Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/U-p0BzwueDlIIlN7XfTB1z3bS88.roa
File: U-p0BzwueDlIIlN7XfTB1z3bS88.roa (raw, json)
Hash identifier: inZSb151nxbeCWacVYXLNjT5x35xXFWkCPa60MoJ1mI=
Subject key identifier: 53:EA:74:07:3C:2E:78:39:48:22:53:7B:5D:F4:C1:D7:3D:DB:4B:CF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27A1A00F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/U-p0BzwueDlIIlN7XfTB1z3bS88.roa
Signing time: Sat 01 Jan 2022 16:08:28 +0000
ROA not before: Sat 01 Jan 2022 16:08:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48184
IP address blocks: 95.46.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664903695 (0x27a1a00f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53ea74073c2e78394822537b5df4c1d73ddb4bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:e8:eb:84:5b:37:0d:72:b9:46:64:24:0a:
4f:11:36:1c:48:9b:33:c8:46:83:4c:ed:4b:52:df:
28:59:7e:2f:2b:fb:85:7b:83:5b:bf:d0:02:1b:c4:
0f:36:8a:54:05:25:38:ab:87:11:03:b7:44:18:f2:
b1:b1:a7:50:e6:47:26:e1:11:d3:d9:16:52:07:25:
7e:93:c5:8d:8c:f6:6c:6e:4f:22:a2:cc:4c:7b:dd:
6d:99:7b:08:16:bd:6e:1e:a0:83:f7:fa:f8:ea:23:
51:46:bf:e6:72:09:de:35:e8:ad:71:e7:21:8b:3c:
ae:38:70:36:ed:07:66:97:00:56:d2:c1:ed:c5:10:
30:66:0c:cd:e8:d2:22:08:f8:0c:7e:94:b7:be:24:
69:60:fd:d7:ff:77:9d:ec:75:1e:95:de:c3:63:5d:
ff:59:d6:3b:b4:d2:2e:f0:30:0c:59:51:41:b8:85:
db:b0:f2:60:4c:0d:8e:21:2a:a8:4b:25:82:b0:99:
e3:c1:b6:b3:c5:41:68:4a:ac:15:00:bc:3c:d9:be:
6f:ce:13:69:2d:4f:19:4b:e9:c7:69:c7:4a:c5:75:
ad:01:70:8e:34:40:d2:d4:38:09:f1:62:dc:a7:68:
5e:2c:31:37:8b:fe:53:77:1a:71:da:50:ab:58:c7:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:74:07:3C:2E:78:39:48:22:53:7B:5D:F4:C1:D7:3D:DB:4B:CF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/U-p0BzwueDlIIlN7XfTB1z3bS88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:08:84:f7:f8:9d:c3:7c:98:d0:6a:ad:2d:70:65:24:db:ff:
36:3a:48:82:dc:70:10:98:30:71:4d:2e:88:45:ac:da:bf:93:
5b:11:08:0b:55:c0:12:23:38:b4:8d:a1:92:ab:a1:75:80:44:
2c:28:89:d4:f3:2f:c0:37:9d:bc:89:b6:97:51:5c:25:41:75:
dc:21:00:c8:90:ab:da:30:d3:35:bf:30:99:79:14:eb:a9:3b:
51:df:c3:d1:e4:ba:4a:95:95:f7:b7:ff:5a:9e:35:0e:87:b9:
f4:f6:d5:87:6d:e6:dc:11:dc:85:21:4b:5b:0d:b4:71:b9:f1:
32:97:f9:8f:7e:6e:97:80:d5:a0:3d:0c:2a:51:6e:e6:03:33:
56:55:58:1e:80:54:f2:04:d8:11:d0:e1:ce:f4:5f:6c:d5:eb:
30:aa:c3:06:89:d4:b4:ff:75:13:a7:89:d5:6e:56:e5:75:75:
5b:0a:62:4e:6f:1b:f6:14:33:51:c1:ef:7f:9a:07:9e:55:1d:
1b:8c:b4:0e:be:b4:81:57:c7:d9:0c:5b:18:da:65:69:e8:99:
29:61:35:3a:70:2b:9a:42:58:0a:f7:01:13:77:27:91:11:08:
ce:de:f4:cc:d6:57:c0:0d:76:b0:65:a8:79:70:e8:3c:d3:9e:
dc:ad:25:98
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ6GgDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDgyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTNlYTc0MDczYzJl
NzgzOTQ4MjI1MzdiNWRmNGMxZDczZGRiNGJjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOD+6OuEWzcNcrlGZCQKTxE2HEibM8hGg0ztS1LfKFl+Lyv7
hXuDW7/QAhvEDzaKVAUlOKuHEQO3RBjysbGnUOZHJuER09kWUgclfpPFjYz2bG5P
IqLMTHvdbZl7CBa9bh6gg/f6+OojUUa/5nIJ3jXorXHnIYs8rjhwNu0HZpcAVtLB
7cUQMGYMzejSIgj4DH6Ut74kaWD91/93nex1HpXew2Nd/1nWO7TSLvAwDFlRQbiF
27DyYEwNjiEqqEslgrCZ48G2s8VBaEqsFQC8PNm+b84TaS1PGUvpx2nHSsV1rQFw
jjRA0tQ4CfFi3KdoXiwxN4v+U3cacdpQq1jHOLUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRT6nQHPC54OUgiU3td9MHXPdtLzzAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1UtcDBCend1ZURsSUlsTjdYZlRCMXozYlM4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF8unDANBgkqhkiG9w0BAQsFAAOC
AQEATgiE9/idw3yY0GqtLXBlJNv/NjpIgtxwEJgwcU0uiEWs2r+TWxEIC1XAEiM4
tI2hkquhdYBELCiJ1PMvwDedvIm2l1FcJUF13CEAyJCr2jDTNb8wmXkU66k7Ud/D
0eS6SpWV97f/Wp41Doe59PbVh23m3BHchSFLWw20cbnxMpf5j35ul4DVoD0MKlFu
5gMzVlVYHoBU8gTYEdDhzvRfbNXrMKrDBonUtP91E6eJ1W5W5XV1WwpiTm8b9hQz
UcHvf5oHnlUdG4y0Dr60gVfH2QxbGNplaeiZKWE1OnArmkJYCvcBE3cnkREIzt70
zNZXwA12sGWoeXDoPNOe3K0lmA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:20 2025 by rpki-client