Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FFIjNAPkYgUY6ZtfkFJGjM5eNOc.roa
File: FFIjNAPkYgUY6ZtfkFJGjM5eNOc.roa (raw, json)
Hash identifier: CTpOXCWq2I77PAVgtUEAdDiKh91kUarbRBe1DLEMwyE=
Subject key identifier: 14:52:23:34:03:E4:62:05:18:E9:9B:5F:90:52:46:8C:CE:5E:34:E7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0182F86FF786F4C87816F8119AEA5F85880F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FFIjNAPkYgUY6ZtfkFJGjM5eNOc.roa
Signing time: Thu 01 Sep 2022 09:44:23 +0000
ROA not before: Thu 01 Sep 2022 09:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210442
IP address blocks: 95.46.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:6f:f7:86:f4:c8:78:16:f8:11:9a:ea:5f:85:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 1 09:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1452233403e4620518e99b5f9052468cce5e34e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:26:99:60:f3:33:3a:bc:85:c5:43:ac:10:
55:2c:44:87:69:ca:22:12:5a:11:ff:80:b3:17:1a:
d5:2b:6c:ec:9d:33:b7:4b:d2:d8:a4:51:d4:cc:78:
fc:9e:78:9d:1f:82:c5:d4:20:0d:12:74:cb:41:b7:
7c:cf:6e:d1:ca:19:19:44:96:d5:ca:6e:0d:e0:94:
e5:24:d0:0b:72:b6:11:b8:69:29:f7:45:8f:c5:8a:
28:0f:a2:1b:e4:91:43:e9:17:33:67:a7:7a:0f:6f:
58:fe:85:0f:20:0b:8d:4b:2d:ca:25:95:45:53:a3:
99:02:2b:d8:ae:af:ae:1f:5f:a9:d8:44:f1:63:2e:
a6:02:ff:4a:9e:d2:83:b8:a5:2f:5e:df:02:ac:b8:
8a:2e:89:55:fa:96:02:f3:9c:73:79:c0:d6:01:f1:
91:4b:d9:07:3a:1f:1a:38:07:ea:8a:76:0f:97:63:
36:98:80:80:85:4f:af:3c:5b:0b:cd:72:35:0f:1c:
59:e1:c5:fb:4c:87:90:ac:47:2a:0c:32:68:2a:4f:
48:fc:bc:06:13:3a:49:5c:4f:18:41:03:85:9e:cc:
e0:94:72:54:aa:45:92:75:2f:94:88:e1:19:e8:d5:
7b:bf:0f:a3:bf:a6:2e:e0:20:a1:4e:25:5b:e2:86:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:23:34:03:E4:62:05:18:E9:9B:5F:90:52:46:8C:CE:5E:34:E7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FFIjNAPkYgUY6ZtfkFJGjM5eNOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:58:3d:20:f0:c1:79:fa:35:65:c1:62:83:60:45:ad:bc:4f:
e3:87:f2:31:9b:bf:77:5c:f0:3b:87:5b:1e:32:d6:e2:e2:38:
bc:a1:cb:8e:de:ef:13:6c:cb:1f:5b:d7:4c:ac:79:84:a9:d4:
d8:3a:f2:b9:1d:75:8f:16:fc:94:74:75:f6:55:31:33:56:42:
d3:41:4d:59:71:c3:de:80:8e:6e:af:50:38:7d:7e:3c:48:89:
06:d0:94:c7:16:5a:49:a2:91:fa:4c:bf:0b:a7:79:b4:36:83:
17:c3:8d:5d:36:39:9e:77:ed:1e:e9:cb:b6:4c:0f:e8:71:64:
4b:98:f8:e7:14:a6:e9:36:81:34:a3:aa:66:74:ce:c9:b3:ab:
47:22:e1:c5:f2:e4:1f:0b:93:4c:3f:82:69:e4:ae:17:e5:e9:
25:61:df:1a:39:bf:d4:e8:a4:32:72:7d:9d:05:e5:12:82:e4:
9b:0b:bd:df:14:ea:c0:07:85:9a:8e:82:46:b1:47:9f:83:11:
7a:26:10:4f:06:97:b3:75:f3:fa:68:a7:97:98:e9:72:ac:7f:
7d:95:62:8c:90:82:2d:7e:2f:72:bb:61:ad:c6:13:af:3c:84:
2a:4b:90:06:cc:58:2c:2f:5c:ba:95:32:8e:07:1f:6a:af:33:
1a:28:81:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL4b/eG9Mh4FvgRmupfhYgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjIwOTAxMDk0NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDUyMjMzNDAzZTQ2MjA1MThlOTliNWY5MDUyNDY4Y2NlNWUzNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjMmmWDzMzq8hcVDrBBVLESHacoi
EloR/4CzFxrVK2zsnTO3S9LYpFHUzHj8nnidH4LF1CANEnTLQbd8z27RyhkZRJbV
ym4N4JTlJNALcrYRuGkp90WPxYooD6Ib5JFD6RczZ6d6D29Y/oUPIAuNSy3KJZVF
U6OZAivYrq+uH1+p2ETxYy6mAv9KntKDuKUvXt8CrLiKLolV+pYC85xzecDWAfGR
S9kHOh8aOAfqinYPl2M2mICAhU+vPFsLzXI1DxxZ4cX7TIeQrEcqDDJoKk9I/LwG
EzpJXE8YQQOFnszglHJUqkWSdS+UiOEZ6NV7vw+jv6Yu4CChTiVb4oYtqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRSIzQD5GIFGOmbX5BSRozOXjTnMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRkZJak5BUGtZZ1VZNlp0ZmtGSkdqTTVlTk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy5IMA0G
CSqGSIb3DQEBCwUAA4IBAQClWD0g8MF5+jVlwWKDYEWtvE/jh/Ixm793XPA7h1se
Mtbi4ji8ocuO3u8TbMsfW9dMrHmEqdTYOvK5HXWPFvyUdHX2VTEzVkLTQU1ZccPe
gI5ur1A4fX48SIkG0JTHFlpJopH6TL8Lp3m0NoMXw41dNjmed+0e6cu2TA/ocWRL
mPjnFKbpNoE0o6pmdM7Js6tHIuHF8uQfC5NMP4Jp5K4X5eklYd8aOb/U6KQycn2d
BeUSguSbC73fFOrAB4WajoJGsUefgxF6JhBPBpezdfP6aKeXmOlyrH99lWKMkIIt
fi9yu2GtxhOvPIQqS5AGzFgsL1y6lTKOBx9qrzMaKIFZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:31 2025 by rpki-client