Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gjruMwSW3YIXNo6MWG7NwdM54Ps.roa
File: gjruMwSW3YIXNo6MWG7NwdM54Ps.roa (raw, json)
Hash identifier: vzyTLn5jtoV3UxGHvi7Iy/aITVeUSt8PBqy1nuW7z4s=
Subject key identifier: 82:3A:EE:33:04:96:DD:82:17:36:8E:8C:58:6E:CD:C1:D3:39:E0:FB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 282FE99D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gjruMwSW3YIXNo6MWG7NwdM54Ps.roa
Signing time: Sat 01 Jan 2022 16:09:48 +0000
ROA not before: Sat 01 Jan 2022 16:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204532
IP address blocks: 95.47.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674228637 (0x282fe99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=823aee330496dd8217368e8c586ecdc1d339e0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:dc:4a:65:a0:64:f9:16:cd:80:2d:93:05:
c8:58:6d:7a:02:28:89:2b:2e:6d:90:9a:21:88:7f:
e7:da:5e:15:33:76:73:2a:14:66:e0:16:e7:49:cb:
3b:41:24:73:8c:04:03:e1:c8:27:4e:c1:de:c8:92:
7e:90:33:d3:5b:0b:82:ae:59:26:2d:8c:d5:19:7a:
4c:5a:a0:47:f4:ac:f0:8f:a2:74:dc:19:6f:1e:48:
d5:fe:13:e4:ef:06:9e:8d:39:e8:47:33:04:6e:4c:
23:55:3a:23:04:3e:ef:56:12:3e:3a:b4:bc:70:55:
8d:cd:63:a0:07:91:f3:ab:f9:ca:86:03:04:cd:f7:
f6:25:3e:24:5a:b7:fb:34:93:e5:5d:ee:f6:cb:2f:
77:5f:73:c1:0f:97:2c:00:57:13:fa:f9:0f:d6:1c:
50:6f:22:93:48:59:f7:e6:95:2c:36:f3:f1:40:86:
7c:06:3c:32:3e:90:ac:ac:85:2f:98:47:f4:e8:f3:
00:31:d3:74:37:5d:80:5a:f8:2b:66:e1:de:77:fb:
15:ab:f3:6a:b7:27:c6:d9:6e:6b:84:39:66:13:cd:
97:bb:1d:76:2b:7a:9a:25:bb:63:20:57:35:45:ad:
c6:de:b1:6a:c6:ff:c2:6e:70:fd:8b:8a:89:da:6b:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:EE:33:04:96:DD:82:17:36:8E:8C:58:6E:CD:C1:D3:39:E0:FB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gjruMwSW3YIXNo6MWG7NwdM54Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.168.0/23
Signature Algorithm: sha256WithRSAEncryption
91:52:54:ef:23:fd:01:f6:f1:04:c0:91:26:d4:46:c5:73:2a:
a8:f1:f6:cc:9b:bb:e3:71:54:25:ca:76:23:80:19:08:0e:1e:
8b:b0:62:18:52:35:c7:77:4f:9e:b9:7c:66:a9:32:f2:e3:40:
65:20:c8:54:37:b1:57:e0:78:68:ee:c5:fa:e4:89:98:19:8e:
55:74:a6:cf:50:c2:17:b4:ab:93:58:ea:f7:e8:f3:69:72:36:
18:9e:dc:e3:2e:68:98:a2:d9:24:7e:8e:f6:3a:f3:20:bb:2c:
17:28:c6:fd:3a:1b:1e:5b:b1:d9:da:36:b0:b5:ec:0b:2e:c2:
1e:25:c1:cb:57:7d:e9:8e:11:77:43:fd:4d:5f:e9:6c:ed:99:
63:68:01:ae:cb:a6:98:c5:78:84:bc:f5:b4:5e:20:6c:4e:da:
16:70:0e:ca:d2:bb:e8:51:5a:e3:ea:37:22:37:e1:c8:1d:19:
5c:56:52:f6:f4:bc:36:dc:72:50:53:ad:97:d0:07:b0:e2:a7:
42:53:1e:61:0d:90:29:fb:a4:d5:48:a0:7a:9b:f5:29:48:13:
c6:75:72:2e:e4:ef:c4:d8:cf:d5:ab:63:d4:57:8e:f6:28:92:
26:21:40:e0:b4:70:4c:f8:4d:35:0c:3a:87:40:a7:5c:dd:95:
e7:27:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:57 2025 by rpki-client