Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KGcV9OGk8IZ2znNWFGZQ-EKkNK4.roa
File: KGcV9OGk8IZ2znNWFGZQ-EKkNK4.roa (raw, json)
Hash identifier: Z8mW1qs0BiH5d7iV/0kiFAzxDzPqobYPILWZcghRwrY=
Subject key identifier: 28:67:15:F4:E1:A4:F0:86:76:CE:73:56:14:66:50:F8:42:A4:34:AE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA8D3429FE74B9ACAB967D372FF2A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KGcV9OGk8IZ2znNWFGZQ-EKkNK4.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44956
IP address blocks: 95.46.97.0/24 maxlen: 24
95.47.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a8:d3:42:9f:e7:4b:9a:ca:b9:67:d3:72:ff:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=286715f4e1a4f08676ce7356146650f842a434ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:b0:76:ff:bb:86:80:1f:67:61:93:2d:ba:
d5:50:6e:d7:8c:17:0b:ef:24:39:88:0f:84:be:18:
32:51:be:a5:63:80:51:23:02:9f:70:77:b2:3f:e5:
ab:56:81:07:0c:00:48:b8:5d:b4:24:0c:f0:16:cc:
cd:91:ff:eb:43:6e:a8:d7:37:69:02:f9:2a:87:4d:
63:b5:41:17:71:fd:6f:5a:bd:ba:e7:16:12:50:a6:
e1:e1:2d:46:ad:cc:c9:e1:9c:b4:8c:43:4d:1c:48:
fa:d4:3e:d9:dd:f7:e9:cf:46:91:59:ec:6e:ba:d2:
5e:78:63:da:3d:9e:0f:4e:2c:e6:e3:bb:76:6c:84:
62:8a:ed:35:99:7c:31:a7:9e:d5:f7:54:32:12:6c:
ac:9a:97:b8:b8:ac:09:39:82:d7:40:ec:c4:0f:f1:
d6:0d:6c:0b:11:10:a5:2b:8b:db:45:b2:1b:ea:07:
cf:40:bc:55:c6:19:99:6c:ee:56:ba:35:53:b4:d2:
b5:49:ac:3d:0a:80:17:25:1d:52:b4:03:63:d5:d3:
0c:10:dd:52:70:ce:1f:2a:f4:23:0d:88:99:73:d9:
64:bc:24:8a:62:a0:40:4c:fc:52:8c:e3:77:7b:96:
66:31:20:6c:76:ec:8d:02:5b:64:9a:c5:6e:5a:8c:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:15:F4:E1:A4:F0:86:76:CE:73:56:14:66:50:F8:42:A4:34:AE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KGcV9OGk8IZ2znNWFGZQ-EKkNK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.97.0/24
95.47.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e7:44:e9:ef:c7:e2:49:1e:29:4e:8c:9e:4e:19:9f:ac:60:
9c:cf:12:ea:18:ec:4e:ae:e7:10:cb:86:dd:f4:52:dd:2a:61:
d7:1d:9b:4e:15:04:c7:a8:14:12:ce:c1:c2:34:1d:43:1b:c0:
f5:b8:4a:ca:1f:97:84:93:6d:9a:e1:d5:8e:0c:16:ed:42:5e:
09:46:e1:8b:43:b3:f6:57:5b:83:6b:50:34:04:94:59:8f:70:
14:41:31:a9:dd:ef:c0:79:ed:d8:46:4e:09:90:55:74:20:48:
ec:91:41:75:e1:a3:df:a2:19:a8:bb:31:b4:a7:0c:f8:d4:4d:
c8:cd:8b:ac:b2:1e:0d:71:9d:6f:e7:d1:74:2c:bc:7f:3c:34:
86:3a:64:18:b4:06:f2:0e:a5:e8:c4:a1:52:06:ce:da:73:58:
ce:71:a2:22:f8:29:dd:0f:bb:f9:7f:e1:84:21:88:37:48:f4:
81:59:ba:03:04:03:cc:ae:9f:44:6c:ae:15:b8:59:d5:0d:aa:
bf:03:e9:ea:97:1a:4a:32:07:9d:24:c2:8b:78:77:e9:eb:40:
73:fe:86:98:2c:75:31:d3:2d:b0:ba:9e:df:f6:0c:cd:3c:4b:
65:25:7b:22:49:c9:34:f3:24:92:4b:c5:ef:7f:e1:52:10:fc:
dc:2b:5e:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj6jTQp/nS5rKuWfTcv8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODY3MTVmNGUxYTRmMDg2NzZjZTczNTYxNDY2NTBmODQyYTQzNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEKwdv+7hoAfZ2GTLbrVUG7XjBcL
7yQ5iA+EvhgyUb6lY4BRIwKfcHeyP+WrVoEHDABIuF20JAzwFszNkf/rQ26o1zdp
Avkqh01jtUEXcf1vWr265xYSUKbh4S1GrczJ4Zy0jENNHEj61D7Z3ffpz0aRWexu
utJeeGPaPZ4PTizm47t2bIRiiu01mXwxp57V91QyEmysmpe4uKwJOYLXQOzED/HW
DWwLERClK4vbRbIb6gfPQLxVxhmZbO5WujVTtNK1Saw9CoAXJR1StANj1dMMEN1S
cM4fKvQjDYiZc9lkvCSKYqBATPxSjON3e5ZmMSBsduyNAltkmsVuWow1uwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFChnFfThpPCGds5zVhRmUPhCpDSuMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvS0djVjlPR2s4SVoyem5OV0ZHWlEtRUtrTks0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXy5hAwQA
Xy/3MA0GCSqGSIb3DQEBCwUAA4IBAQAa50Tp78fiSR4pToyeThmfrGCczxLqGOxO
rucQy4bd9FLdKmHXHZtOFQTHqBQSzsHCNB1DG8D1uErKH5eEk22a4dWODBbtQl4J
RuGLQ7P2V1uDa1A0BJRZj3AUQTGp3e/Aee3YRk4JkFV0IEjskUF14aPfohmouzG0
pwz41E3IzYussh4NcZ1v59F0LLx/PDSGOmQYtAbyDqXoxKFSBs7ac1jOcaIi+Cnd
D7v5f+GEIYg3SPSBWboDBAPMrp9EbK4VuFnVDaq/A+nqlxpKMgedJMKLeHfp60Bz
/oaYLHUx0y2wup7f9gzNPEtlJXsiSck08ySSS8Xvf+FSEPzcK14E
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:36 2025 by rpki-client