Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DFF3vOaIZ0zaOUCspyCNqwqahKw.roa
File: DFF3vOaIZ0zaOUCspyCNqwqahKw.roa (raw, json)
Hash identifier: A/0o5+aF+V0ZAXECxhkQzao3wXD0jPYPTOGNBMsNqyI=
Subject key identifier: 0C:51:77:BC:E6:88:67:4C:DA:39:40:AC:A7:20:8D:AB:0A:9A:84:AC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2A0A8AA1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DFF3vOaIZ0zaOUCspyCNqwqahKw.roa
Signing time: Wed 01 Jun 2022 09:04:21 +0000
ROA not before: Wed 01 Jun 2022 09:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213029
IP address blocks: 95.47.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705333921 (0x2a0a8aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 1 09:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c5177bce688674cda3940aca7208dab0a9a84ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:ae:b1:70:e2:1c:a1:0a:c9:2a:b8:c1:48:
f4:66:38:44:42:25:bb:b1:cc:46:61:08:0e:07:09:
a3:59:67:59:57:c7:6d:5d:1d:92:cb:8a:d0:3a:5f:
bb:4f:de:3e:a3:0a:3a:68:2a:be:a3:18:68:dc:f9:
48:c7:6f:6d:af:bb:c9:d2:37:6c:df:6c:e3:3b:4e:
f8:35:db:21:95:20:bf:3c:d4:ba:3d:19:3f:07:d5:
9a:23:74:df:94:49:1d:6f:aa:c2:8b:65:6d:eb:76:
ff:47:13:b0:c4:42:b9:77:a9:a7:e8:25:7b:eb:1a:
15:19:3a:a1:54:6d:da:8a:68:97:5d:20:13:79:80:
33:9b:64:9c:17:22:33:49:8b:3f:49:e9:8b:4a:e4:
0d:a4:71:26:fa:63:25:50:db:30:57:14:11:88:07:
85:68:d3:1d:1a:51:65:74:de:d7:96:e2:ef:60:88:
13:0f:4b:58:11:fe:db:b5:3f:17:f2:af:f6:d3:19:
94:0b:6d:a9:da:47:19:1e:50:bb:82:1c:c3:45:af:
99:a2:21:9f:2c:44:01:24:1c:e1:23:09:3f:6c:67:
ab:3b:96:66:f2:7e:b5:2b:23:ac:1a:e0:d8:55:9c:
fd:0b:03:5a:cb:90:8a:bb:b6:5f:fd:fd:48:c3:50:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:77:BC:E6:88:67:4C:DA:39:40:AC:A7:20:8D:AB:0A:9A:84:AC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DFF3vOaIZ0zaOUCspyCNqwqahKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ee:d3:35:57:df:c4:eb:d3:83:b6:d7:16:26:d7:d5:1b:c7:
16:95:13:19:c2:c0:58:c6:56:99:c0:4f:41:d1:bf:b0:6f:a4:
82:71:ce:9d:59:8a:01:5b:17:ee:ec:66:e0:fb:60:bc:b5:17:
9e:b4:3d:b3:fb:15:44:03:87:d3:0f:74:07:10:00:7d:61:d6:
b4:d5:d9:17:b7:e3:74:13:6d:98:39:5b:1c:81:05:72:18:ae:
59:10:84:19:61:ea:0d:a4:8d:08:a5:af:5a:29:ca:b9:53:d4:
c7:ee:96:5c:93:48:5f:33:d6:d9:92:e4:06:0f:f8:14:90:0c:
3b:8d:dc:76:b7:b2:f8:f6:16:e6:2f:7d:b8:41:51:a6:c1:09:
dc:92:42:83:7f:82:9d:f8:66:bd:25:c6:93:b0:95:a7:10:ff:
ea:2d:26:9c:12:58:c9:4b:01:49:ec:4a:63:fe:e8:19:1f:a6:
5e:b7:88:41:0e:8c:fa:db:90:ef:69:7e:d5:72:36:7c:93:35:
96:04:53:93:08:25:81:4c:e5:e3:55:6d:fd:63:f3:9a:2e:4c:
b8:b3:3e:18:a5:8c:6f:8c:56:39:8d:68:17:d6:e6:ea:f2:64:
03:12:95:3b:11:58:a6:08:b3:53:13:82:26:29:e1:33:94:b8:
bc:53:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:28 2025 by rpki-client