Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WwD4CQNt7QGANiA4eTAnd8kL_dM.roa
File: WwD4CQNt7QGANiA4eTAnd8kL_dM.roa (raw, json)
Hash identifier: /f+ngXR2zyDM5176m7cp+nRIytzBh/mQKBkP24P2ea4=
Subject key identifier: 5B:00:F8:09:03:6D:ED:01:80:36:20:38:79:30:27:77:C9:0B:FD:D3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425900FF64016A4AA40EEEE3FA27D3C8F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WwD4CQNt7QGANiA4eTAnd8kL_dM.roa
Signing time: Thu 02 Jan 2025 05:49:45 +0000
ROA not before: Thu 02 Jan 2025 05:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212999
IP address blocks: 95.46.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:0f:f6:40:16:a4:aa:40:ee:ee:3f:a2:7d:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b00f809036ded018036203879302777c90bfdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:ae:1a:00:d1:db:a6:bd:e7:f8:4f:24:02:
42:0f:c7:68:c0:89:1e:92:a5:0f:21:58:98:90:39:
a1:8e:93:2a:d1:8a:90:aa:8e:36:ff:32:28:48:1d:
e7:18:0a:be:e9:ac:5d:fd:a2:1f:b7:42:36:2d:bc:
0d:a1:7c:72:8c:6e:11:5a:0b:ff:79:94:bb:d9:f4:
aa:77:bb:6e:39:8c:63:c8:90:e3:4a:3e:68:f6:20:
db:9a:bc:80:62:39:a4:56:11:e0:11:d9:66:73:c7:
b7:0c:23:21:df:d9:7c:9d:8e:c8:c8:94:87:8f:20:
b5:ef:d9:ec:65:ab:86:3b:d0:a1:81:77:a1:fa:a8:
a8:0d:b4:44:76:98:96:ec:87:24:99:cf:d0:f7:0a:
89:59:ec:3f:d6:b0:1e:7f:c2:8a:67:76:6c:37:3f:
35:76:88:a0:56:9f:2c:15:22:e8:b1:2f:e1:84:14:
a5:c4:f7:bf:e2:a5:c5:83:7a:15:46:b5:09:d9:f9:
8d:7e:59:49:b7:c3:9a:f1:54:42:c1:6a:cb:7d:2f:
28:2d:14:f3:9a:da:01:6d:34:13:9d:bb:a6:28:9a:
9d:f8:a6:e8:de:58:55:21:d5:c2:b1:2f:35:f0:ac:
5c:4f:3f:90:f2:ad:13:35:c2:5c:c2:76:02:9b:4e:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:F8:09:03:6D:ED:01:80:36:20:38:79:30:27:77:C9:0B:FD:D3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WwD4CQNt7QGANiA4eTAnd8kL_dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:09:3b:57:dc:af:8b:f6:02:4a:a0:83:f6:16:7e:b3:f7:e2:
f9:56:f8:85:45:03:37:fa:07:72:5a:d7:81:d8:06:3f:c4:0d:
ab:c2:d2:dd:16:ad:47:9b:c3:a0:52:4e:bb:c4:3e:3a:c9:3c:
e8:6b:fe:e5:12:48:4b:f1:a8:f8:8a:ac:00:dc:58:d9:91:c7:
06:58:fb:d5:17:1a:3c:c7:39:32:21:fe:39:ef:f9:74:e1:04:
db:1b:5c:51:86:0a:5e:51:45:28:cb:6d:76:d2:6c:8b:d7:ef:
05:4b:49:5e:7f:9f:d0:f9:94:dd:31:56:53:f7:77:a0:41:6e:
c0:da:cc:cb:e8:ec:02:e9:3b:5a:1a:95:0f:37:8d:5c:99:38:
a7:72:e2:fb:47:8f:bc:5f:35:b2:9e:33:97:eb:ab:c0:dc:39:
5b:24:74:62:1a:6d:f7:16:b5:31:95:13:dc:44:a1:27:95:71:
b4:37:dd:a4:53:89:67:99:53:67:6b:6b:ff:ab:99:b0:db:e4:
b3:0f:ef:09:b2:00:53:2a:6e:ca:28:5b:fc:e8:ae:5b:81:a8:
78:c1:fd:b2:99:eb:b2:8b:0b:3b:28:ce:ea:32:3d:72:10:19:
38:d6:fd:92:08:53:00:ba:20:f3:54:8f:6e:bf:1f:de:df:26:
05:34:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:28 2025 by rpki-client