Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Cnw3l1eNfQtpnFuI2mv2qzdzufE.roa
File: Cnw3l1eNfQtpnFuI2mv2qzdzufE.roa (raw, json)
Hash identifier: 7SU/3DoP4eI5kYsRvWTrzD2ctPHkut9elkFASGP0MaQ=
Subject key identifier: 0A:7C:37:97:57:8D:7D:0B:69:9C:5B:88:DA:6B:F6:AB:37:73:B9:F1
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F27150
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Cnw3l1eNfQtpnFuI2mv2qzdzufE.roa
Signing time: Sat 01 Jan 2022 16:09:12 +0000
ROA not before: Sat 01 Jan 2022 16:09:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60603
IP address blocks: 95.47.147.0/24 maxlen: 24
93.171.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670200144 (0x27f27150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a7c3797578d7d0b699c5b88da6bf6ab3773b9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:81:0b:d1:0f:1c:b0:a5:fd:90:8c:c3:bb:
6c:b0:1c:a0:99:63:9e:52:4b:42:9f:a7:2a:2c:3c:
9d:d5:e2:81:11:4c:a6:dd:d7:90:e8:5a:e0:dc:22:
4d:99:a3:b0:79:ca:1a:fc:80:8b:85:f3:66:3d:ed:
7c:28:c6:e8:41:92:80:fb:0a:99:d6:c1:64:28:ef:
31:9d:14:c7:51:85:3a:97:7a:88:d4:6f:99:58:bd:
f8:ff:46:84:1b:7d:fa:02:dd:3b:3a:21:9d:3f:87:
35:da:ff:79:05:67:87:0c:9e:f8:12:56:a5:30:98:
d0:4b:f7:05:81:67:cd:88:fe:9c:81:87:7e:4a:ca:
c2:73:3b:c8:6f:57:dd:90:c1:e2:5e:82:c8:eb:6c:
3b:5e:da:b8:c7:c1:6b:40:ae:b3:3b:42:5b:de:d8:
fb:da:70:ec:fa:d2:68:da:97:05:88:33:6d:1a:e4:
cc:da:78:b1:97:79:0d:b2:49:d8:c6:a8:b6:9a:ab:
96:05:ac:f9:05:e2:9d:42:78:27:ff:06:d2:1a:6c:
94:b1:09:46:37:d0:00:bd:6f:ee:5c:07:cf:c7:77:
44:19:c8:91:5f:04:20:06:24:e4:b3:f6:3d:89:2d:
f1:5c:f1:bc:3e:69:63:69:c9:1c:f4:0f:a7:3a:ab:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:37:97:57:8D:7D:0B:69:9C:5B:88:DA:6B:F6:AB:37:73:B9:F1
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Cnw3l1eNfQtpnFuI2mv2qzdzufE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.10.0/23
95.47.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a1:6d:2a:60:c4:ef:2e:b4:9b:02:00:6f:1f:ef:c7:d2:d2:
7e:51:da:97:fa:bc:12:90:ff:8f:3c:11:dc:7a:66:9d:11:1d:
9c:fe:42:e8:f9:cb:56:d8:14:1d:54:0e:f9:d2:78:24:f8:9e:
a9:30:f8:22:ed:2c:cf:fe:fa:eb:ee:f2:db:60:d3:fb:ea:5d:
ac:2b:df:3a:2c:5a:79:93:d3:f7:79:3c:32:9b:45:64:e2:c2:
29:f5:4a:d6:e5:f1:1a:a6:85:c3:09:1a:53:ba:3c:ab:67:2c:
63:52:dc:20:92:71:0e:af:1a:99:38:ac:d8:60:39:54:cf:81:
e9:8c:2f:84:45:b2:ee:14:3b:5e:74:1c:09:22:ea:96:06:06:
f3:4d:39:7e:d6:70:84:37:a6:6d:be:d4:6f:5b:ee:16:5f:85:
84:fb:f5:86:df:53:f7:fe:63:e5:c1:ff:2b:b9:de:7f:6b:d3:
3e:da:35:9b:87:97:93:c7:c2:49:b2:49:15:40:84:55:52:84:
c4:1c:af:41:94:7a:c4:26:3f:18:48:ee:7c:6b:65:c5:da:24:
8f:c1:99:df:f6:7b:9f:94:ec:f0:be:2d:62:48:d1:47:88:b2:
2a:40:8c:5a:ea:30:bc:b0:e2:14:3e:a2:81:37:b2:24:1a:61:
15:31:d7:53
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEJ/JxUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE3YzM3OTc1Nzhk
N2QwYjY5OWM1Yjg4ZGE2YmY2YWIzNzczYjlmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALaogQvRDxywpf2QjMO7bLAcoJljnlJLQp+nKiw8ndXigRFM
pt3XkOha4NwiTZmjsHnKGvyAi4XzZj3tfCjG6EGSgPsKmdbBZCjvMZ0Ux1GFOpd6
iNRvmVi9+P9GhBt9+gLdOzohnT+HNdr/eQVnhwye+BJWpTCY0Ev3BYFnzYj+nIGH
fkrKwnM7yG9X3ZDB4l6CyOtsO17auMfBa0CusztCW97Y+9pw7PrSaNqXBYgzbRrk
zNp4sZd5DbJJ2MaotpqrlgWs+QXinUJ4J/8G0hpslLEJRjfQAL1v7lwHz8d3RBnI
kV8EIAYk5LP2PYkt8VzxvD5pY2nJHPQPpzqrrOsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQKfDeXV419C2mcW4jaa/arN3O58TAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0NudzNsMWVOZlF0cG5GdUkybXYycXpkenVmRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAV2rCgMEAF8vkzANBgkqhkiG9w0B
AQsFAAOCAQEAjaFtKmDE7y60mwIAbx/vx9LSflHal/q8EpD/jzwR3HpmnREdnP5C
6PnLVtgUHVQO+dJ4JPieqTD4Iu0sz/766+7y22DT++pdrCvfOixaeZPT93k8MptF
ZOLCKfVK1uXxGqaFwwkaU7o8q2csY1LcIJJxDq8amTis2GA5VM+B6YwvhEWy7hQ7
XnQcCSLqlgYG8005ftZwhDembb7Ub1vuFl+FhPv1ht9T9/5j5cH/K7nef2vTPto1
m4eXk8fCSbJJFUCEVVKExByvQZR6xCY/GEjufGtlxdokj8GZ3/Z7n5Ts8L4tYkjR
R4iyKkCMWuowvLDiFD6igTeyJBphFTHXUw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:11 2025 by rpki-client