Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WLaKaKQTn_fBx4_0tNus-WACmBI.roa
File: WLaKaKQTn_fBx4_0tNus-WACmBI.roa (raw, json)
Hash identifier: 7V5oLRbdQGVOBvUdTJ+OMvcaGZQygq1zTmFkKbq5w+o=
Subject key identifier: 58:B6:8A:68:A4:13:9F:F7:C1:C7:8F:F4:B4:DB:AC:F9:60:02:98:12
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF2B83A706088CC60B5F9C1DCA370
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WLaKaKQTn_fBx4_0tNus-WACmBI.roa
Signing time: Thu 02 Jan 2025 05:49:38 +0000
ROA not before: Thu 02 Jan 2025 05:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204671
IP address blocks: 95.47.173.0/24 maxlen: 24
95.47.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f2:b8:3a:70:60:88:cc:60:b5:f9:c1:dc:a3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58b68a68a4139ff7c1c78ff4b4dbacf960029812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:75:e2:e5:44:57:95:45:16:cf:ba:44:73:
d4:b5:b8:63:58:98:2a:fa:0f:3c:6a:0c:df:07:a1:
1e:c7:b0:7f:06:e1:72:9f:aa:ce:fd:5f:9a:90:10:
db:d2:bb:ae:ab:70:d0:9c:b3:7b:9e:c4:04:ae:22:
ef:9d:05:8d:ab:70:ba:76:f8:2a:a3:8e:53:d2:cf:
eb:63:8e:67:9d:ee:71:47:2c:1c:e4:dc:a4:26:a1:
8c:72:f3:62:28:a3:1c:84:5c:66:16:d9:c3:61:11:
8c:6a:50:e8:8d:13:fd:47:ce:d2:eb:fe:2b:9a:b6:
fc:66:c4:47:87:b2:93:70:e3:6e:a5:fc:9d:de:b2:
80:1f:7a:87:28:c8:97:d8:f3:62:b8:f3:2e:67:22:
54:67:27:67:2e:0f:00:49:2a:58:c9:6a:04:0a:ac:
c9:d9:cc:b5:1b:43:9c:7a:74:c2:41:35:5e:d5:2f:
d4:60:f8:4e:59:dc:a0:9a:93:13:69:a4:96:d2:91:
b8:43:68:0c:e6:17:6d:2a:ff:b3:fe:3f:4f:52:87:
8e:1d:60:9e:ea:2f:3c:99:58:54:ce:c5:da:bb:51:
97:f1:df:5c:db:b6:07:bb:5c:76:94:b1:99:ce:83:
f8:03:29:c7:09:a9:cb:09:df:9a:ce:9e:46:1b:86:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:8A:68:A4:13:9F:F7:C1:C7:8F:F4:B4:DB:AC:F9:60:02:98:12
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WLaKaKQTn_fBx4_0tNus-WACmBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.173.0/24
95.47.236.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d6:95:c6:b0:ef:c8:49:1a:bb:82:af:0d:58:4f:65:48:ad:
ce:9b:13:51:d2:5b:61:a2:ae:fd:64:6b:e9:e6:bc:40:11:22:
34:af:77:64:59:ab:aa:14:3c:27:59:e8:29:53:f3:4b:5b:f6:
06:be:30:44:4e:ec:9d:a5:6e:af:66:70:60:cf:86:b3:10:c1:
2d:84:7a:98:cd:f0:96:b6:2c:2e:85:5e:20:f7:21:cd:75:e3:
04:64:3b:7a:26:95:67:60:86:fd:7c:ea:a0:a6:31:c7:32:ed:
ac:34:2a:3a:df:d6:c3:69:58:cd:2e:30:f6:4e:22:03:82:a0:
b0:af:86:4c:70:29:29:a2:43:b5:93:18:25:98:15:dc:d2:a9:
c5:67:af:dd:79:85:f3:e8:8d:69:f2:2d:6c:d4:1e:3c:88:87:
8b:7e:3c:51:43:1b:2c:78:6e:15:e1:01:c6:38:26:98:51:93:
9e:4b:39:ed:a4:ee:b0:23:47:c7:7e:9d:f3:bb:79:9a:95:d2:
f7:52:d8:eb:e3:8d:61:6c:a8:de:12:9b:24:5a:c0:38:a9:20:
73:02:35:8d:a7:25:a4:1a:4a:7d:01:a9:54:83:db:51:31:0c:
32:ef:19:ed:1e:ca:4b:e7:cb:d4:80:06:11:cc:59:2b:ce:d9:
92:6c:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:32 2025 by rpki-client