Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Cmcw8g4_usmxm_-XKDtoufTxjg4.roa
File: Cmcw8g4_usmxm_-XKDtoufTxjg4.roa (raw, json)
Hash identifier: Xvx4rCsTepwlwykRn02Jg1YMt+fWcXTKXTrEqddOSWA=
Subject key identifier: 0A:67:30:F2:0E:3F:BA:C9:B1:9B:FF:97:28:3B:68:B9:F4:F1:8E:0E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A45B374873608D9D8B57E65372037
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Cmcw8g4_usmxm_-XKDtoufTxjg4.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206326
IP address blocks: 95.47.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:45:b3:74:87:36:08:d9:d8:b5:7e:65:37:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a6730f20e3fbac9b19bff97283b68b9f4f18e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:62:e0:b7:f7:0a:fb:2e:65:1e:88:83:d6:
8f:3d:1f:fb:79:ed:3b:e8:a1:5f:23:29:28:cb:c3:
cf:f1:94:aa:0f:64:de:86:d1:b9:c2:15:f0:b0:6b:
71:f6:83:b7:22:57:b1:2a:ab:b4:ec:69:23:45:b3:
d1:c3:0a:32:23:97:9c:8e:16:6a:36:15:fa:4f:cb:
65:c5:f0:ce:7d:53:2d:0e:da:9c:f8:71:32:81:af:
8e:17:75:1a:49:78:82:12:f8:9d:99:c3:0a:a4:dd:
32:80:26:b5:17:77:ba:96:93:8f:8a:c4:a5:13:62:
64:56:52:28:51:c5:bd:be:ac:95:eb:75:41:ee:a6:
54:1f:9f:e6:f8:96:d7:25:20:ea:28:18:01:c6:1e:
5d:5b:e0:e6:f0:65:08:28:04:8c:59:73:88:eb:b4:
62:a1:2a:19:6a:06:3b:61:2f:a9:14:91:c3:fc:c8:
14:c2:d4:5f:7b:30:3c:35:3e:72:97:5b:df:76:94:
84:cf:82:29:cc:68:06:88:37:fb:df:b3:2c:94:f0:
35:e3:4f:21:f6:40:ba:48:7c:75:6a:2b:6e:1f:29:
ed:29:29:34:89:41:09:c8:39:9a:1f:f3:c3:f4:cd:
81:69:f6:a8:ce:a8:56:61:78:e4:2b:2a:83:8a:47:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:67:30:F2:0E:3F:BA:C9:B1:9B:FF:97:28:3B:68:B9:F4:F1:8E:0E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Cmcw8g4_usmxm_-XKDtoufTxjg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:8e:73:b5:02:43:8b:c9:46:bf:8c:6a:19:d7:93:fb:df:a9:
20:96:61:c0:c2:d3:51:7e:78:33:78:6e:b7:da:6a:46:94:02:
ca:69:af:24:ee:79:78:78:e6:9d:36:32:98:8f:45:05:79:2b:
1a:56:64:f0:af:b1:f0:63:e9:fd:01:10:d2:59:24:4a:95:c8:
db:67:73:34:a8:f1:4f:34:49:a7:eb:1d:f4:a2:41:22:e4:f6:
48:50:79:f7:46:ab:04:49:f9:78:5b:9f:76:ed:52:23:2c:74:
c7:e5:09:34:39:5d:c1:77:90:b4:bd:99:01:54:a5:28:29:7b:
a3:fc:c3:02:79:3e:a2:98:38:06:e5:ea:c4:f9:5b:ee:2f:8f:
33:a2:86:60:24:90:d7:25:82:43:e9:1a:5e:eb:38:a6:a9:c6:
fb:81:b1:77:f9:75:07:97:19:5c:62:a5:ed:f3:38:75:f5:ef:
ba:df:84:b1:de:34:cd:06:85:68:6c:28:2d:75:ab:66:8d:19:
71:cf:0e:d0:e2:18:bc:fe:9a:71:20:c9:d3:06:ff:0d:0a:cf:
f4:b2:30:40:ab:c5:be:f5:c2:0d:1a:91:54:4a:36:f9:ba:23:
4b:ad:3e:b6:1a:07:8e:58:16:0a:4c:eb:f4:c1:20:0f:10:42:
ef:43:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:18 2025 by rpki-client