Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/F1dsbB--xX2gaWUP0I7VylnwwrI.roa
File: F1dsbB--xX2gaWUP0I7VylnwwrI.roa (raw, json)
Hash identifier: bTNhj1vlyKwyvSEfGESAf7N3VPf5yUzTOfYEzOhdB2A=
Subject key identifier: 17:57:6C:6C:1F:BE:C5:7D:A0:69:65:0F:D0:8E:D5:CA:59:F0:C2:B2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709537B49C5A747531194AAA8D2D5018
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/F1dsbB--xX2gaWUP0I7VylnwwrI.roa
Signing time: Mon 02 Jan 2023 03:45:05 +0000
ROA not before: Mon 02 Jan 2023 03:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48184
IP address blocks: 95.46.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:37:b4:9c:5a:74:75:31:19:4a:aa:8d:2d:50:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17576c6c1fbec57da069650fd08ed5ca59f0c2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:10:ff:ec:19:bc:af:e8:18:9f:a3:b1:30:
5b:86:50:70:9b:dc:38:05:35:c3:8f:8c:a4:d0:f3:
77:5f:e4:e4:6b:02:70:55:40:3a:0a:31:03:4f:f5:
70:6c:67:b8:4e:5e:8d:5d:6e:89:7e:5a:c2:34:c7:
7e:39:54:58:f4:7e:f6:75:32:bb:81:3d:bf:d3:01:
5e:32:51:38:26:9b:ec:ca:4d:32:e0:39:c2:29:a6:
56:42:64:77:22:73:2e:47:f1:a2:2e:82:a8:08:c2:
d6:2c:01:de:40:d3:f3:c6:7d:3e:df:7f:bc:37:8f:
73:4e:c1:92:13:6e:46:3a:19:56:ef:5b:c8:76:2a:
80:eb:f7:f3:12:b7:b8:da:59:5c:69:6b:3e:5c:c5:
78:7b:cb:83:91:8c:9c:49:87:4f:1d:a7:6a:ea:2c:
d4:ab:97:46:ec:e8:d6:96:c8:77:91:98:b0:3d:6b:
0f:b9:2f:90:49:ff:d9:56:39:43:b5:2b:bd:f7:84:
f2:ab:ad:43:f7:4b:a7:1b:7a:d1:5e:65:7c:3a:42:
46:89:bb:fe:3f:23:98:1d:13:3a:f2:ff:15:5d:d2:
92:e9:a8:68:ea:a5:5d:d1:6d:73:1d:89:5a:5f:44:
c5:7d:f5:aa:73:56:24:30:4f:81:0b:3e:e9:12:47:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:57:6C:6C:1F:BE:C5:7D:A0:69:65:0F:D0:8E:D5:CA:59:F0:C2:B2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/F1dsbB--xX2gaWUP0I7VylnwwrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:69:bc:9e:7d:f5:c7:44:bb:30:12:c4:6e:ae:a0:bb:b5:96:
c1:ce:78:c9:19:22:e1:0d:42:dc:ee:22:8d:49:b9:9e:25:6a:
e2:16:26:6e:1b:bc:58:d1:a7:1a:b2:ad:79:e5:7e:a5:34:89:
1d:e8:16:a6:18:b0:3a:f6:d9:45:7b:68:f2:37:03:83:99:76:
7e:1b:8d:71:37:3a:c0:bd:b8:7c:66:fd:02:e7:8d:8e:95:52:
e6:0b:bb:ca:0b:cf:4b:dc:e3:a7:68:43:26:7b:cc:66:12:e2:
3f:d0:78:e6:87:aa:fe:4d:e4:49:67:b2:db:f4:4f:2c:80:a6:
70:75:34:81:ee:a7:b7:bd:9f:2a:3f:aa:b5:bf:ad:71:40:73:
96:a1:49:6a:7c:ea:74:46:b1:8d:bd:65:2b:b2:b9:17:e8:1d:
f7:0d:b5:e5:ff:ca:65:b1:9f:93:e5:af:d5:91:23:8c:7f:d0:
46:8b:0f:0c:29:4f:53:db:5c:7e:26:76:ad:7c:e9:1e:ba:91:
48:0b:16:3f:fb:a3:cf:44:4b:0f:a1:80:e7:17:ab:78:07:5f:
86:f1:dd:05:82:06:82:77:9c:0d:42:5d:0f:06:8d:99:fe:7f:
7d:d6:56:11:12:c2:21:7e:04:67:9f:08:a0:78:b2:75:93:3a:
fb:23:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:05 2025 by rpki-client