Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/czA7QAfzo4Cy1rMYSGlcQ9vpjI4.roa
File: czA7QAfzo4Cy1rMYSGlcQ9vpjI4.roa (raw, json)
Hash identifier: 4dQWCYPv1+MbuxdylqL8e01E63ErXIUIabclrhHHfCI=
Subject key identifier: 73:30:3B:40:07:F3:A3:80:B2:D6:B3:18:48:69:5C:43:DB:E9:8C:8E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185DEE8D1F8F539C8304031452F4FC9C672
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/czA7QAfzo4Cy1rMYSGlcQ9vpjI4.roa
Signing time: Mon 23 Jan 2023 13:54:37 +0000
ROA not before: Mon 23 Jan 2023 13:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50516
IP address blocks: 95.47.242.0/24 maxlen: 24
146.158.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:e8:d1:f8:f5:39:c8:30:40:31:45:2f:4f:c9:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 23 13:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73303b4007f3a380b2d6b31848695c43dbe98c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:76:e1:c5:dc:f6:88:cb:5d:20:96:ff:f5:12:
34:b9:bd:fe:e2:92:df:61:97:a7:3c:11:8f:47:ed:
9c:a5:1e:07:c0:4e:fc:77:08:1f:98:00:2f:c6:1d:
1b:e6:4f:35:e3:45:86:4d:58:40:8f:9e:0f:f5:c7:
ee:c9:45:83:22:e2:b3:2c:dd:9e:a5:78:e5:e5:c8:
1e:4d:9b:2c:d6:2e:82:46:6b:8a:68:9a:e4:42:30:
a7:21:cf:b7:6a:ef:2d:f0:7c:5f:c7:8b:4c:61:14:
c2:70:99:19:24:a4:89:22:db:ad:58:32:eb:a5:51:
fb:2e:27:d7:aa:b0:1f:e5:91:40:67:4b:e4:9c:e2:
6b:97:15:15:8a:57:a4:2c:1b:80:b1:54:b3:73:82:
e5:37:b5:41:d2:4b:07:15:07:0b:89:dd:11:36:df:
8c:0a:66:53:a3:bd:18:f3:1b:c7:f7:f3:69:48:ca:
42:a0:e7:1a:28:56:b6:4c:73:9e:b6:a9:ce:a0:a3:
ec:a2:b6:f4:78:de:5a:bc:35:11:7e:e1:2e:da:94:
dd:61:cc:5b:1f:23:05:cc:2f:2c:33:49:25:c3:8a:
04:77:23:d3:3f:c7:d8:7c:fb:6e:aa:7a:83:fb:fe:
b8:6d:1a:7e:fa:0f:6a:f4:f2:02:67:22:51:ae:7b:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:3B:40:07:F3:A3:80:B2:D6:B3:18:48:69:5C:43:DB:E9:8C:8E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/czA7QAfzo4Cy1rMYSGlcQ9vpjI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.242.0/24
146.158.12.0/23
Signature Algorithm: sha256WithRSAEncryption
78:de:5f:1f:4f:d9:57:8a:76:b4:55:a1:d4:40:83:a9:5f:ce:
f1:78:0d:c7:1f:92:ec:8e:c5:f8:e4:59:67:11:82:4d:58:1b:
26:fd:dd:d5:c1:4f:49:3d:33:c6:de:82:e8:7f:83:38:b7:3b:
e7:10:20:78:1d:c6:ee:04:3a:dc:45:a9:5a:ad:72:97:8d:8f:
c1:5a:35:5d:1b:95:08:1d:05:1d:87:5e:b7:0e:03:8d:ee:3f:
6f:00:d6:c7:19:c7:3b:bb:f3:54:75:e7:04:fe:e2:1a:32:da:
5d:64:b3:ae:77:ae:4b:54:3f:17:61:b9:bc:05:16:87:6f:9b:
f5:0a:1e:64:a4:49:89:c8:28:48:ac:99:19:5c:3a:32:a6:e7:
fa:98:c5:a4:81:59:89:89:ef:fc:0b:2a:36:44:ee:3d:65:66:
d3:40:5e:7e:8a:ad:cb:b8:66:8a:bf:37:d2:e6:ec:56:d5:fc:
b1:32:b3:ea:3f:82:5b:be:19:92:06:21:89:9b:00:82:4c:28:
40:56:c9:48:a0:6c:51:b4:cb:9c:1e:b3:f7:e9:4a:b9:5a:04:
aa:bb:89:b2:da:ea:8e:37:21:dd:ee:9a:3d:76:33:4a:62:d9:
d4:bd:eb:64:ff:a6:21:42:e4:67:9f:4c:77:46:87:bf:cb:ef:
41:31:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:43 2025 by rpki-client