Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Pk5ewJDlAY3wV2Y07ASl7MCqzZc.roa
File: Pk5ewJDlAY3wV2Y07ASl7MCqzZc.roa (raw, json)
Hash identifier: IIUOqiiB+1ZD7BQVbr9Fn0GtdQOy8IP5/Kiukof6mVU=
Subject key identifier: 3E:4E:5E:C0:90:E5:01:8D:F0:57:66:34:EC:04:A5:EC:C0:AA:CD:97
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CAAFD0819323A2ED27B5BF3937870FA31
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Pk5ewJDlAY3wV2Y07ASl7MCqzZc.roa
Signing time: Wed 27 Dec 2023 11:15:58 +0000
ROA not before: Wed 27 Dec 2023 11:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41575
IP address blocks: 95.46.144.0/24 maxlen: 24
146.158.32.0/20 maxlen: 24
95.46.34.0/23 maxlen: 24
31.148.224.0/20 maxlen: 24
93.171.48.0/20 maxlen: 24
31.148.32.0/21 maxlen: 24
93.171.80.0/20 maxlen: 24
92.253.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:fd:08:19:32:3a:2e:d2:7b:5b:f3:93:78:70:fa:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 27 11:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4e5ec090e5018df0576634ec04a5ecc0aacd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:53:2e:9f:3c:33:f1:7b:fd:1f:f3:12:59:
c9:d8:04:88:92:ac:af:9b:36:b7:59:d8:f9:4e:54:
27:3b:04:02:4b:c3:4c:22:d2:2d:d8:28:f9:5e:6a:
e7:30:ef:61:0e:20:ef:25:bc:a9:b3:f2:74:c8:73:
b4:d3:7e:0e:7c:46:80:5b:d4:5a:d1:ca:8b:27:3f:
73:95:93:40:71:64:99:6c:22:0d:aa:21:74:19:9d:
29:de:58:24:02:e1:eb:60:e6:35:b1:ac:9e:eb:03:
c5:e7:40:3d:d3:43:a8:d5:97:8e:21:07:5f:ac:8c:
c8:06:9b:81:60:16:b0:08:88:23:a6:a9:0c:5c:9e:
83:40:2a:34:d1:80:b1:0c:c0:ba:92:f1:a8:07:8c:
93:a3:39:3c:9c:f9:ba:ef:f6:63:13:8e:0a:fc:40:
f4:47:5a:88:fa:57:c8:dd:25:7c:7e:21:e8:0e:3e:
6c:3f:59:57:a4:54:86:a3:ee:07:11:84:e8:3e:a2:
10:cd:3d:04:ee:d3:04:d9:0d:35:15:59:b1:e5:af:
20:dc:46:a5:b7:9f:91:f9:de:9c:d7:29:d3:39:92:
4e:f1:57:b9:65:c7:b0:63:1f:76:3c:5d:94:7c:c0:
21:ce:7a:b0:b0:21:ea:2c:10:2e:4e:47:6f:66:43:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:5E:C0:90:E5:01:8D:F0:57:66:34:EC:04:A5:EC:C0:AA:CD:97
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Pk5ewJDlAY3wV2Y07ASl7MCqzZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.32.0/21
31.148.224.0/20
92.253.240.0/20
93.171.48.0/20
93.171.80.0/20
95.46.34.0/23
95.46.144.0/24
146.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:cc:c9:6a:3d:83:02:8a:46:fa:91:d7:4e:5c:6a:f6:aa:47:
e1:ec:1b:a0:3b:1e:e4:eb:a7:a8:c5:50:aa:84:90:62:c4:21:
38:bb:b3:2d:58:15:df:5c:4f:72:ee:fb:0b:a1:9f:fd:67:0a:
8b:34:24:ea:77:5f:75:7f:a5:27:40:bc:f3:1f:25:1d:a6:0e:
d5:43:f6:64:86:34:43:e2:c2:53:d1:e4:d8:33:33:0f:11:7d:
25:37:c6:83:b3:93:3e:d6:06:1c:b0:02:53:e2:ee:43:2e:58:
50:9e:e9:9d:c0:74:cb:11:07:39:bf:49:44:bf:48:e0:93:c5:
1d:f8:2e:71:15:35:08:35:db:61:72:67:48:4a:aa:f5:cd:f0:
e0:6b:b2:a4:1b:86:34:87:6e:df:20:f4:7b:51:72:6b:f3:48:
6e:f9:44:ed:8c:65:93:87:ce:fd:27:f8:7b:f2:ba:c2:22:66:
f0:66:2e:12:87:72:15:88:09:0f:2e:5c:10:c8:da:54:57:a6:
88:d4:34:58:35:ad:66:72:a8:d3:b1:34:f2:13:ca:b0:9f:c6:
2e:86:93:a9:ff:72:5e:6d:7d:53:ab:65:91:4a:2d:e9:5e:b4:
3d:48:c1:68:51:81:a9:98:02:52:a9:a5:90:2e:f1:68:ee:b7:
de:7e:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:32 2025 by rpki-client