Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/G44AIFr1VRSOAdbC2knG92yXw5Q.roa
File: G44AIFr1VRSOAdbC2knG92yXw5Q.roa (raw, json)
Hash identifier: +JFF18D31Zqlmx32Z7M2c4qgd0m7G3t3XKw0PU8+/RM=
Subject key identifier: 1B:8E:00:20:5A:F5:55:14:8E:01:D6:C2:DA:49:C6:F7:6C:97:C3:94
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD1A479796578EF3B1BF77FD9477B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/G44AIFr1VRSOAdbC2knG92yXw5Q.roa
Signing time: Thu 02 Jan 2025 05:49:29 +0000
ROA not before: Thu 02 Jan 2025 05:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60313
IP address blocks: 95.47.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d1:a4:79:79:65:78:ef:3b:1b:f7:7f:d9:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8e00205af555148e01d6c2da49c6f76c97c394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:70:30:39:0b:fd:6d:ab:66:62:d7:8a:ce:
75:e8:43:fd:69:41:35:e8:8f:26:af:c6:93:59:5d:
e7:ef:b1:59:0d:58:42:e1:9a:bc:2e:65:32:cf:a3:
6e:35:8f:fc:47:ea:86:65:62:2e:d8:2e:4f:a1:0b:
24:56:fb:9e:cb:fa:2a:ef:84:26:e0:16:0f:b3:33:
63:65:a8:72:6c:be:36:b0:aa:81:65:05:7c:57:de:
d7:28:a2:db:4d:79:53:b8:99:f6:49:c3:ed:53:b4:
56:41:e4:76:96:99:60:b9:11:03:9c:ae:24:5c:40:
01:e1:c2:9c:94:ea:52:e6:58:66:0a:b0:15:6e:85:
dd:1b:e7:6f:d8:54:57:4e:df:6b:46:cb:d1:12:dd:
4e:38:a2:5c:55:58:15:4c:a8:07:91:f8:36:24:a3:
06:12:a6:03:fb:78:e1:a6:d2:e6:9c:5a:25:7d:04:
67:ba:b6:96:44:11:ab:58:c4:3c:4f:3b:78:ce:b7:
35:0e:b0:37:d2:44:cf:e3:fb:cc:91:01:df:80:8b:
97:ad:01:4a:14:e2:d7:28:46:ce:0e:5e:56:76:d4:
00:9f:4a:2f:ef:fb:a1:5d:01:20:f4:41:41:e7:a8:
57:56:9f:ba:f1:ed:8b:85:51:f3:5f:b6:74:9f:77:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8E:00:20:5A:F5:55:14:8E:01:D6:C2:DA:49:C6:F7:6C:97:C3:94
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/G44AIFr1VRSOAdbC2knG92yXw5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:df:f7:8c:d4:4a:ff:86:92:dc:e6:6d:6e:1c:bd:09:16:2c:
04:4d:0c:80:ca:ae:c5:b7:9b:3d:1a:82:9c:3a:71:38:6c:46:
ac:ce:ca:41:2e:d4:57:00:6b:fc:28:b2:8a:83:42:75:bc:f7:
ba:e2:2a:32:ba:46:20:81:3c:8d:a4:fd:9b:47:fe:96:1f:e8:
b9:76:af:e1:d9:22:c8:9d:fa:75:2e:83:43:40:78:e7:46:a1:
09:0c:db:25:b0:1b:b5:09:59:4b:9a:ab:47:3e:1c:1e:c0:ed:
0c:17:6c:1a:b1:99:fe:c3:af:c9:95:08:1a:cc:31:00:f4:b8:
46:db:79:78:fc:83:e6:4b:32:b5:b6:a7:9f:19:53:47:10:c3:
d4:b7:c3:2c:b2:19:93:7e:1d:f5:7a:8c:eb:1d:d9:b3:4a:ce:
e1:a1:99:ce:70:3a:0e:f1:db:85:3c:e7:3c:e4:5f:56:42:69:
96:f0:d7:16:f2:8d:3d:3d:42:6c:9d:7c:b1:78:99:53:39:94:
a0:ce:f9:b0:c7:5f:fb:42:ef:b7:89:48:88:23:3a:c0:35:9f:
08:01:b2:0f:c7:8b:0f:38:f9:cc:9f:5e:89:7f:92:ce:b8:ec:
d1:31:20:4c:54:8b:97:74:c3:90:17:a5:3f:52:40:a2:45:c8:
0c:34:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:03 2025 by rpki-client