Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OeYmUiJIT1DWZKuveKS02et305A.roa
File: OeYmUiJIT1DWZKuveKS02et305A.roa (raw, json)
Hash identifier: JlkGIRi4/5pj0PhE+bBqTkNCjnUk5Mv6zW5QOGFgd+Y=
Subject key identifier: 39:E6:26:52:22:48:4F:50:D6:64:AB:AF:78:A4:B4:D9:EB:77:D3:90
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FACB8A0C3C5A020D03140C3EE65CB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OeYmUiJIT1DWZKuveKS02et305A.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47966
IP address blocks: 95.46.47.0/24 maxlen: 24
95.47.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:b8:a0:c3:c5:a0:20:d0:31:40:c3:ee:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39e6265222484f50d664abaf78a4b4d9eb77d390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:69:44:4d:6c:30:95:78:e9:b2:08:39:e0:
3c:49:de:28:3a:84:98:80:ec:6c:50:c7:46:d6:14:
ca:63:2a:07:bb:be:99:d9:71:32:20:bc:7e:66:03:
26:f8:f0:3c:96:cb:1d:ef:c6:35:dc:a6:03:8a:ca:
01:22:09:ba:55:b9:a1:d1:da:70:a6:8f:05:7e:d4:
63:9f:4a:0a:53:5a:80:a3:a5:01:e4:91:d1:71:7d:
33:5f:0f:8c:5e:09:45:00:aa:39:0e:cf:35:11:c3:
cb:35:58:16:cd:48:7c:15:27:ff:db:06:20:6e:49:
38:1e:6c:9a:0b:37:b8:5b:c3:ae:17:33:8e:a3:d1:
4c:21:f3:88:09:5e:72:a9:6f:c1:c5:21:4e:da:04:
09:a8:f5:6c:e7:fe:7e:b9:ab:28:e7:92:cc:dc:1c:
4e:34:14:6b:83:01:27:0f:a2:e3:ec:84:14:41:8e:
fd:93:1d:ab:16:62:fe:f6:ec:17:2d:96:ed:25:cb:
72:92:26:b3:a7:7f:16:55:fa:e2:af:57:06:35:ff:
93:6b:f1:94:da:52:33:0e:a6:ff:67:46:46:b1:aa:
95:d2:9e:fe:e4:75:45:7e:b9:06:3c:cf:21:a5:f6:
b8:af:18:78:a6:4b:19:06:6d:79:b7:27:ef:eb:16:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E6:26:52:22:48:4F:50:D6:64:AB:AF:78:A4:B4:D9:EB:77:D3:90
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OeYmUiJIT1DWZKuveKS02et305A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.47.0/24
95.47.237.0/24
Signature Algorithm: sha256WithRSAEncryption
73:bb:47:82:6b:2d:f9:7f:55:dc:cf:03:3f:5c:3d:a1:81:89:
9c:f7:e7:a0:e7:59:88:e3:2d:ed:85:d0:e5:78:ee:80:d0:9a:
22:df:34:3a:3c:ed:48:16:94:a4:ca:cd:df:b6:de:67:1f:a2:
2e:a9:83:b4:6e:78:02:58:c4:a6:ff:f6:aa:e5:bf:79:c1:17:
1a:9c:bc:aa:df:08:24:2d:d8:6a:70:c3:86:a4:7e:ce:18:f8:
f6:82:d6:87:99:04:65:c8:8c:46:0d:41:81:47:08:31:8c:7b:
bb:18:a3:d6:2e:dc:6f:7b:e1:9f:72:4b:f4:4f:15:91:d9:86:
ca:a9:92:34:4e:33:3b:6a:b3:01:10:fd:ab:b7:7f:17:01:15:
a6:44:76:11:05:82:e5:32:b1:51:69:8e:68:5f:83:b7:16:b5:
f5:ab:e6:84:0b:cf:b1:13:ec:04:f5:67:7a:1b:36:ad:44:b7:
b1:78:9e:71:09:d8:60:44:f9:99:52:d6:d9:81:20:23:2a:80:
0e:2c:7e:bc:e8:3d:aa:67:a8:f4:ef:ff:17:60:5e:c7:71:7e:
60:7c:f2:15:4f:dd:64:4e:97:95:52:57:ac:d8:3e:5c:ef:4e:
99:96:14:e0:3c:a2:dc:fd:8e:64:ed:74:55:ad:de:6c:18:21:
cf:a1:6c:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj6y4oMPFoCDQMUDD7mXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWU2MjY1MjIyNDg0ZjUwZDY2NGFiYWY3OGE0YjRkOWViNzdkMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRpRE1sMJV46bIIOeA8Sd4oOoSY
gOxsUMdG1hTKYyoHu76Z2XEyILx+ZgMm+PA8lssd78Y13KYDisoBIgm6Vbmh0dpw
po8FftRjn0oKU1qAo6UB5JHRcX0zXw+MXglFAKo5Ds81EcPLNVgWzUh8FSf/2wYg
bkk4HmyaCze4W8OuFzOOo9FMIfOICV5yqW/BxSFO2gQJqPVs5/5+uaso55LM3BxO
NBRrgwEnD6Lj7IQUQY79kx2rFmL+9uwXLZbtJctykiazp38WVfrir1cGNf+Ta/GU
2lIzDqb/Z0ZGsaqV0p7+5HVFfrkGPM8hpfa4rxh4pksZBm15tyfv6xZDwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDnmJlIiSE9Q1mSrr3iktNnrd9OQMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvT2VZbVVpSklUMURXWkt1dmVLUzAyZXQzMDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXy4vAwQA
Xy/tMA0GCSqGSIb3DQEBCwUAA4IBAQBzu0eCay35f1XczwM/XD2hgYmc9+eg51mI
4y3thdDleO6A0Joi3zQ6PO1IFpSkys3ftt5nH6IuqYO0bngCWMSm//aq5b95wRca
nLyq3wgkLdhqcMOGpH7OGPj2gtaHmQRlyIxGDUGBRwgxjHu7GKPWLtxve+Gfckv0
TxWR2YbKqZI0TjM7arMBEP2rt38XARWmRHYRBYLlMrFRaY5oX4O3FrX1q+aEC8+x
E+wE9Wd6GzatRLexeJ5xCdhgRPmZUtbZgSAjKoAOLH686D2qZ6j07/8XYF7HcX5g
fPIVT91kTpeVUles2D5c706ZlhTgPKLc/Y5k7XRVrd5sGCHPoWz6
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:42 2025 by rpki-client