Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fCcUxqeq5x3N3ANUb2QSMLUYy2c.roa
File: fCcUxqeq5x3N3ANUb2QSMLUYy2c.roa (raw, json)
Hash identifier: 6V150OjpPeSqOjiuXlFJ3GJJy2b/8Sp8Tde1OfMpJbw=
Subject key identifier: 7C:27:14:C6:A7:AA:E7:1D:CD:DC:03:54:6F:64:12:30:B5:18:CB:67
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709559D4F093C8B09F45B9B5F5DB12F7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fCcUxqeq5x3N3ANUb2QSMLUYy2c.roa
Signing time: Mon 02 Jan 2023 03:45:14 +0000
ROA not before: Mon 02 Jan 2023 03:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56639
IP address blocks: 95.46.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:59:d4:f0:93:c8:b0:9f:45:b9:b5:f5:db:12:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2714c6a7aae71dcddc03546f641230b518cb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:e2:cf:49:27:37:57:2f:39:29:94:fa:30:
c1:4c:dc:91:9f:f0:f2:7a:dc:63:f1:ae:3c:f2:d1:
ae:42:2f:5d:5c:5f:70:3a:c1:da:c4:f9:39:63:d5:
aa:c0:fd:56:c4:b8:c8:95:44:d3:bb:e4:21:2d:0e:
b6:f0:fc:62:3f:83:df:1b:e0:86:a9:51:12:01:5f:
a2:36:74:51:b7:de:c6:0c:84:64:09:55:15:af:72:
54:1a:0b:a8:c2:da:20:53:48:b6:da:70:e4:39:3f:
65:05:f4:06:73:a3:49:a8:ed:de:9d:80:af:14:86:
b9:98:b2:b1:03:d2:dd:48:a2:01:5e:17:2d:51:39:
83:d8:56:c5:6b:04:f4:24:f7:20:3e:8f:a0:b6:72:
19:be:41:01:a5:3a:04:5f:67:44:e2:a2:e3:9a:dc:
8d:dc:6f:2c:61:d9:03:e3:b4:7d:52:d3:e0:34:9b:
cf:1c:38:4e:f7:b8:f7:f6:01:8f:25:c5:be:fc:2e:
5a:8c:ac:ae:58:03:7a:bb:bf:42:df:08:47:43:ab:
33:ab:6f:dd:b6:09:46:16:11:0b:6e:9f:db:13:5a:
62:d7:a2:84:d8:a2:e8:58:0b:6b:ef:e0:da:8d:6d:
72:08:f7:f3:7c:8d:fb:f4:fe:5c:4e:a9:48:ad:5a:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:27:14:C6:A7:AA:E7:1D:CD:DC:03:54:6F:64:12:30:B5:18:CB:67
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fCcUxqeq5x3N3ANUb2QSMLUYy2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d7:63:0e:b2:61:4e:e4:30:cf:f5:72:99:aa:ee:38:3d:47:
d3:e5:97:88:a0:03:a2:72:5e:00:4f:4e:73:34:1f:32:d1:76:
48:c8:8c:c8:f4:e1:5f:fc:76:64:ba:58:16:5a:c6:92:9d:25:
4b:d3:c0:20:59:1e:43:c1:01:5e:d9:8e:68:9d:15:2a:d4:68:
ee:bd:32:89:7f:c6:ca:87:7d:36:7f:56:9e:55:ee:1b:c8:63:
72:53:20:e5:4e:dd:98:e3:d4:37:b4:b1:07:55:43:90:cf:3b:
b6:e6:23:74:8b:c1:9e:b0:ab:ab:ba:33:5e:6a:0c:d5:70:ed:
d7:db:6a:5d:3a:1d:4f:c7:35:8d:b8:60:8b:cc:b1:76:f6:fc:
a7:ba:7a:b1:04:91:09:24:02:35:1a:b0:12:16:0d:9b:31:b8:
57:c0:0d:ff:92:f4:6c:85:79:f6:26:4e:96:11:31:67:09:0f:
2e:5f:ee:ca:5d:e0:1f:a2:fb:aa:56:60:12:34:94:1b:97:ce:
12:a3:c4:2c:1c:f4:30:ff:04:e0:d2:6e:64:9f:a5:68:c3:2b:
df:fd:8e:13:42:87:81:28:3b:83:dd:af:90:97:fd:c3:ae:31:
59:f5:a4:00:40:26:39:4b:0b:a9:63:b4:d2:57:ff:0e:3f:01:
90:6e:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:27 2025 by rpki-client