Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HKhRkbF6ifJ0yjSWIuP2ZmnzMhs.roa
File: HKhRkbF6ifJ0yjSWIuP2ZmnzMhs.roa (raw, json)
Hash identifier: jNuycxu/A9bGXXQekVhiecl8lfItIB6TwlOZuy4m4nM=
Subject key identifier: 1C:A8:51:91:B1:7A:89:F2:74:CA:34:96:22:E3:F6:66:69:F3:32:1B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27EE70E0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HKhRkbF6ifJ0yjSWIuP2ZmnzMhs.roa
Signing time: Sat 01 Jan 2022 16:09:10 +0000
ROA not before: Sat 01 Jan 2022 16:09:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60275
IP address blocks: 95.47.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669937888 (0x27ee70e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ca85191b17a89f274ca349622e3f66669f3321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:99:b6:38:9a:c6:2d:70:92:2d:aa:83:e4:
5b:fa:d9:b4:87:e4:4c:ce:97:70:82:29:7d:35:57:
05:3b:7d:16:08:b0:26:47:e2:a7:12:64:f2:7a:e7:
3c:29:1d:fd:07:d7:61:93:3d:9b:60:f2:e8:8d:4c:
72:c9:9c:a2:68:92:0e:46:f1:86:ee:6b:ac:c8:b5:
60:3a:31:1f:0b:73:88:a5:9d:cc:6c:f3:89:28:37:
3a:6d:00:39:3b:37:de:99:81:ad:e7:a9:91:0d:dd:
bc:23:8d:46:a9:a3:3a:7e:4e:c8:c7:53:2e:dc:78:
1a:00:79:ab:87:8d:b6:b0:7a:16:53:b6:0a:c4:5f:
9a:21:cb:4c:4d:8b:21:86:16:23:08:6b:68:8f:4a:
10:cc:f2:fd:00:2a:f7:ba:a3:95:21:64:3e:42:05:
c3:54:06:1e:cb:fd:af:bb:fe:fd:41:01:83:02:08:
7a:36:51:03:d7:be:7b:0e:de:e3:7d:9f:53:6d:d9:
73:cb:a0:4d:4a:49:6b:e7:cd:d3:90:8f:c2:44:fd:
e3:c8:37:fb:b7:74:01:f0:0c:51:d1:82:99:ba:2f:
7d:52:ee:89:1a:ad:3d:11:19:47:57:1d:7d:77:64:
89:7d:63:1c:13:03:e2:0a:94:d5:42:30:32:2b:15:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:51:91:B1:7A:89:F2:74:CA:34:96:22:E3:F6:66:69:F3:32:1B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HKhRkbF6ifJ0yjSWIuP2ZmnzMhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.186.0/23
Signature Algorithm: sha256WithRSAEncryption
81:fd:52:19:81:db:ae:76:db:74:f3:84:dc:db:d0:65:9b:e3:
e6:25:fa:7a:ed:a8:26:76:f9:a5:56:5b:96:d0:6b:f2:cf:50:
08:31:ab:dc:27:04:13:53:85:9e:ac:37:49:6e:a2:25:2a:4f:
eb:66:05:4e:fc:8d:4b:66:01:2a:ab:01:97:f3:d3:bf:bd:2c:
0f:f7:ae:e4:bd:bc:f6:44:c4:e8:0f:f5:49:66:a7:86:44:74:
62:07:c0:fa:2b:e3:42:66:4d:bc:13:05:72:71:b8:f9:cb:36:
fc:5d:10:db:8b:bd:31:0d:21:a7:be:78:4c:c2:1e:5e:a6:53:
94:8a:6d:be:ca:e2:6f:dd:9e:a4:1d:92:fc:c0:61:db:d0:6f:
b7:b5:d3:a5:73:1d:a7:a4:b8:57:5b:d6:e9:dd:4f:b7:e3:cd:
80:a7:ef:3d:3d:23:20:01:c3:8e:02:08:17:be:e2:04:14:46:
61:67:8d:8c:5f:56:1e:9d:c8:20:77:e7:3c:81:e4:34:f1:a3:
a6:6b:66:66:f1:30:6e:4e:f8:60:17:9c:cc:fe:62:ab:ae:09:
5c:41:e5:43:45:2a:80:ee:95:8c:d8:4e:3f:d6:5a:5a:0c:16:
19:ef:d6:7b:86:e6:a8:bf:b1:6c:d9:2b:0e:63:34:ca:ea:63:
77:c3:5b:41
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ+5w4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWNhODUxOTFiMTdh
ODlmMjc0Y2EzNDk2MjJlM2Y2NjY2OWYzMzIxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANDqmbY4msYtcJItqoPkW/rZtIfkTM6XcIIpfTVXBTt9Fgiw
JkfipxJk8nrnPCkd/QfXYZM9m2Dy6I1McsmcomiSDkbxhu5rrMi1YDoxHwtziKWd
zGzziSg3Om0AOTs33pmBreepkQ3dvCONRqmjOn5OyMdTLtx4GgB5q4eNtrB6FlO2
CsRfmiHLTE2LIYYWIwhraI9KEMzy/QAq97qjlSFkPkIFw1QGHsv9r7v+/UEBgwII
ejZRA9e+ew7e432fU23Zc8ugTUpJa+fN05CPwkT948g3+7d0AfAMUdGCmbovfVLu
iRqtPREZR1cdfXdkiX1jHBMD4gqU1UIwMisVe7kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQcqFGRsXqJ8nTKNJYi4/ZmafMyGzAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0hLaFJrYkY2aWZKMHlqU1dJdVAyWm1uek1ocy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV8vujANBgkqhkiG9w0BAQsFAAOC
AQEAgf1SGYHbrnbbdPOE3NvQZZvj5iX6eu2oJnb5pVZbltBr8s9QCDGr3CcEE1OF
nqw3SW6iJSpP62YFTvyNS2YBKqsBl/PTv70sD/eu5L289kTE6A/1SWanhkR0YgfA
+ivjQmZNvBMFcnG4+cs2/F0Q24u9MQ0hp754TMIeXqZTlIptvsrib92epB2S/MBh
29Bvt7XTpXMdp6S4V1vW6d1Pt+PNgKfvPT0jIAHDjgIIF77iBBRGYWeNjF9WHp3I
IHfnPIHkNPGjpmtmZvEwbk74YBeczP5iq64JXEHlQ0UqgO6VjNhOP9ZaWgwWGe/W
e4bmqL+xbNkrDmM0yupjd8NbQQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:10 2025 by rpki-client