed:2e:b3:b1:
05:c7:13:f8:2e:67:a8:b5:6a:ad:1b:0e:91:69:e9:
93:9b:41:52:3d:4c:6e:dd:1f:6f:cc:9f:16:8e:f3:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:51:19:61:C7:5F:DE:50:1D:99:DD:9A:B3:2D:D1:0C:CA:C7:AF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AzRRGWHHX95QHZndmrMt0QzKx68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.104.0/23
Signature Algorithm: sha256WithRSAEncryption
43:13:90:84:60:da:85:7a:0d:4d:b0:0d:fa:55:49:48:89:22:
78:f6:22:f1:b2:28:cf:12:a5:73:c0:7c:e2:64:23:47:1b:49:
d9:ef:0b:81:67:e9:e9:e2:76:f0:9f:89:e6:df:a1:3f:83:c2:
7c:87:4e:e7:d7:d5:33:6b:f3:e5:e8:c5:6e:9d:cc:bb:55:28:
1c:6e:83:06:0b:1f:0f:7b:86:6c:07:db:8f:bb:56:87:e9:fd:
bd:4f:e3:e8:86:9b:f6:80:77:fa:82:f5:54:dd:8b:b6:3c:98:
e2:ee:ac:f3:99:45:f3:e6:e6:46:12:c1:17:3e:29:b6:c8:dc:
ad:a7:fb:c2:fc:db:89:8b:6a:29:98:ca:b3:26:f8:59:01:70:
6f:02:e5:83:a2:04:af:a7:68:21:1c:73:20:83:cb:97:aa:3a:
50:8d:f6:93:2b:c4:c0:8a:1c:d9:f2:2e:85:bf:4f:28:d9:de:
37:53:5e:d1:2d:4f:5e:77:a5:ac:6f:19:5a:e2:f8:ca:b7:41:
40:ab:16:6f:5c:e8:2f:eb:a0:3f:a2:1a:2b:91:bf:3a:b8:99:
08:56:81:11:5e:8f:e2:08:7b:18:c0:7e:90:4e:d9:09:f9:a9:
7a:6d:17:10:b8:4f:83:69:84:a0:68:d2:25:c0:12:f8:89:e2:
58:46:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:52 2025 by rpki-client