Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cVqzFt2zqj9uyfA7jBkc9yrS3vQ.roa
File: cVqzFt2zqj9uyfA7jBkc9yrS3vQ.roa (raw, json)
Hash identifier: LFoV4L4ZWvOuOqKFKqIK/MJKHvTqHoxWnmReIVvS/6Y=
Subject key identifier: 71:5A:B3:16:DD:B3:AA:3F:6E:C9:F0:3B:8C:19:1C:F7:2A:D2:DE:F4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27C3977E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cVqzFt2zqj9uyfA7jBkc9yrS3vQ.roa
Signing time: Sat 01 Jan 2022 16:08:49 +0000
ROA not before: Sat 01 Jan 2022 16:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51812
IP address blocks: 95.46.152.0/23 maxlen: 23
93.170.104.0/23 maxlen: 23
93.170.120.0/23 maxlen: 23
92.253.216.0/23 maxlen: 23
146.120.114.0/23 maxlen: 23
93.170.32.0/23 maxlen: 23
93.171.216.0/23 maxlen: 24
93.170.50.0/23 maxlen: 24
93.171.14.0/23 maxlen: 23
146.120.156.0/23 maxlen: 23
95.47.202.0/23 maxlen: 23
95.46.38.0/23 maxlen: 23
146.120.98.0/23 maxlen: 23
93.170.138.0/23 maxlen: 23
93.171.98.0/23 maxlen: 24
92.38.88.0/23 maxlen: 24
92.38.90.0/23 maxlen: 24
95.47.184.0/23 maxlen: 23
93.170.172.0/23 maxlen: 23
146.158.10.0/23 maxlen: 23
95.46.12.0/23 maxlen: 23
95.46.14.0/23 maxlen: 23
95.47.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667129726 (0x27c3977e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=715ab316ddb3aa3f6ec9f03b8c191cf72ad2def4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:35:99:4a:55:22:ce:0d:2d:87:3a:18:66:
90:85:89:68:c4:1f:9c:3c:a9:b9:0d:fe:e9:bd:2a:
c8:27:2f:c8:d0:b8:e7:66:5b:da:2a:c3:ef:b1:62:
6d:4b:b5:9d:89:79:b0:82:cb:50:c0:08:2a:de:8d:
24:25:7e:bb:7c:66:f1:96:d2:31:86:8e:e8:e7:48:
02:fd:08:5d:30:ee:df:20:25:fa:1a:bc:0d:17:f0:
90:a3:cd:54:8a:65:85:80:96:d0:d8:f5:9d:59:d7:
99:a1:80:a5:a4:36:53:54:90:7d:80:31:06:33:24:
16:2f:5b:73:db:49:cd:e3:9f:36:66:2e:75:f3:57:
60:54:83:32:94:ed:b7:ea:3c:1d:0d:6e:ec:80:40:
9c:58:db:95:6d:58:ce:dc:19:0e:fa:6e:8b:29:2d:
51:2d:96:43:1c:ba:91:5b:01:ce:c0:97:af:ea:5f:
39:0c:28:c4:a0:da:3a:cf:dd:bb:e4:d7:bc:6c:32:
53:dd:de:94:ac:42:bb:26:a0:fb:52:39:df:9f:9c:
3e:88:46:61:80:f6:8b:95:ee:dc:86:29:fb:00:29:
8e:f8:5b:0a:7b:87:51:5b:7f:b0:cc:c2:5c:59:f5:
d1:5f:2f:31:be:89:53:6f:db:9e:29:d1:73:97:87:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:B3:16:DD:B3:AA:3F:6E:C9:F0:3B:8C:19:1C:F7:2A:D2:DE:F4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cVqzFt2zqj9uyfA7jBkc9yrS3vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.88.0/22
92.253.216.0/23
93.170.32.0/23
93.170.50.0/23
93.170.104.0/23
93.170.120.0/23
93.170.138.0/23
93.170.172.0/23
93.171.14.0/23
93.171.98.0/23
93.171.216.0/23
95.46.12.0/22
95.46.38.0/23
95.46.152.0/23
95.47.184.0/23
95.47.198.0/23
95.47.202.0/23
146.120.98.0/23
146.120.114.0/23
146.120.156.0/23
146.158.10.0/23
Signature Algorithm: sha256WithRSAEncryption
af:90:28:44:a2:04:e4:c1:0f:9e:46:e0:c6:04:30:c2:de:4e:
c3:a2:a8:60:61:4e:76:d5:20:9a:6a:83:4c:25:ba:8e:66:3c:
ac:fd:54:e1:02:12:85:ac:6f:66:93:b9:f7:2a:15:fb:f1:3a:
7e:a3:48:83:18:67:80:51:28:98:8a:65:ea:fa:89:e5:9c:ef:
96:30:88:a9:01:4b:12:b5:32:bf:c4:6b:3a:9a:28:30:40:e8:
dc:b3:ed:cf:cc:72:2e:21:26:35:fa:9c:63:ea:1f:0c:f6:f8:
e0:8c:f8:98:d0:d4:c5:2b:e9:c6:a4:09:f8:7e:e1:09:82:df:
5a:e3:eb:61:8e:04:20:e3:40:a1:ae:38:7e:fc:2a:29:64:c1:
b2:08:30:ed:4f:3a:1b:01:c3:cd:33:7c:4b:46:2e:97:f7:b6:
a6:6a:0e:33:0c:b6:24:71:ad:1b:0b:2a:1d:a7:d5:ef:a6:64:
06:8a:e1:9f:d7:6d:d8:8a:af:09:4e:ab:8e:47:03:4e:07:5d:
4d:0f:dd:1f:ab:96:2a:24:b9:bd:e6:e2:f1:86:e8:d7:0e:50:
16:40:1d:67:53:5a:e4:c2:d7:ca:78:67:6b:0f:c2:e3:34:6b:
0d:e2:94:fd:34:61:75:a3:e3:70:57:4c:de:d7:50:ca:e3:f5:
37:cf:14:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:08 2025 by rpki-client