Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gaSrNPDX7u_iG2pz0hmx1ocvPWE.roa
File: gaSrNPDX7u_iG2pz0hmx1ocvPWE.roa (raw, json)
Hash identifier: HEl4JLtc6BdZ8IS6D+FdRZq1HAsmyET3ImkRvryqjuM=
Subject key identifier: 81:A4:AB:34:F0:D7:EE:EF:E2:1B:6A:73:D2:19:B1:D6:87:2F:3D:61
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019469F4ED931BF69675AE22327FFF1BF24D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gaSrNPDX7u_iG2pz0hmx1ocvPWE.roa
Signing time: Wed 15 Jan 2025 12:34:06 +0000
ROA not before: Wed 15 Jan 2025 12:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215851
IP address blocks: 95.47.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:f4:ed:93:1b:f6:96:75:ae:22:32:7f:ff:1b:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 15 12:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81a4ab34f0d7eeefe21b6a73d219b1d6872f3d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:54:27:00:0c:66:1c:a2:04:ec:c3:41:32:
a7:02:0e:a2:2c:cf:32:a6:dc:89:5b:c0:ef:ed:b6:
da:14:25:f9:ab:b7:64:dd:23:94:05:64:a1:aa:2f:
95:43:38:cb:08:f7:1d:83:44:1c:6b:ed:be:77:96:
12:ac:40:6b:5a:98:1d:68:ce:25:e7:ff:3d:70:86:
83:86:3f:36:41:00:e8:32:e6:58:45:e1:88:46:88:
f9:eb:52:d3:38:76:b5:ad:d8:2c:dc:a8:fd:7d:cb:
da:41:0f:a2:5f:97:85:4d:d4:ca:12:d1:48:e1:7a:
21:cb:25:fa:60:dd:45:60:ea:8a:98:0e:4e:61:70:
74:d9:15:33:79:0e:bd:c4:47:19:30:c9:f9:20:1a:
ad:19:71:15:08:23:1d:ec:34:16:e5:30:a8:cf:4b:
56:dd:73:d9:99:2f:ad:5b:b1:3c:2c:0a:7e:6e:83:
b1:c3:f9:e2:5b:b2:c4:6e:ff:7d:43:d6:e4:e9:b4:
91:48:4a:71:c1:0c:c8:16:31:32:d2:eb:c5:f2:45:
f2:d0:a1:51:36:fb:89:32:4a:63:46:e0:53:f6:6f:
22:1f:ed:68:8e:eb:32:4f:78:96:b2:04:dc:4d:a3:
1e:8a:f1:69:f4:6f:65:b8:a8:bc:51:a4:f0:3e:08:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:AB:34:F0:D7:EE:EF:E2:1B:6A:73:D2:19:B1:D6:87:2F:3D:61
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gaSrNPDX7u_iG2pz0hmx1ocvPWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.63.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9b:af:38:dc:02:ac:07:df:26:bb:7f:86:b9:2d:3e:ec:eb:
b1:84:87:56:6a:f6:18:c2:20:ab:80:0c:da:eb:74:ee:17:21:
e0:b0:62:a2:9d:d5:43:c0:a0:ce:e5:5a:93:56:af:c9:54:f5:
e7:10:6a:29:58:06:26:8d:59:8a:42:b4:56:24:03:59:43:e3:
46:49:0f:78:02:2a:8f:4b:c0:f4:1c:a8:3e:43:71:51:33:ed:
21:72:4e:2e:e8:40:46:e9:e6:34:9e:63:79:30:94:21:fd:f3:
dc:7e:31:b3:ff:13:fc:be:68:76:25:46:12:70:8f:b4:b4:2e:
2e:a4:3a:a0:63:8e:67:25:da:c0:85:3c:cf:71:2b:8b:f4:9d:
5e:ab:dd:26:37:3a:cb:91:56:7d:11:05:fe:13:68:b3:a4:0d:
70:ec:8f:3f:88:06:75:98:71:31:34:d9:f8:7c:f3:51:0c:4a:
63:97:44:38:de:80:5a:24:5b:77:60:dd:bc:16:80:6a:1b:86:
3a:d9:b3:a1:ff:0c:55:2d:5c:d0:7e:35:d0:91:c2:98:72:31:
43:94:e2:6b:3a:d8:1d:5c:ac:9b:d6:72:18:91:cd:dc:0d:fa:
18:cc:3a:9a:02:c7:b5:52:67:7c:73:c8:fd:8e:f2:1c:f0:f5:
63:65:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:02 2025 by rpki-client