Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fq3BjWEFe3KPKlQbBrbCRsrxFgQ.roa
File: fq3BjWEFe3KPKlQbBrbCRsrxFgQ.roa (raw, json)
Hash identifier: J4D0SSytbXV/dX2iVBOvX+MlDGMyIxfDMWKyx0LK5N8=
Subject key identifier: 7E:AD:C1:8D:61:05:7B:72:8F:2A:54:1B:06:B6:C2:46:CA:F1:16:04
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F31973
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fq3BjWEFe3KPKlQbBrbCRsrxFgQ.roa
Signing time: Sat 01 Jan 2022 16:09:13 +0000
ROA not before: Sat 01 Jan 2022 16:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60612
IP address blocks: 95.46.164.0/23 maxlen: 24
93.170.7.0/24 maxlen: 24
95.47.175.0/24 maxlen: 24
95.46.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670243187 (0x27f31973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eadc18d61057b728f2a541b06b6c246caf11604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:77:97:d2:9d:39:0e:10:56:51:b3:5d:3c:
38:9e:3d:49:3b:17:43:53:c5:15:34:0e:a9:11:8e:
b4:04:8d:53:51:92:25:7f:9f:bb:63:7a:37:de:8a:
c7:4b:bc:eb:7b:f4:f4:e5:d5:8c:10:21:8a:f0:95:
80:dc:cc:36:dd:24:4b:25:7d:48:5d:5a:93:3f:35:
b2:47:3f:d8:6a:17:77:d8:82:3c:b0:b5:ae:e2:d3:
94:c7:d8:6d:c7:61:22:e2:09:4b:ea:04:c2:fe:be:
fb:6c:0d:a7:7b:42:64:a5:2e:02:a5:05:4b:7b:a7:
14:f7:31:b3:92:3a:56:2c:41:64:a3:fc:12:81:5e:
94:58:26:1d:36:8f:73:46:b3:71:2f:dc:0c:65:dc:
af:db:9d:06:6d:7b:dc:44:2f:fd:99:52:55:d0:99:
40:38:c2:da:27:e6:5a:5e:d4:77:42:86:c1:14:99:
62:a7:49:e5:66:df:a7:04:5d:7d:18:6f:38:a7:92:
a6:e1:f0:87:2f:65:0a:ff:38:c0:77:c3:c3:3c:19:
a2:91:de:89:16:0e:7f:dc:a5:10:cd:7d:da:ce:d4:
f1:e4:45:d5:1b:4d:51:e8:94:61:56:c1:76:fe:a9:
d5:6e:81:70:ef:a2:e6:61:24:5b:af:01:71:89:b1:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AD:C1:8D:61:05:7B:72:8F:2A:54:1B:06:B6:C2:46:CA:F1:16:04
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fq3BjWEFe3KPKlQbBrbCRsrxFgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.7.0/24
95.46.125.0/24
95.46.164.0/23
95.47.175.0/24
Signature Algorithm: sha256WithRSAEncryption
58:99:31:56:0c:09:5e:f0:df:7a:fa:c7:f6:53:b5:da:c6:8f:
ab:89:64:05:02:35:36:eb:62:23:f9:ee:85:c4:45:d0:0c:89:
82:9d:86:9c:24:05:a4:04:03:fa:a2:f0:dc:22:c4:d0:73:12:
c1:be:c2:1c:9d:7e:8b:f3:79:04:37:91:2f:43:ad:c9:6d:1d:
d8:92:0d:4a:eb:18:1b:69:de:ba:74:b3:86:9d:9b:e2:d6:6e:
a4:db:ae:d1:52:c3:91:d5:b2:71:d9:09:4a:85:71:bf:27:a2:
bd:af:98:72:b9:0c:62:b7:f2:14:34:e7:9b:29:d2:2f:6f:a0:
a7:99:d4:f7:05:c7:a9:9b:fb:a6:71:33:b5:97:45:d8:6d:d9:
a7:ee:7e:1f:ba:2b:ef:9a:e0:86:5b:c5:c7:0b:c0:8a:6d:07:
f5:d4:ce:d5:d3:56:09:38:f1:7b:20:60:a5:e5:72:a9:60:06:
f0:e0:76:71:5f:10:3d:9b:24:a5:0a:bd:62:4b:6f:12:02:75:
60:1d:66:5a:29:95:f3:93:db:03:a2:5f:9b:d6:14:31:70:7d:
30:c8:fd:2e:82:05:3f:7e:50:f2:1e:5e:84:ed:69:cc:85:10:
2f:13:00:0b:e7:20:6d:e7:49:a6:ae:8c:f3:aa:5d:45:be:60:
70:73:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:51 2025 by rpki-client