Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gPj1dWTpmpuj9vuuzjKseSqM-Iw.roa
File: gPj1dWTpmpuj9vuuzjKseSqM-Iw.roa (raw, json)
Hash identifier: TU+iw7g3oFip8d9//Af42vhObcPRz+lWzs9riZ0PJOs=
Subject key identifier: 80:F8:F5:75:64:E9:9A:9B:A3:F6:FB:AE:CE:32:AC:79:2A:8C:F8:8C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 279C46B2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gPj1dWTpmpuj9vuuzjKseSqM-Iw.roa
Signing time: Sat 01 Jan 2022 16:08:26 +0000
ROA not before: Sat 01 Jan 2022 16:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47552
IP address blocks: 95.47.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664553138 (0x279c46b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80f8f57564e99a9ba3f6fbaece32ac792a8cf88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:97:2f:ea:f0:8f:96:b9:1a:c9:af:43:6b:
0d:c2:2c:42:f6:c3:03:58:a0:ce:68:fa:39:50:ec:
0b:42:89:c4:28:bb:1b:e5:01:26:5e:07:f2:77:64:
2b:90:a2:c8:1a:dc:f6:08:25:9c:6a:fa:91:6a:69:
22:10:93:f9:3a:8a:1b:56:3b:22:d7:c7:07:e8:71:
13:15:f4:ee:59:2a:6a:bd:72:c5:c4:41:aa:50:d4:
50:e7:87:ee:ac:af:03:c9:6b:c8:7c:68:87:63:82:
14:b5:2d:9c:ca:b4:6c:72:11:40:42:26:d9:e0:b1:
f3:bf:1b:1a:65:4f:30:89:07:ba:9d:a4:87:86:2a:
4e:90:c9:78:d8:36:40:2f:1f:26:e7:bb:24:64:48:
95:fa:2d:45:73:c7:c8:8c:57:45:28:cf:e4:54:07:
c2:a2:ed:19:8c:36:dd:66:01:6d:4b:22:8b:eb:48:
74:90:84:29:54:13:ab:81:8c:54:56:e5:79:63:c6:
f7:ce:91:f5:e7:36:ab:d0:88:b2:13:c8:1a:31:b7:
09:66:90:ca:e4:a5:12:14:10:33:97:82:ba:a6:31:
8e:0f:b8:7f:61:f4:a8:b9:f5:be:3d:69:ad:20:74:
74:fd:5c:7c:80:78:4b:0c:5e:cf:8d:78:f9:db:dd:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:F5:75:64:E9:9A:9B:A3:F6:FB:AE:CE:32:AC:79:2A:8C:F8:8C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gPj1dWTpmpuj9vuuzjKseSqM-Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c1:29:7e:12:ee:80:9f:53:2f:b4:19:ef:b1:76:49:f8:8d:
ed:ed:08:f2:d5:e2:51:36:74:08:b5:40:5f:c7:ea:fa:d8:74:
f8:e0:76:87:15:25:ac:ac:ef:5d:71:b6:3c:f6:d5:bf:23:d9:
bd:3c:64:82:03:3d:38:45:d9:b0:03:43:4e:6e:23:25:3e:57:
c0:67:94:44:1f:af:9b:50:f4:9c:b1:8c:32:cc:e0:19:1b:8e:
9c:47:99:a7:58:85:36:2e:02:47:ea:70:6b:8b:af:82:95:54:
41:e8:f5:64:87:fd:41:db:99:38:2b:52:2d:5f:dc:18:6c:90:
28:9d:b2:06:aa:b1:25:5d:69:31:06:10:1f:f7:f0:7b:f0:3d:
81:e6:31:9f:69:cf:1e:ff:6c:58:c0:20:78:f4:ab:1d:bd:86:
36:d8:7a:8c:09:bd:2e:4c:53:76:e2:dd:16:db:75:8d:ac:be:
f9:8c:6e:04:18:9b:20:fd:70:12:20:cc:f0:0c:7e:1a:d1:71:
94:da:43:3e:6c:e7:0f:2e:7c:e2:6b:52:b1:98:6d:86:d2:45:
73:a8:2e:a4:b4:82:6e:9d:86:d6:c0:d8:cf:80:3b:34:b6:78:
c9:71:ca:85:7c:8f:34:c0:a1:94:9b:2c:73:b1:80:97:73:02:
8b:d9:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:19 2025 by rpki-client