Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eshMbtoV29pVOCVLlHrpQjJuPMQ.roa
File: eshMbtoV29pVOCVLlHrpQjJuPMQ.roa (raw, json)
Hash identifier: uH2NILoUFrJZUBTt+r/4W2YJz0Wcnx2Fkg7lKjLqZqA=
Subject key identifier: 7A:C8:4C:6E:DA:15:DB:DA:55:38:25:4B:94:7A:E9:42:32:6E:3C:C4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709523894259DFE4CF44D323C9A1B922
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eshMbtoV29pVOCVLlHrpQjJuPMQ.roa
Signing time: Mon 02 Jan 2023 03:45:00 +0000
ROA not before: Mon 02 Jan 2023 03:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43047
IP address blocks: 95.47.102.0/24 maxlen: 24
146.120.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:23:89:42:59:df:e4:cf:44:d3:23:c9:a1:b9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ac84c6eda15dbda5538254b947ae942326e3cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:5c:3c:d6:1b:eb:db:c3:09:7c:de:21:9d:
76:56:18:04:ee:ea:32:44:3c:e4:95:00:f6:5e:3f:
1e:b3:86:28:db:e7:7a:38:8a:96:af:69:ee:fc:98:
b6:cd:1a:23:d1:5a:71:d7:5f:04:56:07:5d:41:66:
43:c7:b4:84:02:db:38:81:27:6e:6b:52:5b:a1:d2:
ae:41:7f:95:50:1c:d7:45:a6:a7:c1:ec:27:e0:21:
c0:bd:50:10:47:cb:b5:f4:90:dd:e0:af:d8:ef:47:
f8:bb:fb:6c:4a:07:83:ee:d6:d9:57:ee:96:1a:f8:
d6:c8:19:0b:b7:63:1b:27:72:53:0f:09:f7:e8:24:
e0:54:5a:82:e7:48:5b:72:67:67:44:97:44:f2:3f:
14:67:d4:ae:fd:d2:c7:17:4a:2e:af:0d:7e:b3:f7:
9c:b7:00:95:bb:fc:7b:77:a9:56:14:8f:74:c1:22:
bf:65:44:ac:a1:11:6d:7d:8e:d6:b6:c3:e1:53:8d:
f2:42:70:d8:45:00:d6:13:f3:75:34:22:84:2d:5d:
32:5d:43:15:98:fb:a8:e6:7e:5b:59:d4:11:19:77:
15:58:10:5a:85:a1:dd:93:d1:04:f0:c1:c5:31:d9:
68:92:84:51:8b:0a:d6:3f:0d:b9:fe:71:13:51:e8:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:4C:6E:DA:15:DB:DA:55:38:25:4B:94:7A:E9:42:32:6E:3C:C4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eshMbtoV29pVOCVLlHrpQjJuPMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.102.0/24
146.120.225.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e8:1b:0e:5b:e7:8c:46:35:fe:7c:04:04:70:a7:07:4e:d5:
8c:47:23:ce:3a:0c:f9:9f:d9:4e:5f:c1:47:76:aa:f7:39:02:
94:eb:d7:32:d3:e3:dc:c0:03:51:58:c3:47:94:4a:b3:52:ba:
13:ce:c2:28:ce:5c:19:80:42:dd:6d:39:9d:7b:56:07:1f:b8:
4d:e9:f1:e2:4e:96:7f:2b:ee:71:7b:3f:f7:37:30:db:04:6f:
c0:5e:d1:54:68:df:b8:7f:e0:73:1f:56:64:c7:db:6d:0c:4c:
a1:d6:0a:3e:3c:84:e3:67:8b:e2:88:2e:6c:a9:a9:54:35:48:
8e:fe:49:a4:3f:c8:bb:b9:d0:33:d1:3e:21:af:e0:24:76:ed:
2e:0e:f8:9d:f3:c3:8b:2b:50:ae:5e:17:70:93:21:33:be:c9:
2b:af:9e:99:7c:72:3f:c0:96:11:a1:17:86:13:99:b8:ca:dd:
b2:83:e2:f7:4d:89:bb:d6:97:36:bc:8e:44:40:ef:c8:a1:61:
e2:d5:4d:6d:05:2c:ce:34:69:82:b9:0b:e3:bc:8a:e9:9f:75:
44:21:5f:10:b8:65:18:de:21:fe:88:c3:de:d4:59:ce:b3:17:
8d:4b:0e:48:2f:61:25:45:57:68:4f:af:e8:83:bc:9c:f9:cc:
1a:e5:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:39 2025 by rpki-client