Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fGRi_BxvfBEWzjd1HGJ9yQ1-5P8.roa
File: fGRi_BxvfBEWzjd1HGJ9yQ1-5P8.roa (raw, json)
Hash identifier: tBA0jp03z3ZmvVWBXX8kZPag+FTa0Jek2tOIVyebG0Y=
Subject key identifier: 7C:64:62:FC:1C:6F:7C:11:16:CE:37:75:1C:62:7D:C9:0D:7E:E4:FF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCFDF7AFF8B9F7F69A427C5413A1C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fGRi_BxvfBEWzjd1HGJ9yQ1-5P8.roa
Signing time: Thu 02 Jan 2025 05:49:29 +0000
ROA not before: Thu 02 Jan 2025 05:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60108
IP address blocks: 95.47.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cf:df:7a:ff:8b:9f:7f:69:a4:27:c5:41:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c6462fc1c6f7c1116ce37751c627dc90d7ee4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:ba:af:6d:0f:39:5f:d2:6e:dd:1f:1c:bd:
78:31:69:44:a5:6d:50:20:2c:af:cb:46:b9:3c:5e:
06:46:77:51:e0:e3:77:3c:49:30:d3:7e:db:b8:0e:
c2:5d:62:e5:d1:48:29:03:5f:e0:d5:fd:cb:d5:d8:
28:e7:60:22:00:2c:56:7c:36:96:ca:a2:3c:ac:eb:
a0:9b:c7:01:f7:04:09:d7:55:8f:b0:c0:b9:7b:5f:
7f:a4:ec:17:56:e1:01:e8:d1:19:76:c8:c4:78:d7:
d7:d1:38:a9:f3:0e:57:c4:49:92:4b:aa:e7:75:8b:
74:6d:de:2d:54:ed:bf:0a:17:68:10:dc:c3:4b:d2:
97:7f:4e:ed:8b:1d:d4:52:2c:6c:99:53:1b:2d:f7:
b7:6d:0e:0e:a3:4d:80:34:72:1e:6b:a4:ac:e1:21:
e8:27:2c:5e:ab:b6:a2:40:bd:3f:9e:b9:84:34:53:
aa:32:7b:d9:db:1a:d2:bd:4c:13:93:51:2e:98:fd:
8e:c3:df:b0:5b:eb:d6:c4:e1:2e:f4:3e:bd:8e:a8:
84:e0:6a:71:26:81:dd:35:f0:16:24:17:e8:44:d5:
51:15:43:3c:ab:3c:8a:14:7a:e2:f6:71:2c:20:bc:
22:f0:be:79:d4:8c:78:6b:1c:c9:67:4e:1d:49:b0:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:62:FC:1C:6F:7C:11:16:CE:37:75:1C:62:7D:C9:0D:7E:E4:FF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fGRi_BxvfBEWzjd1HGJ9yQ1-5P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.140.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3f:69:30:37:c2:61:d2:98:92:92:17:8b:a7:1f:2d:23:4a:
b4:07:78:19:33:54:7a:67:89:3c:25:60:84:ce:1e:7b:15:a4:
17:6f:4a:57:1f:10:7a:e2:73:7a:4b:1a:b4:a6:9e:fd:a4:3d:
6d:61:59:93:64:0e:85:a5:5d:6c:43:f3:51:e8:11:1a:90:e2:
99:ff:1b:45:ea:e7:51:26:9e:1f:7b:8c:f7:81:2f:e6:1d:c7:
96:5b:d0:33:1a:14:5f:a2:71:af:1d:dc:e5:55:53:e9:78:79:
87:67:c7:86:dc:59:56:35:f3:fc:7a:4e:16:54:39:10:53:5a:
d7:35:42:e7:9a:b3:f5:c0:46:cb:e1:4f:45:2b:d4:ba:8d:c0:
31:51:68:85:32:5f:0c:17:7d:76:0d:40:2d:06:e6:60:f8:67:
e7:c3:c3:db:28:bc:14:bf:e7:6f:73:57:e6:a6:ba:b1:85:46:
ea:d2:8c:2e:5e:e5:a4:24:c3:f9:61:2b:ed:41:75:0c:2a:9d:
4d:07:d5:3c:2e:05:d7:e5:9c:81:f1:9d:29:11:b9:d4:9b:80:
81:42:51:a9:a0:08:41:0a:fc:31:f0:e4:d6:47:68:db:08:2c:
25:37:14:2e:49:46:9c:c8:de:d5:46:95:ba:69:2f:b5:95:21:
c8:39:62:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj8/fev+Ln39ppCfFQTocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzY0NjJmYzFjNmY3YzExMTZjZTM3NzUxYzYyN2RjOTBkN2VlNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolu6r20POV/Sbt0fHL14MWlEpW1Q
ICyvy0a5PF4GRndR4ON3PEkw037buA7CXWLl0UgpA1/g1f3L1dgo52AiACxWfDaW
yqI8rOugm8cB9wQJ11WPsMC5e19/pOwXVuEB6NEZdsjEeNfX0Tip8w5XxEmSS6rn
dYt0bd4tVO2/ChdoENzDS9KXf07tix3UUixsmVMbLfe3bQ4Oo02ANHIea6Ss4SHo
Jyxeq7aiQL0/nrmENFOqMnvZ2xrSvUwTk1EumP2Ow9+wW+vWxOEu9D69jqiE4Gpx
JoHdNfAWJBfoRNVRFUM8qzyKFHri9nEsILwi8L551Ix4axzJZ04dSbAJcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxkYvwcb3wRFs43dRxifckNfuT/MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZkdSaV9CeHZmQkVXempkMUhHSjl5UTEtNVA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy+MMA0G
CSqGSIb3DQEBCwUAA4IBAQBTP2kwN8Jh0piSkheLpx8tI0q0B3gZM1R6Z4k8JWCE
zh57FaQXb0pXHxB64nN6Sxq0pp79pD1tYVmTZA6FpV1sQ/NR6BEakOKZ/xtF6udR
Jp4fe4z3gS/mHceWW9AzGhRfonGvHdzlVVPpeHmHZ8eG3FlWNfP8ek4WVDkQU1rX
NULnmrP1wEbL4U9FK9S6jcAxUWiFMl8MF312DUAtBuZg+Gfnw8PbKLwUv+dvc1fm
prqxhUbq0owuXuWkJMP5YSvtQXUMKp1NB9U8LgXX5ZyB8Z0pEbnUm4CBQlGpoAhB
Cvwx8OTWR2jbCCwlNxQuSUacyN7VRpW6aS+1lSHIOWKV
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:05 2025 by rpki-client