Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RLEYMeeRe9oV87nBbO1vtY2YtYA.roa
File: RLEYMeeRe9oV87nBbO1vtY2YtYA.roa (raw, json)
Hash identifier: jjKUKvZwfpKabhQ3+qoaYMQ5DFFH87nXYpf0U5hlnDo=
Subject key identifier: 44:B1:18:31:E7:91:7B:DA:15:F3:B9:C1:6C:ED:6F:B5:8D:98:B5:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194D291F105D5CB7B0C2821D616463570B1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RLEYMeeRe9oV87nBbO1vtY2YtYA.roa
Signing time: Tue 04 Feb 2025 20:06:07 +0000
ROA not before: Tue 04 Feb 2025 20:06:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204532
IP address blocks: 95.47.166.0/24 maxlen: 24
95.47.168.0/23 maxlen: 24
146.120.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:91:f1:05:d5:cb:7b:0c:28:21:d6:16:46:35:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 4 20:06:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44b11831e7917bda15f3b9c16ced6fb58d98b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:b5:cc:4c:56:cb:7e:3f:26:82:a0:c1:95:
ec:72:1d:fe:29:15:6b:43:ab:d3:0f:cd:e0:00:09:
b1:6e:2c:51:ce:7e:6e:39:f1:d6:e9:ff:fb:24:9e:
94:15:57:e6:59:21:a8:07:af:ef:9b:5f:f0:53:6b:
33:2b:c2:f1:73:85:b0:cd:e7:d5:d7:9b:ae:8e:c7:
45:c4:76:61:e8:c8:b2:e4:e0:2d:9d:56:04:02:08:
6e:bd:4b:69:77:81:be:5e:53:32:a4:2d:64:84:ef:
76:2c:cb:13:26:ac:5a:1a:9e:98:98:76:da:7d:6e:
94:1c:b0:7e:54:51:74:4a:97:f6:61:fa:b4:a6:9e:
57:a3:a9:90:30:b3:4a:26:2d:66:c0:35:71:25:10:
74:7f:f6:db:25:7f:d2:91:67:0e:55:b9:ee:cf:3a:
97:e6:75:c5:f2:52:c2:75:36:4b:ce:1c:d8:62:6e:
88:15:72:fd:3a:3f:43:10:e6:f7:18:3c:07:52:8d:
07:50:a8:77:d0:f4:e7:70:ab:56:cc:eb:50:42:04:
a9:62:37:c5:95:03:67:b2:db:7a:88:df:a3:a9:cf:
f0:db:8f:a4:e3:e3:f6:7a:77:ac:29:8d:8c:61:b0:
2b:37:89:28:d1:95:af:51:0f:3e:4e:e9:d4:ad:e5:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:18:31:E7:91:7B:DA:15:F3:B9:C1:6C:ED:6F:B5:8D:98:B5:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RLEYMeeRe9oV87nBbO1vtY2YtYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.166.0/24
95.47.168.0/23
146.120.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:bd:78:a7:52:ff:fb:ff:0d:51:46:17:48:6c:f9:39:67:94:
e9:b0:50:20:57:bc:f7:63:06:62:7d:50:22:67:c6:d1:90:9b:
9f:95:97:32:28:4d:72:f8:cc:8a:eb:fc:d2:00:f4:23:6b:81:
68:94:44:90:c8:03:2d:24:eb:e0:e1:00:7d:39:6f:f7:18:9d:
07:0b:4c:38:a5:2b:f4:60:30:73:e3:cc:5d:e7:ca:7f:c0:e1:
2f:9c:3e:93:5e:65:f0:9f:aa:fe:f0:73:2f:8f:7c:7e:c5:48:
77:ee:0b:96:83:88:7e:47:de:e7:19:b6:2f:3d:b4:cc:46:7d:
9f:44:dd:81:5d:7d:b6:93:f5:61:e7:6c:ee:cb:f0:6c:26:af:
31:dd:51:35:d0:83:81:33:f6:93:92:b4:79:c5:92:f6:21:46:
16:c9:73:51:71:d2:a9:05:7d:b1:28:be:03:ce:ae:5d:d5:02:
f7:9d:f6:10:c8:22:df:ae:62:94:67:fe:ce:82:53:56:6a:fb:
68:3b:ae:ce:78:46:a9:94:40:7c:03:a4:a7:80:81:ad:40:3f:
e7:1c:5a:ca:2b:6a:20:79:f6:a7:83:dd:b2:1f:e7:80:45:19:
e2:70:5f:a7:13:dc:53:31:8b:3e:cb:47:32:da:ce:a0:45:38:
d0:72:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:22 2025 by rpki-client