Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RvIDBELzTFBOw7e-meVhuhL9DkE.roa
File: RvIDBELzTFBOw7e-meVhuhL9DkE.roa (raw, json)
Hash identifier: 7+OmezXRhfC17BUnm8TKE6d0O49fDL/PUdx6NykF/C0=
Subject key identifier: 46:F2:03:04:42:F3:4C:50:4E:C3:B7:BE:99:E5:61:BA:12:FD:0E:41
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF2199141A46C16DAFF89DD1B67B7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RvIDBELzTFBOw7e-meVhuhL9DkE.roa
Signing time: Thu 02 Jan 2025 05:49:38 +0000
ROA not before: Thu 02 Jan 2025 05:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204532
IP address blocks: 95.47.168.0/23 maxlen: 24
146.120.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f2:19:91:41:a4:6c:16:da:ff:89:dd:1b:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46f2030442f34c504ec3b7be99e561ba12fd0e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:ec:f5:58:dd:ea:ff:8b:b0:24:b7:b6:56:
fc:49:e4:ee:f4:d2:74:c5:6d:29:bd:53:b4:6b:0f:
ec:e4:3a:3b:eb:04:98:b0:77:35:c0:d7:29:6c:78:
f5:85:7b:4b:4c:2c:fe:b7:eb:85:ac:de:24:9a:4f:
ba:13:88:c8:13:0a:30:7e:05:97:a0:85:14:df:ff:
ea:35:73:fa:8a:d9:d0:39:92:cd:ae:4e:0b:29:ee:
35:69:45:c0:41:a2:ab:61:4e:5b:b2:3a:48:1c:b7:
fe:ca:a9:a4:a3:7f:7d:1c:51:bc:9c:8f:3f:92:c5:
8d:5a:5b:ee:c1:13:0f:59:89:ca:cc:e2:c5:e1:ab:
20:c6:eb:e4:99:f4:f5:25:d7:00:de:06:81:c3:22:
f5:f2:bd:79:1c:8d:82:2a:da:0f:76:a0:c2:8f:da:
41:b6:f2:1f:c3:cb:e2:e2:bd:78:07:8d:14:1d:05:
35:96:9d:68:0a:61:28:58:43:64:8e:6b:4e:5a:cb:
b7:ef:d5:aa:e0:25:25:c2:7f:23:66:d1:04:22:41:
c5:34:56:10:cb:a9:16:9a:c1:93:e3:b9:99:16:ff:
a4:29:28:a4:67:dc:05:8a:4c:b6:75:c5:07:02:a6:
1e:f5:79:6e:c7:10:ff:0e:ed:60:81:09:fb:8d:6a:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:03:04:42:F3:4C:50:4E:C3:B7:BE:99:E5:61:BA:12:FD:0E:41
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RvIDBELzTFBOw7e-meVhuhL9DkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.168.0/23
146.120.206.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e4:2b:b7:7f:2f:9c:e8:e0:fc:28:04:45:e2:a7:81:be:e7:
5d:61:aa:8e:f6:ce:fe:89:f0:b3:d6:48:69:f7:29:c9:df:ac:
56:68:cb:28:b8:d5:1b:ac:32:7a:bf:66:e4:11:c9:9d:b8:2c:
da:81:1d:e1:15:1c:d7:99:e7:cd:a9:d2:8c:27:34:74:de:06:
06:48:cb:43:e2:51:90:59:25:83:54:db:64:07:16:83:75:11:
a0:7a:f5:c0:7e:dd:3a:88:2f:76:b4:81:a9:36:99:11:77:90:
a0:cc:6d:58:fe:01:6f:12:da:8b:21:80:d5:db:c1:f7:b3:49:
51:83:2e:01:18:82:8b:64:2c:88:e7:01:9e:1a:41:8a:54:df:
a3:b6:5f:d5:d9:68:e0:a7:4d:92:1d:0b:5e:bf:9f:32:4e:9a:
5c:8c:9d:8a:d1:d6:aa:90:7c:80:fb:56:3b:09:a3:78:18:ab:
15:bc:9a:10:71:23:b4:e1:1f:60:31:bd:15:62:54:38:9b:a3:
a0:50:16:14:18:de:60:a9:fe:33:da:58:d9:54:ac:9a:37:84:
02:64:e5:fb:67:71:07:08:7a:aa:5c:a6:e7:d1:b0:58:e4:2c:
d2:fa:27:8c:40:9f:6f:b9:37:7c:a2:cc:41:f8:e5:e9:52:73:
16:2f:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:12 2025 by rpki-client