Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BAXWp3_M9IbfwCIs_hOiCSOrNTI.roa
File: BAXWp3_M9IbfwCIs_hOiCSOrNTI.roa (raw, json)
Hash identifier: K2dhfYkFWHYrMxR0sXy9xir+qRErcH8yvGTTrLbfRLw=
Subject key identifier: 04:05:D6:A7:7F:CC:F4:86:DF:C0:22:2C:FE:13:A2:09:23:AB:35:32
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9DCAC2A41900FE1E75CF4708E47C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BAXWp3_M9IbfwCIs_hOiCSOrNTI.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43047
IP address blocks: 95.47.102.0/24 maxlen: 24
146.120.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9d:ca:c2:a4:19:00:fe:1e:75:cf:47:08:e4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0405d6a77fccf486dfc0222cfe13a20923ab3532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:81:7c:67:10:36:bc:0c:d4:2b:a8:f3:e5:
92:ad:7f:53:f4:6e:54:44:09:f1:d7:03:63:ae:5c:
aa:79:69:bf:68:f7:cb:97:de:9a:0b:74:b1:6e:ee:
ab:b7:28:5e:b9:4d:35:54:73:0f:cd:f9:31:71:5d:
1a:6c:83:39:b1:08:99:a7:7d:02:c0:8f:d7:53:cb:
0a:50:46:d5:0f:79:46:33:a3:a9:e3:33:50:50:87:
c7:d9:0e:a7:db:51:ca:ae:26:8d:bd:b8:52:ec:6a:
38:ee:2a:90:00:d3:8a:d0:10:f2:0d:c5:9e:3c:a6:
39:2a:bb:f8:aa:26:59:44:df:e6:6c:b0:12:55:2d:
be:cf:54:af:6e:e8:09:fb:ae:0e:d9:9f:22:76:27:
da:13:ab:4b:f7:69:7f:c1:2d:1a:0b:5e:a7:1d:4c:
47:44:f5:bf:36:76:bd:73:7e:f9:d1:66:ca:2e:ba:
69:78:c0:aa:70:2e:81:c0:82:41:9f:bd:e9:c1:27:
01:fe:35:84:8b:83:8b:b5:75:d4:49:d6:b7:a3:0a:
29:22:6a:66:a0:ad:fa:fc:94:d3:a0:28:4f:4b:e6:
64:d8:88:62:61:d4:f0:28:2a:22:24:dd:20:20:53:
bd:2f:34:73:af:99:fe:4a:c1:d5:77:19:6b:6f:7c:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:05:D6:A7:7F:CC:F4:86:DF:C0:22:2C:FE:13:A2:09:23:AB:35:32
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BAXWp3_M9IbfwCIs_hOiCSOrNTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.102.0/24
146.120.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e7:4c:08:80:89:67:04:15:e9:0c:64:05:e3:fd:56:65:40:
c9:96:f7:84:4c:b4:1e:f8:c8:a6:25:1a:82:6a:9e:5d:6d:06:
fc:43:6b:6e:ff:d5:e3:c0:39:26:9d:aa:a5:ef:21:f7:6b:a5:
5c:22:81:c3:3b:57:0e:b1:44:77:5e:ae:20:4f:0b:e4:a5:89:
f1:ef:64:a2:f2:51:f0:2f:b9:a6:f8:b5:f0:ee:6a:4a:5a:84:
88:56:ac:b7:87:0d:f4:1f:1c:3f:36:3b:4c:c3:6a:fd:b1:57:
16:bd:c9:66:45:63:68:79:b6:28:61:13:7b:26:3c:cc:a5:39:
0e:e3:c3:c2:d6:b7:6a:0c:92:44:ec:55:b6:f0:88:82:d6:22:
cf:81:80:43:9a:a2:c2:f2:fc:16:19:38:61:8e:ff:c5:1e:53:
91:20:1a:0d:8c:92:6f:6b:ce:e0:ad:22:e4:a4:79:ce:17:59:
c1:63:1f:58:e6:ff:e1:a6:fa:7a:52:6e:4b:b1:f7:03:24:dd:
ce:63:d7:8b:e8:bb:6f:09:47:d9:41:81:bf:af:79:d7:53:ff:
2e:82:15:c8:d9:ff:f1:c8:6d:c6:47:02:64:af:7f:dd:f9:3d:
04:19:d6:b7:57:7d:b1:fb:5c:8b:31:5d:f4:9f:4c:64:ea:63:
7b:65:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:14 2025 by rpki-client