Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XJ4nFfp1rZfKZX6nG75gq-gEnus.roa
File: XJ4nFfp1rZfKZX6nG75gq-gEnus.roa (raw, json)
Hash identifier: D9x4NrVl/aKaTyn8y9873YIcHJsuFfr/lTcYB/NNs0c=
Subject key identifier: 5C:9E:27:15:FA:75:AD:97:CA:65:7E:A7:1B:BE:60:AB:E8:04:9E:EB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709504A363EA46EA82CE6759550747B9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XJ4nFfp1rZfKZX6nG75gq-gEnus.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3279
IP address blocks: 95.46.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:04:a3:63:ea:46:ea:82:ce:67:59:55:07:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c9e2715fa75ad97ca657ea71bbe60abe8049eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:b4:d8:99:d1:34:4c:05:79:92:57:48:c4:
ed:b4:99:80:02:bb:94:30:f5:6f:ca:14:aa:c7:7c:
cd:80:34:b9:98:d9:01:2d:5c:2b:65:e5:7d:d9:25:
8e:a4:e2:2f:bd:1c:24:52:7b:d9:a3:12:0a:12:22:
9d:cf:c6:f0:46:e1:b0:9f:1f:f4:1f:92:48:1a:97:
b0:99:c5:b6:d6:ff:7d:40:28:b5:17:a6:91:52:6a:
45:05:a6:f8:67:b1:6a:c1:d9:84:46:2d:15:e7:44:
51:7e:fe:67:9c:72:22:cc:45:c1:57:04:4e:b8:8f:
fe:80:09:73:9b:51:ad:a0:c3:0a:3c:0f:5b:8f:c3:
f5:fb:69:0e:d0:e1:5a:f7:f9:e6:95:20:32:96:cd:
91:e8:59:02:9a:4a:b6:f4:e1:ee:6d:79:0f:09:d1:
c7:61:c9:57:69:7a:fa:81:a4:d0:03:73:39:33:79:
d9:20:8d:bb:42:34:37:12:7a:8b:7e:ef:99:04:85:
9f:c4:06:6b:64:0c:53:c7:1b:1c:5f:81:72:4b:10:
b2:5a:bb:0b:89:5a:68:8c:f3:19:a5:ab:6d:37:fb:
64:2d:da:2a:58:e4:01:c5:dc:fd:67:d3:3c:80:c1:
3a:98:48:63:80:2e:c9:a2:f5:b2:dd:fa:03:9b:7d:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9E:27:15:FA:75:AD:97:CA:65:7E:A7:1B:BE:60:AB:E8:04:9E:EB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XJ4nFfp1rZfKZX6nG75gq-gEnus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.6.0/24
Signature Algorithm: sha256WithRSAEncryption
52:39:cb:aa:27:a7:99:d8:14:85:6d:5d:13:e5:59:3f:bc:1b:
27:bc:a1:0f:63:6d:6c:8d:c4:d4:f8:26:c2:7b:02:fd:b0:20:
57:ce:74:b9:de:db:1b:9c:89:82:9a:1b:33:1a:eb:af:55:d5:
09:df:ec:31:ad:4f:65:75:2c:b3:c9:2c:73:e1:a7:9a:c3:c1:
e8:7a:9f:84:58:8a:bf:e2:92:d7:81:9c:45:8b:41:33:4e:85:
19:e4:42:6a:22:b8:83:12:2d:2b:5d:68:57:7d:93:af:62:ce:
fb:d2:d4:39:24:fb:0c:b2:a8:91:b5:e3:4c:99:06:4d:4b:53:
79:40:78:ed:d1:be:0e:19:bf:22:a8:7e:04:41:e2:a6:90:bf:
a9:0d:76:94:d7:b2:20:ca:5d:12:02:0e:58:ff:50:f7:47:76:
45:6e:ef:24:af:a3:5f:e0:f2:eb:e8:de:0c:c7:90:9f:dd:fb:
5d:97:9b:ec:46:17:74:ac:36:48:9f:5d:15:36:61:45:6f:e2:
f3:28:d3:e9:af:e7:20:8d:e4:bc:44:68:bc:4b:ff:5b:47:53:
21:1a:02:51:67:cd:d2:5b:f6:c2:af:69:67:5e:6b:0b:14:56:
db:f9:35:44:17:92:c9:78:29:54:c6:d6:b9:4b:b8:84:8e:a9:
fc:b4:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:17 2025 by rpki-client