Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Thd4dDCMAsb8nZk7nlf0u3_QhJI.roa
File: Thd4dDCMAsb8nZk7nlf0u3_QhJI.roa (raw, json)
Hash identifier: HF+LsB1zQKJIvC5gH/98n9BdfiJfGnAJEvOL6f2N6zc=
Subject key identifier: 4E:17:78:74:30:8C:02:C6:FC:9D:99:3B:9E:57:F4:BB:7F:D0:84:92
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259016DBB09521569AF04570A726B97E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Thd4dDCMAsb8nZk7nlf0u3_QhJI.roa
Signing time: Thu 02 Jan 2025 05:49:47 +0000
ROA not before: Thu 02 Jan 2025 05:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215469
IP address blocks: 95.47.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:16:db:b0:95:21:56:9a:f0:45:70:a7:26:b9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e177874308c02c6fc9d993b9e57f4bb7fd08492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:d2:58:4b:32:bd:c1:4a:8f:9f:d4:a6:fe:
59:ad:6e:3c:dc:46:69:f9:b8:14:d4:87:64:5a:69:
11:e0:92:01:14:a0:85:84:9c:33:8d:d7:b6:de:c5:
7d:34:96:28:4a:9b:04:c9:fc:4c:1f:6d:2f:bc:b9:
7d:dc:b4:c4:d6:ec:64:c1:41:31:74:67:f5:c7:cc:
83:03:f9:6e:68:cc:09:4b:5d:32:b6:09:d5:6c:b7:
ce:21:4c:a1:13:d5:6d:87:ab:23:6e:7c:5a:6f:9d:
27:3d:7a:c0:18:c4:fa:7c:46:29:e9:d2:01:5a:1c:
5c:1d:1e:ed:23:33:2c:a5:59:fe:07:fd:e2:46:f9:
27:e2:80:8a:a0:0c:ef:80:6a:fb:9a:12:3b:be:50:
e5:e0:4f:82:8a:c7:16:06:56:18:89:10:dd:df:8c:
e5:df:9f:df:00:cd:59:5b:b6:e5:44:4a:69:f4:0b:
12:94:6e:76:83:12:b4:32:45:33:2a:27:78:ea:28:
c4:6e:d3:80:42:62:42:e5:15:71:e7:4c:7e:2c:d5:
41:c8:e3:be:0d:27:5c:0c:72:69:4f:1a:11:fa:49:
d2:e7:13:ae:d8:57:1f:c9:06:19:7b:01:a4:6c:67:
ae:43:ed:d7:7c:c7:fc:73:bd:51:ac:85:e1:99:0d:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:17:78:74:30:8C:02:C6:FC:9D:99:3B:9E:57:F4:BB:7F:D0:84:92
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Thd4dDCMAsb8nZk7nlf0u3_QhJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ca:3f:ce:1e:3b:f7:ed:25:be:be:12:4b:cc:33:63:8b:b4:
b1:d9:b4:dc:3f:17:bb:ab:84:a3:18:0a:18:c3:5f:19:45:7d:
7f:23:b3:44:2d:86:5d:6b:0c:95:92:58:34:d2:f5:e6:76:53:
fd:e4:46:af:02:fc:d1:70:7c:52:b8:4d:79:61:3b:33:d2:f5:
5f:d1:d8:5c:af:d1:fb:c5:57:e3:06:d1:5f:39:fb:10:50:00:
9c:16:0e:4d:53:e1:a7:d1:64:ba:eb:c7:32:cf:14:41:b2:f2:
39:3a:58:5e:cf:04:23:e1:bb:e7:2d:14:6a:48:a8:21:87:ae:
03:95:40:e8:1f:14:3d:d0:a7:ba:bd:eb:10:cc:f5:ee:d8:12:
fd:91:d2:75:eb:73:7d:0a:e2:b4:41:00:a1:3f:f2:82:75:04:
46:4a:20:50:07:36:b6:c5:7a:20:95:5d:d1:87:c5:fb:e7:e6:
19:f0:4b:f9:a5:d6:9d:20:f8:11:08:0a:07:fb:e6:0d:77:1e:
98:c4:0f:22:0f:b5:1b:9a:e4:43:da:4f:fa:ee:56:15:00:1c:
7f:a5:d5:1d:12:44:c9:8a:f9:f4:75:de:95:9c:2f:0d:b0:49:
9e:ad:aa:25:aa:3c:f2:11:17:74:89:1b:58:0e:0b:44:b4:a6:
55:20:27:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:34 2025 by rpki-client