Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FEQ6zP6fh7J3P1YdiPrvqmP-YV4.roa
File: FEQ6zP6fh7J3P1YdiPrvqmP-YV4.roa (raw, json)
Hash identifier: miUx6OHIHVh6uKBRD7xp9Qr9SllkkcGaOyLrgGhzHks=
Subject key identifier: 14:44:3A:CC:FE:9F:87:B2:77:3F:56:1D:88:FA:EF:AA:63:FE:61:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2783B532
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FEQ6zP6fh7J3P1YdiPrvqmP-YV4.roa
Signing time: Sat 01 Jan 2022 16:08:12 +0000
ROA not before: Sat 01 Jan 2022 16:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42772
IP address blocks: 151.249.128.0/17 maxlen: 24
95.46.46.0/24 maxlen: 24
92.38.64.0/20 maxlen: 24
95.46.200.0/21 maxlen: 24
95.46.208.0/24 maxlen: 24
146.120.128.0/20 maxlen: 24
93.171.112.0/20 maxlen: 24
146.120.144.0/21 maxlen: 24
146.120.32.0/21 maxlen: 24
95.46.16.0/20 maxlen: 24
93.170.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662943026 (0x2783b532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14443accfe9f87b2773f561d88faefaa63fe615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:d5:a9:70:dd:c1:08:9f:10:0d:90:7a:9b:
e8:c7:35:24:0b:31:f7:e3:05:5c:38:03:6d:3f:ba:
72:a7:9c:fd:0b:cb:1e:6c:c5:43:e5:26:b5:04:3d:
10:57:9e:c4:a6:0b:52:5c:0e:39:e8:19:5d:05:fa:
2c:5f:18:54:8c:e8:76:80:01:2e:77:bc:6b:91:b3:
d0:e9:a8:2f:ee:66:57:20:50:17:89:ca:ad:fa:9d:
6d:83:58:76:69:64:9a:6e:ae:7d:d2:29:90:90:e3:
e8:80:ed:45:ae:05:85:c7:86:46:70:5c:fc:10:70:
8e:77:e4:02:99:7e:c3:af:5a:c9:fb:bd:2c:1b:4d:
cb:b7:1a:8a:32:7f:c5:2d:2c:cf:37:d9:21:43:25:
8f:40:77:70:74:a9:f1:10:d3:4e:db:ed:b8:c1:a9:
4f:c0:a3:ce:96:08:20:3f:32:c9:00:3c:bc:5b:9f:
d3:6b:a1:a3:90:a9:21:28:8a:5c:d2:be:7f:b2:af:
15:d0:48:e5:e9:98:3a:6d:f6:af:56:f7:08:40:8c:
f2:5b:02:57:ca:ec:8d:46:7c:dd:7b:f3:57:01:c7:
d5:72:ef:22:e4:26:09:8a:8d:db:a3:c3:54:bf:fa:
96:51:24:e7:d1:ff:78:7f:71:8b:03:d9:46:15:f7:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:3A:CC:FE:9F:87:B2:77:3F:56:1D:88:FA:EF:AA:63:FE:61:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FEQ6zP6fh7J3P1YdiPrvqmP-YV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.64.0/20
93.170.184.0/24
93.171.112.0/20
95.46.16.0/20
95.46.46.0/24
95.46.200.0-95.46.208.255
146.120.32.0/21
146.120.128.0-146.120.151.255
151.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9f:b7:a2:2e:39:f9:95:a1:43:af:29:99:83:9d:13:52:82:82:
21:76:88:a3:12:c2:f1:bd:87:c1:08:bc:7b:cf:03:ac:48:13:
f8:5e:2e:29:4a:cd:60:b5:9b:ee:f2:72:ce:e4:14:82:da:e2:
93:64:83:1a:af:94:c7:e2:b5:81:10:b9:ba:5d:55:78:7f:95:
7b:78:58:c7:33:1e:c2:91:06:fa:e1:e7:ac:6e:9a:78:46:60:
a3:14:eb:23:e2:29:ea:49:57:3c:37:87:f9:02:17:52:83:95:
41:ae:14:3b:b1:2c:e6:7b:19:56:fc:f6:30:26:2e:77:e0:a4:
fc:40:16:64:72:93:32:0d:59:85:ec:d7:7e:79:8e:6b:1a:50:
98:fd:d1:f5:68:78:86:90:41:22:0a:6b:3d:13:ad:8f:14:34:
f7:21:18:42:84:27:2a:b4:9b:3d:f5:b7:b0:ae:4f:d1:d1:ce:
2e:45:ac:0b:f6:79:0d:4f:ed:54:fc:ef:45:6e:5b:d3:5e:82:
e2:01:63:76:f8:62:c9:43:80:08:72:dd:86:30:78:59:5f:32:
46:22:82:0f:cd:3a:4c:67:1c:6c:45:ab:08:4d:52:f3:7b:05:
1f:7a:9d:cf:8e:5d:a9:e2:38:30:80:3d:9b:b5:ca:b3:b7:e6:
47:36:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:26 2025 by rpki-client