Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oq_flsz9MWT30rz3YuLk5Xd4N6k.roa
File: Oq_flsz9MWT30rz3YuLk5Xd4N6k.roa (raw, json)
Hash identifier: bQwGt1YHz35LDB73omPIsAKj8yTv8If1VusI5LceljA=
Subject key identifier: 3A:AF:DF:96:CC:FD:31:64:F7:D2:BC:F7:62:E2:E4:E5:77:78:37:A9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570958FC123C6A062783BA68846FC1F94
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oq_flsz9MWT30rz3YuLk5Xd4N6k.roa
Signing time: Mon 02 Jan 2023 03:45:27 +0000
ROA not before: Mon 02 Jan 2023 03:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201147
IP address blocks: 95.46.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:8f:c1:23:c6:a0:62:78:3b:a6:88:46:fc:1f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aafdf96ccfd3164f7d2bcf762e2e4e5777837a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:ab:03:36:30:6e:85:9e:02:a0:89:ab:16:
42:fe:8a:18:b3:be:4f:9d:00:34:2d:23:da:7d:d3:
72:b0:11:78:36:7d:4b:ad:0d:2c:a8:f9:4d:57:8a:
0b:a1:6c:e2:2c:8e:df:f2:c6:84:f1:20:00:26:4c:
c4:bf:22:59:b7:c2:47:a3:88:f0:ee:1e:32:1c:4e:
31:03:21:1e:4c:a9:9a:59:e0:25:c3:09:26:8f:cd:
0c:97:0e:c1:3e:58:64:52:c5:bd:33:f9:3e:8d:84:
c6:8c:a8:5e:4a:16:12:cd:ae:9a:46:f2:2a:dc:39:
ce:16:46:f7:e5:02:de:fa:6e:5c:70:b7:7f:90:dd:
a9:6f:4f:d0:7c:b7:b5:c0:24:02:38:ca:5f:63:a1:
a9:a6:d7:b3:56:d3:ba:cc:6a:f2:81:3f:d5:31:da:
fd:90:7d:93:cb:04:10:4b:eb:e4:a2:d6:4b:a0:7e:
ed:32:32:0d:d3:b5:48:d3:e6:f0:81:e9:d4:6f:d4:
6a:95:d2:fe:99:6e:55:f3:80:38:39:5e:66:e2:b4:
9e:88:8e:05:19:fd:3a:ca:c1:25:75:67:d8:84:a0:
2a:e2:a1:66:60:c5:7d:a9:a3:d6:e6:ef:a7:87:06:
f4:ca:2d:06:03:e2:58:30:55:07:e8:ce:cb:7a:e9:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:DF:96:CC:FD:31:64:F7:D2:BC:F7:62:E2:E4:E5:77:78:37:A9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oq_flsz9MWT30rz3YuLk5Xd4N6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.176.0/21
Signature Algorithm: sha256WithRSAEncryption
83:ec:df:76:7c:20:eb:a7:35:3a:0a:1f:b8:bc:50:8e:72:84:
93:ab:c1:b4:06:ad:84:08:a0:b2:d9:df:8d:e9:02:a0:a2:ef:
ee:31:9e:b3:76:8f:a5:8b:a3:d4:43:27:82:ae:ad:ac:cc:68:
75:ab:74:c4:fc:9f:cc:28:bc:a8:e3:ed:b0:73:12:1a:e5:bb:
af:0d:36:b6:fb:bf:ac:a9:f7:d3:04:ab:55:61:3a:59:74:bd:
fa:4b:3b:76:38:b6:fc:c1:3d:a1:ae:6b:58:af:ee:31:9a:c4:
e3:59:3f:7a:47:73:27:da:1f:e1:b3:a5:42:4d:bf:35:07:98:
a2:00:be:cb:ee:0c:6a:aa:bf:7f:40:fe:ab:4a:94:64:45:24:
73:6b:3f:c7:1c:1e:e7:de:6e:fd:94:a8:1e:47:f0:e9:49:c5:
60:5d:c1:b3:e8:51:a0:f1:e5:d4:f7:78:e0:d5:3e:de:2c:5b:
c9:37:b2:ca:bb:cf:05:f3:66:5a:ac:57:56:14:2a:4f:ac:e1:
21:1c:16:44:96:4f:65:8c:98:6b:8e:76:9e:fe:fe:f6:7d:7c:
84:9b:38:05:7b:ea:65:75:08:ad:52:41:b1:33:74:5c:3c:34:
10:07:b1:34:47:70:36:3e:f5:d8:21:48:a5:1e:84:b7:79:28:
b9:3e:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:42 2025 by rpki-client