Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C2ZW1SoY_f1enCFfZI_DA7piSB8.roa
File: C2ZW1SoY_f1enCFfZI_DA7piSB8.roa (raw, json)
Hash identifier: EHBjivyAEAsnkYqGFNICCJXfmyUJqHBDdIhwd/RcZDY=
Subject key identifier: 0B:66:56:D5:2A:18:FD:FD:5E:9C:21:5F:64:8F:C3:03:BA:62:48:1F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 29B79FDD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C2ZW1SoY_f1enCFfZI_DA7piSB8.roa
Signing time: Mon 02 May 2022 12:17:44 +0000
ROA not before: Mon 02 May 2022 12:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43060
IP address blocks: 92.38.28.0/22 maxlen: 24
95.47.108.0/22 maxlen: 24
93.171.72.0/22 maxlen: 24
31.148.192.0/22 maxlen: 24
93.171.128.0/22 maxlen: 24
95.47.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699899869 (0x29b79fdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 2 12:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b6656d52a18fdfd5e9c215f648fc303ba62481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:1d:d9:8a:e0:f6:84:d5:22:a5:3c:ce:45:
a6:bf:ce:ca:86:fa:ba:f4:71:d9:41:7d:5d:93:d6:
82:c0:06:08:9f:4c:d3:95:58:47:fe:70:5f:fa:51:
9a:0f:6d:0a:f5:e3:14:a5:07:e2:53:a5:ef:f9:58:
33:1a:f7:8e:36:15:ed:ce:f3:3f:d8:81:5b:96:8a:
81:42:5a:3c:21:5f:63:11:5d:5f:ca:3d:1e:9d:a3:
12:cb:e6:b1:d9:3f:44:df:de:7c:f7:18:d6:e0:0a:
3e:6d:d0:25:b6:a3:62:e2:7e:ca:a6:76:2e:0a:66:
9d:07:14:cf:0e:54:67:a0:34:78:b3:cc:53:0e:17:
36:da:c8:be:eb:f9:33:92:50:8b:7d:58:29:f9:86:
43:57:55:de:4e:d0:9a:e0:b9:53:c1:4e:4b:2c:2b:
33:20:b1:1a:5a:b3:05:05:7f:1e:f0:0e:e5:31:a0:
c5:ee:ad:c7:b8:d1:d8:40:b9:c4:d8:aa:4a:7c:ca:
12:21:15:99:c6:84:b2:1a:2a:a9:cd:51:e7:8c:57:
e4:64:36:e1:08:80:d4:e2:7b:98:1e:5b:c9:aa:56:
21:74:a5:71:0c:d8:1d:73:28:0a:bb:5b:43:52:81:
be:44:a2:ef:3a:b9:90:0c:c5:aa:c3:4b:15:aa:a0:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:56:D5:2A:18:FD:FD:5E:9C:21:5F:64:8F:C3:03:BA:62:48:1F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C2ZW1SoY_f1enCFfZI_DA7piSB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.192.0/22
92.38.28.0/22
93.171.72.0/22
93.171.128.0/22
95.47.108.0/22
95.47.192.0/22
Signature Algorithm: sha256WithRSAEncryption
03:e6:b1:8f:3e:d8:b4:b8:4b:5d:98:2b:64:7e:0b:71:77:33:
00:76:0c:03:a6:ec:2e:ac:e5:78:b4:11:81:e8:28:80:81:b0:
34:98:7e:f5:1e:17:8a:07:b8:43:c8:d2:73:19:aa:8b:7d:b7:
86:73:9b:3b:1e:e3:52:19:d8:7c:8d:ed:43:ef:c1:db:9d:f6:
c1:e3:0c:ec:de:2f:87:fd:25:6e:52:ae:1a:92:a6:21:32:4f:
48:cb:9b:9a:37:40:19:60:44:80:fd:0f:13:90:6d:60:5d:53:
75:95:57:85:91:ab:a3:12:be:96:c3:32:ee:02:f9:a5:f6:43:
94:7c:85:44:dd:e5:90:aa:a9:dd:a1:a6:01:aa:00:82:47:09:
e9:96:12:2b:80:47:ea:99:66:99:50:d2:de:82:9c:1b:39:18:
b8:d8:46:74:73:ca:06:4b:1e:86:2d:ec:c7:7c:23:78:8d:22:
7a:4c:83:3d:67:c2:df:d4:ae:5f:03:7b:e5:65:c7:e0:13:46:
6b:8f:ce:87:25:a9:c9:fe:1a:5b:99:4c:e3:5e:4e:90:e1:5d:
ce:c3:1a:76:74:37:3a:2f:a9:4c:fb:00:b2:9d:3a:a9:7a:0d:
a9:58:8a:9d:15:88:f1:07:57:22:ec:b9:45:b0:f7:17:b4:60:
06:6c:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:38 2025 by rpki-client