Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FJg8KiLndzhc5uqG2nnYzOz7qjo.roa
File: FJg8KiLndzhc5uqG2nnYzOz7qjo.roa (raw, json)
Hash identifier: 2ONwtdC8KHd0ceehhHdvpmPtHJIEc669L3VqX2WSqwI=
Subject key identifier: 14:98:3C:2A:22:E7:77:38:5C:E6:EA:86:DA:79:D8:CC:EC:FB:AA:3A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 278F30E9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FJg8KiLndzhc5uqG2nnYzOz7qjo.roa
Signing time: Sat 01 Jan 2022 16:08:18 +0000
ROA not before: Sat 01 Jan 2022 16:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44019
IP address blocks: 95.46.157.0/24 maxlen: 24
93.170.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663695593 (0x278f30e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14983c2a22e777385ce6ea86da79d8ccecfbaa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:56:52:56:55:fc:b0:94:f4:32:77:af:43:4e:
71:92:57:c2:b0:36:52:21:7c:70:bb:82:45:11:dd:
19:ff:77:91:40:bc:17:5d:dc:76:c9:16:3d:98:93:
ab:90:4f:cb:0e:b4:b5:18:f7:78:a7:0e:07:35:e7:
a7:e1:46:af:62:e1:87:7f:d8:f7:3b:88:19:13:d4:
0c:93:86:e3:f5:99:84:fb:30:da:c5:35:60:c5:7a:
d4:6e:30:bc:80:05:75:a7:48:8e:8e:5d:c9:65:ad:
98:27:fc:3c:02:37:a8:67:69:31:07:bf:85:50:6d:
f3:62:04:59:80:13:05:84:4e:60:76:d5:61:71:fb:
99:07:60:23:3e:af:c8:41:d5:98:8e:6c:11:93:9e:
7a:a1:c2:52:ce:7e:3f:c6:68:d2:15:ae:7e:6e:fd:
f4:0e:95:67:88:cb:29:68:d7:c5:d2:8f:b2:0c:52:
be:8f:88:83:8e:64:3b:c2:da:05:fa:c4:12:46:72:
32:e7:23:e5:f4:0a:50:75:8b:3e:be:e8:ee:19:09:
10:a5:bc:ca:34:8d:7b:3d:46:cc:80:a8:f8:42:70:
8b:15:c3:0f:4b:96:9b:bc:85:06:c2:31:a2:01:41:
ae:6f:c8:57:a3:53:19:f7:9d:d5:f1:5b:e2:b7:18:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:98:3C:2A:22:E7:77:38:5C:E6:EA:86:DA:79:D8:CC:EC:FB:AA:3A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FJg8KiLndzhc5uqG2nnYzOz7qjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.134.0/24
95.46.157.0/24
Signature Algorithm: sha256WithRSAEncryption
20:95:b2:62:a4:af:df:de:63:2d:8b:5a:33:6b:f7:a2:48:84:
75:b8:c0:2e:00:2c:8d:53:9b:5a:44:8c:eb:f4:f0:b6:42:f8:
4f:bb:d0:bc:ec:97:b2:ab:62:46:b2:23:22:1a:3a:a9:93:d1:
17:8e:cb:d3:db:c5:e4:b7:5f:2e:29:83:2f:2d:29:55:b2:cb:
70:9b:c2:6e:c9:83:37:03:4b:af:6d:6b:52:1b:ed:f3:2b:5a:
53:02:f3:c1:d4:26:ef:17:e5:a5:d4:c6:b4:a6:00:ec:c4:e5:
fe:14:57:c2:c4:25:30:86:24:55:45:94:ad:1e:55:ef:bd:36:
ba:f7:11:61:a0:dd:c3:c6:7f:48:a1:0d:b7:91:01:c6:f0:a4:
0f:9a:b5:d7:e6:e7:89:9d:fd:06:10:96:92:55:f5:85:1a:f7:
12:1b:ed:86:cc:fb:64:b8:62:52:43:4c:39:5c:78:20:99:48:
9d:92:24:7b:0b:23:57:ba:72:c1:17:67:76:72:0e:45:d1:33:
da:08:1e:8a:37:70:88:bd:ab:ee:e5:dd:4d:4e:78:98:f9:58:
80:b3:a8:e6:da:f6:dc:1d:bd:24:b8:3e:a7:c8:96:ee:f9:2a:
da:8c:ba:fd:e3:25:e2:a2:97:a9:84:d2:2f:d0:42:33:ad:96:
49:bc:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:17 2025 by rpki-client