Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PqzZHGgWm-4ksk9aO1WbSaBBQC4.roa
File: PqzZHGgWm-4ksk9aO1WbSaBBQC4.roa (raw, json)
Hash identifier: ht7HMCahMd1v/U0jHDH4ubDKmq+ZYj758mD3URCsXTI=
Subject key identifier: 3E:AC:D9:1C:68:16:9B:EE:24:B2:4F:5A:3B:55:9B:49:A0:41:40:2E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709523D1655294ADAB14E04DD6CD8CC9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PqzZHGgWm-4ksk9aO1WbSaBBQC4.roa
Signing time: Mon 02 Jan 2023 03:45:00 +0000
ROA not before: Mon 02 Jan 2023 03:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43049
IP address blocks: 95.46.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:23:d1:65:52:94:ad:ab:14:e0:4d:d6:cd:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eacd91c68169bee24b24f5a3b559b49a041402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:5d:18:fd:e6:d8:60:71:c1:35:63:ce:a5:
7a:85:46:9f:51:25:ec:5d:a3:39:4b:a7:24:d2:0c:
90:08:d5:07:3a:17:c3:0c:a3:3d:b6:7a:3c:94:ed:
cf:32:a1:f3:38:65:e4:fb:45:40:23:39:32:1d:a2:
98:3d:d2:33:16:b5:e0:7f:37:2a:86:bf:f1:cb:b5:
ac:ca:bd:5c:31:8a:33:6a:4d:be:bb:57:77:a2:4d:
ee:7f:a1:e4:66:17:43:be:c3:06:b4:d8:a4:89:c1:
a2:b1:24:85:28:9d:46:74:3b:57:a7:84:07:af:a1:
fb:58:39:a5:94:0b:d6:aa:aa:71:93:d6:94:44:d4:
c2:22:53:48:c3:71:3a:eb:95:35:ba:bf:cf:9c:b7:
fd:75:e8:a8:51:e6:8e:08:a0:ba:bc:e3:64:6c:10:
be:8a:89:cc:0e:7a:f4:2a:68:f2:87:46:81:9e:e6:
ca:bc:af:e1:97:21:ba:da:74:f1:14:34:cb:2c:36:
9d:19:ae:70:e5:9a:fa:28:74:78:a0:ef:a6:e3:1a:
67:e3:90:a3:01:77:e5:33:23:9d:25:3e:7d:e4:01:
fd:0c:af:da:63:a6:84:a4:2b:0e:b7:42:ad:e2:b0:
1e:6f:dd:95:37:e3:ff:c1:5f:9d:54:2b:08:0d:87:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:D9:1C:68:16:9B:EE:24:B2:4F:5A:3B:55:9B:49:A0:41:40:2E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PqzZHGgWm-4ksk9aO1WbSaBBQC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:42:be:d0:71:27:33:49:8a:91:01:5f:e8:ef:d3:fc:c5:e3:
f7:8e:4b:17:1f:7e:5f:c1:31:81:4d:ef:44:21:25:a9:e0:6f:
6b:28:c8:16:d9:94:25:3d:9e:6d:6a:c9:2e:8b:c3:86:f9:d3:
64:74:fd:bf:2c:e6:8e:c3:20:1b:07:61:c6:37:9b:34:9f:2e:
05:98:f5:14:d1:58:bb:5c:4a:15:64:c0:ea:a0:20:3d:1f:70:
25:1f:71:52:e6:2c:ff:63:8b:86:a3:3c:83:b6:60:26:96:d3:
2e:1f:93:6d:02:90:8a:e2:99:89:dd:8c:3a:1e:14:6a:86:9d:
33:6c:e5:7b:7a:5d:af:95:3a:7f:9b:87:e5:66:43:c3:3f:50:
53:25:6f:ba:5e:78:4b:19:af:ab:40:34:e7:77:ec:1e:92:5b:
8f:b1:bc:ab:90:83:69:cf:4e:1d:ff:00:95:ac:be:c4:bd:64:
49:d0:b5:9b:6c:55:4a:d6:d8:5d:82:43:78:8e:d0:39:a7:da:
83:c0:ec:c0:e7:5c:ce:2f:07:fa:26:af:b9:04:82:23:1b:64:
38:16:c4:e9:ce:6d:4d:6e:c9:43:da:d9:92:5f:41:58:32:24:
4d:44:d2:55:24:92:af:bf:97:60:99:7b:f5:15:af:90:c2:fa:
39:0e:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:37 2025 by rpki-client