Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K3UQPEdwpRQAucXxqiZVuNdMAwI.roa
File: K3UQPEdwpRQAucXxqiZVuNdMAwI.roa (raw, json)
Hash identifier: 77QQnFuVkAOkWJneuLI7Pd2hT+K6ccesy9B96CnE7No=
Subject key identifier: 2B:75:10:3C:47:70:A5:14:00:B9:C5:F1:AA:26:55:B8:D7:4C:03:02
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187EC53C5340BE1B4A90DC3D4C7B28D8426
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K3UQPEdwpRQAucXxqiZVuNdMAwI.roa
Signing time: Fri 05 May 2023 14:32:05 +0000
ROA not before: Fri 05 May 2023 14:32:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48511
IP address blocks: 95.46.158.0/24 maxlen: 24
95.46.196.0/24 maxlen: 24
2a02:128:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:53:c5:34:0b:e1:b4:a9:0d:c3:d4:c7:b2:8d:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 5 14:32:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b75103c4770a51400b9c5f1aa2655b8d74c0302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:b8:fe:e4:f2:20:62:ba:aa:8f:ac:9b:97:
e0:f8:a1:74:0b:08:c0:0f:d1:20:ee:0c:51:7b:2b:
e2:f6:84:73:c8:9a:63:2a:34:29:ea:dd:89:de:e2:
f5:2a:86:0c:83:96:de:37:34:a9:4f:69:f1:ca:cd:
c9:78:57:8b:45:d0:3f:fb:9c:de:b8:55:35:78:3e:
21:50:62:c8:27:58:ee:14:9c:70:f5:1c:da:ec:9f:
26:98:0b:09:04:61:77:a1:8e:73:e6:4e:35:38:a2:
42:d5:f1:18:77:b2:d7:e6:75:da:38:31:22:d7:44:
7b:f4:5a:e1:91:05:3d:69:12:a1:8e:e4:91:ce:28:
b2:60:69:46:f8:26:69:20:05:31:d1:ba:5a:4f:1a:
f4:e8:2c:aa:28:48:51:77:83:3f:f0:1d:c1:46:f0:
6f:7c:07:09:d9:e0:1f:6a:e1:a8:6c:e0:81:26:75:
ca:c4:d5:0a:3a:a3:3f:65:14:e4:f8:19:80:67:8a:
27:a9:b7:e2:9f:98:87:e4:d8:2d:b1:de:40:c7:68:
39:a0:a4:ce:bf:0e:ef:69:5d:3d:c3:a6:4c:e9:f8:
34:29:25:78:67:08:62:d8:59:11:c7:96:97:a6:00:
56:96:d4:05:de:f6:dd:98:d1:70:3a:05:d4:75:d2:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:10:3C:47:70:A5:14:00:B9:C5:F1:AA:26:55:B8:D7:4C:03:02
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K3UQPEdwpRQAucXxqiZVuNdMAwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.158.0/24
95.46.196.0/24
IPv6:
2a02:128:22::/48
Signature Algorithm: sha256WithRSAEncryption
5d:bf:57:9c:5e:89:a1:39:7a:d7:e9:6b:07:8f:46:4c:b0:86:
56:29:04:79:49:77:b5:03:ae:1f:eb:34:f7:32:4d:b1:02:4e:
ac:71:d5:fd:b4:19:84:5c:53:02:69:d1:19:58:97:4a:b5:9f:
ad:69:80:99:32:31:ce:2c:e2:a2:9d:e1:78:6a:d8:88:9c:d3:
fe:67:77:3e:b3:51:95:c2:41:cf:33:85:9c:73:bb:c1:f5:b0:
0f:d8:46:24:28:5e:17:bf:dd:49:63:50:ba:36:60:15:2c:87:
c7:cf:df:27:da:69:34:24:68:f4:3d:f6:75:03:21:a5:77:20:
1a:85:86:b4:ed:04:a0:cc:11:c6:64:13:1b:6a:f8:1b:ee:1d:
df:e1:79:3a:5b:37:65:61:97:4c:ee:19:fa:c0:32:8a:cf:d8:
33:18:3a:88:30:10:43:e6:61:e7:9e:ab:f1:50:8c:1f:ba:3e:
9b:65:45:ff:c5:df:fa:27:dd:96:e8:37:20:fb:73:a7:b9:38:
0b:7c:a1:54:c3:d3:ca:28:26:8c:09:67:b0:1d:d2:7f:3c:ab:
10:a5:3f:87:61:bd:25:3b:70:2f:eb:df:03:35:0f:1c:0d:d9:
52:7f:a6:57:09:1d:7d:3c:d4:00:cb:69:a4:55:cc:eb:cf:b4:
62:a2:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:56 2025 by rpki-client