Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FM5lFvZldlyY7_8iwLgIJYcH5HY.roa
File: FM5lFvZldlyY7_8iwLgIJYcH5HY.roa (raw, json)
Hash identifier: A6CITqJiFwTghh2wwtPAGffstUqNQKYS9/AvytXpUvA=
Subject key identifier: 14:CE:65:16:F6:65:76:5C:98:EF:FF:22:C0:B8:08:25:87:07:E4:76
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2850AB40
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FM5lFvZldlyY7_8iwLgIJYcH5HY.roa
Signing time: Sat 01 Jan 2022 16:10:13 +0000
ROA not before: Sat 01 Jan 2022 16:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209918
IP address blocks: 95.47.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676375360 (0x2850ab40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14ce6516f665765c98efff22c0b808258707e476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:21:6d:18:67:1d:25:59:e7:df:3e:03:04:
9e:f6:e1:0e:66:31:d3:78:fa:77:ec:8b:f0:84:83:
59:0d:3e:a7:62:bc:35:57:d1:12:e4:60:fa:70:5b:
60:6d:c0:df:43:6f:04:0b:ff:81:1b:60:e8:4f:8d:
5d:e6:0e:72:0c:c3:68:a7:ad:70:a2:0d:25:1b:71:
7f:b0:a1:c3:e9:80:b6:a5:62:9e:21:8b:6c:49:d8:
74:33:be:76:c4:72:9f:cd:c9:2b:29:d7:e1:14:65:
86:cc:58:a8:d7:a1:8c:d1:44:f1:51:3f:c6:2d:8c:
28:a4:30:71:ff:05:1e:e9:fd:9b:d0:56:b9:9e:20:
a3:af:43:1b:51:45:09:14:82:49:d7:fa:8e:57:a9:
42:f5:24:a3:a2:f0:d5:35:91:cc:b4:d4:d7:ba:6f:
e0:9d:aa:43:02:96:29:28:e0:e7:44:39:f4:45:05:
ae:55:de:57:e7:f3:02:dc:86:2b:8d:ba:ca:93:1b:
e9:d1:60:a1:d3:e2:ea:c6:8f:03:f8:96:ec:ef:3c:
bc:ad:e0:dd:47:cc:03:81:20:9b:5e:1f:7f:1c:b2:
78:af:ed:86:49:60:90:c8:f0:57:d7:13:36:2c:8c:
75:a2:10:c2:63:e9:97:6b:3a:c7:ab:e9:b0:ee:4d:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:65:16:F6:65:76:5C:98:EF:FF:22:C0:B8:08:25:87:07:E4:76
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FM5lFvZldlyY7_8iwLgIJYcH5HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.232.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ff:47:60:b3:6e:4b:02:72:56:b4:78:f9:22:f5:8c:98:11:
2b:17:3f:aa:43:d1:87:7c:39:3b:55:11:44:06:af:25:31:4c:
cb:83:80:0c:fb:03:5c:76:2c:76:c6:6b:c2:97:db:73:db:d9:
d1:08:8f:ac:68:93:25:05:19:c3:d1:a4:a5:47:5d:2a:ee:9b:
b3:1c:b9:70:2f:4c:5c:f6:22:43:cf:2b:a8:f4:72:19:1c:22:
b3:bd:9f:33:e2:e8:99:d2:5f:81:a0:f4:e9:80:c7:b0:90:f2:
3f:d1:29:ef:c0:95:58:8e:3d:ca:47:68:23:7b:88:70:9f:d3:
a2:6f:d0:ae:ea:70:8e:1b:91:f6:1e:fe:6c:e8:20:f8:fa:6f:
b7:2b:d1:33:8c:5c:24:43:d3:e1:12:33:e7:32:3c:f8:c8:ec:
66:7e:f0:e2:fd:08:64:89:e5:16:a8:f2:58:08:4b:9c:9b:f4:
f8:34:f9:c4:1a:17:f1:10:d6:1d:8d:20:02:d9:92:b6:7f:47:
96:d8:3f:5e:2e:50:e2:1c:40:07:d2:53:0c:25:16:01:0a:ae:
84:79:9e:ac:8f:c7:1a:17:7d:1a:5e:ac:3c:20:a9:18:58:b4:
dd:56:58:1a:a0:64:41:51:3c:db:1e:8a:cf:ea:61:ec:7c:0c:
86:6c:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:36 2025 by rpki-client