Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y0ReRKGqiyxnrIxeDEafQwFfiac.roa
File: Y0ReRKGqiyxnrIxeDEafQwFfiac.roa (raw, json)
Hash identifier: t9JyTlvyUxQm9sP2lDHE1IX7OMSNnCGxRQCjWjpEM4k=
Subject key identifier: 63:44:5E:44:A1:AA:8B:2C:67:AC:8C:5E:0C:46:9F:43:01:5F:89:A7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187D74DAA1447C0283A2F9054921671B1A6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y0ReRKGqiyxnrIxeDEafQwFfiac.roa
Signing time: Mon 01 May 2023 12:33:23 +0000
ROA not before: Mon 01 May 2023 12:33:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198681
IP address blocks: 95.46.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:4d:aa:14:47:c0:28:3a:2f:90:54:92:16:71:b1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 1 12:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63445e44a1aa8b2c67ac8c5e0c469f43015f89a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:df:67:13:3b:75:0f:96:8b:8e:dd:bc:cc:
d6:a6:92:3a:74:6f:73:71:d3:67:01:39:cf:01:48:
7b:59:6e:8a:37:4b:41:48:de:7c:df:e8:b0:3e:6d:
b1:96:2b:4c:77:aa:5f:cd:6f:b1:ee:94:5c:51:78:
43:36:12:78:51:02:84:14:18:49:95:43:c2:38:9f:
db:e1:10:35:e6:4e:0f:25:c2:91:bc:b8:16:00:a0:
6f:0f:b2:6a:25:2c:2c:b8:e5:4b:85:fc:5f:45:51:
19:e3:03:ff:38:ce:de:69:ac:9a:8e:fc:10:79:03:
6d:a2:b3:ba:49:67:42:00:1f:9d:33:f7:b0:05:87:
ba:7a:4e:29:7f:2f:82:3d:c2:6f:2c:af:fe:f4:81:
05:33:dd:07:91:7f:73:fc:a1:06:cb:4f:b5:17:48:
42:39:cf:4e:b2:ab:17:95:56:f0:eb:4e:93:75:cc:
06:83:59:6d:5b:54:35:17:82:c2:a5:6d:14:46:41:
64:31:45:9a:1b:98:ca:aa:21:7c:37:cf:35:bc:31:
57:2d:1e:be:79:a1:ce:15:b5:95:22:88:c0:ea:0d:
d0:6a:8a:8d:0b:a6:13:25:cb:09:58:ea:9e:b7:d1:
39:06:36:cc:ea:c4:c3:65:d6:c8:e3:15:14:27:8f:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:5E:44:A1:AA:8B:2C:67:AC:8C:5E:0C:46:9F:43:01:5F:89:A7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y0ReRKGqiyxnrIxeDEafQwFfiac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.105.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b0:d1:4e:ce:2f:5d:63:4f:c4:d8:75:83:1d:1e:de:ed:75:
1b:88:05:1b:91:7f:d3:a0:89:79:3c:e9:e6:30:99:0d:90:d2:
5f:2c:fd:21:69:bc:18:0d:65:a2:bb:92:b0:20:a3:5d:40:3a:
b4:ab:69:e6:e6:38:47:c7:78:53:f3:f3:c3:9e:56:00:5b:6c:
b4:20:64:42:ca:4b:ae:7c:94:92:1d:b1:36:76:6f:13:ce:d2:
89:2d:10:79:32:be:f9:65:e4:71:b3:84:b2:fb:16:ba:3d:50:
f0:9c:ec:9f:26:07:3a:76:af:19:b1:5b:fc:dd:40:0b:fd:1b:
b1:75:ac:7c:8b:a5:3d:9f:10:25:b5:c3:f7:6d:47:45:9e:b6:
0e:ba:ea:94:2f:5d:7f:6c:ef:ba:8e:59:2a:20:2b:b8:fd:51:
87:f2:99:ee:43:98:ce:a4:b5:30:92:8a:73:7d:83:1c:83:85:
55:e3:cc:b8:0a:55:cf:aa:04:38:40:95:4e:6d:a0:db:4f:cf:
26:91:4b:5f:68:5b:22:03:db:5c:46:4f:7e:8b:8b:d1:04:67:
7d:6f:34:0b:46:0f:d5:ca:26:30:dd:3e:c7:01:99:7e:ca:4d:
2b:90:4a:16:d6:cd:af:53:b7:c8:70:90:5b:5a:8d:26:8c:62:
40:0c:07:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfXTaoUR8AoOi+QVJIWcbGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwNTAxMTIzMzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzQ0NWU0NGExYWE4YjJjNjdhYzhjNWUwYzQ2OWY0MzAxNWY4OWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuffZxM7dQ+Wi47dvMzWppI6dG9z
cdNnATnPAUh7WW6KN0tBSN583+iwPm2xlitMd6pfzW+x7pRcUXhDNhJ4UQKEFBhJ
lUPCOJ/b4RA15k4PJcKRvLgWAKBvD7JqJSwsuOVLhfxfRVEZ4wP/OM7eaayajvwQ
eQNtorO6SWdCAB+dM/ewBYe6ek4pfy+CPcJvLK/+9IEFM90HkX9z/KEGy0+1F0hC
Oc9OsqsXlVbw606TdcwGg1ltW1Q1F4LCpW0URkFkMUWaG5jKqiF8N881vDFXLR6+
eaHOFbWVIojA6g3QaoqNC6YTJcsJWOqet9E5BjbM6sTDZdbI4xUUJ49cOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGNEXkShqossZ6yMXgxGn0MBX4mnMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWTBSZVJLR3FpeXhuckl4ZURFYWZRd0ZmaWFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy5pMA0G
CSqGSIb3DQEBCwUAA4IBAQBRsNFOzi9dY0/E2HWDHR7e7XUbiAUbkX/ToIl5POnm
MJkNkNJfLP0habwYDWWiu5KwIKNdQDq0q2nm5jhHx3hT8/PDnlYAW2y0IGRCykuu
fJSSHbE2dm8TztKJLRB5Mr75ZeRxs4Sy+xa6PVDwnOyfJgc6dq8ZsVv83UAL/Rux
dax8i6U9nxAltcP3bUdFnrYOuuqUL11/bO+6jlkqICu4/VGH8pnuQ5jOpLUwkopz
fYMcg4VV48y4ClXPqgQ4QJVObaDbT88mkUtfaFsiA9tcRk9+i4vRBGd9bzQLRg/V
yiYw3T7HAZl+yk0rkEoW1s2vU7fIcJBbWo0mjGJADAe2
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:27 2025 by rpki-client