Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/guGhdZjOnwlkoB0I8a6cyCknK8I.roa
File: guGhdZjOnwlkoB0I8a6cyCknK8I.roa (raw, json)
Hash identifier: EQP9yl48w8znfeSUR1WKGLgCwTEPv1b1T4BzfzZzqHw=
Subject key identifier: 82:E1:A1:75:98:CE:9F:09:64:A0:1D:08:F1:AE:9C:C8:29:27:2B:C2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FEECCA3771622A677FBA53C05F3E9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/guGhdZjOnwlkoB0I8a6cyCknK8I.roa
Signing time: Thu 02 Jan 2025 05:49:37 +0000
ROA not before: Thu 02 Jan 2025 05:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204020
IP address blocks: 95.46.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ee:cc:a3:77:16:22:a6:77:fb:a5:3c:05:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e1a17598ce9f0964a01d08f1ae9cc829272bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:34:0e:04:31:b5:39:52:f0:17:ec:82:c0:
0e:39:a3:1e:e9:a4:27:ab:0e:2b:dc:4d:4d:c7:d2:
44:06:ab:c4:70:a7:77:87:48:39:11:8c:ac:4f:0f:
29:b3:9d:74:bf:39:f6:e6:89:c8:10:25:51:60:b9:
54:39:2f:67:9d:09:4a:6d:d0:fe:37:11:d7:b3:11:
f3:90:be:c2:c9:d2:17:1e:12:6a:a6:b0:fd:61:b1:
59:69:3c:a4:bb:50:d1:cb:ac:70:70:41:98:e0:33:
3d:2c:92:62:0d:fb:c1:37:87:c5:b6:aa:fe:72:f0:
a4:bd:f8:13:c1:a0:f8:87:fa:bf:d2:24:4d:c5:6c:
37:8b:bd:c4:8a:b2:fa:3f:bb:f3:46:e0:40:ff:b1:
f8:28:2c:83:29:da:1c:c0:63:bb:67:fe:19:63:b9:
7a:3d:a4:18:7e:e4:e2:ae:2f:83:b7:20:91:a5:66:
de:88:8c:af:22:3d:38:17:87:0d:2b:cd:30:2d:0b:
e0:1d:a3:cf:a5:97:0c:a5:c5:ba:48:50:b4:f9:88:
a3:8d:5d:0b:8a:a1:86:3f:f8:a1:29:b6:3a:57:bd:
e8:1e:04:f4:9a:77:6d:08:ae:16:c2:2b:74:47:1f:
17:21:a3:a0:25:34:06:6b:37:45:a4:34:4a:fe:2c:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:A1:75:98:CE:9F:09:64:A0:1D:08:F1:AE:9C:C8:29:27:2B:C2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/guGhdZjOnwlkoB0I8a6cyCknK8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.209.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3c:e3:db:84:31:cd:c5:19:cc:b4:bc:4e:0a:11:78:b4:c2:
b3:4f:7f:4e:01:fa:5a:57:ee:69:d4:be:0f:d5:9f:7e:e5:49:
63:ea:70:3f:48:1b:50:e1:97:a2:c1:92:ac:d8:5e:70:2e:07:
fb:42:b3:c2:c9:ec:f9:b5:91:ed:cc:ae:8a:8c:39:ec:3a:08:
be:47:2b:80:26:a2:8f:60:a0:4f:41:96:14:e8:8c:25:76:fe:
5f:3b:5c:05:e7:5f:0c:0d:88:94:33:aa:47:28:f4:fe:39:ba:
75:12:29:7a:18:51:b9:d5:42:b5:02:91:d7:60:5d:a8:7e:a3:
94:db:6a:00:b9:53:14:b7:00:2a:68:89:8c:9f:56:d7:9d:6c:
9b:d7:3f:30:78:41:b0:8a:7e:19:3f:a6:a0:89:4b:88:06:79:
2d:a9:29:06:a0:0d:90:63:38:68:d5:be:90:9d:95:db:59:93:
21:db:1d:ba:7d:bf:3a:62:e9:a2:b1:ba:b7:29:61:bc:03:db:
1a:58:58:d7:ad:d4:f2:30:46:f7:94:8c:50:4a:fb:5d:53:87:
4b:3a:70:9b:1f:25:0f:5e:51:81:6a:08:30:cc:0a:3e:76:0d:
a1:0a:7d:c8:08:bf:91:8a:4a:84:22:5c:44:0e:ef:8f:f5:95:
7f:18:5b:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj+7Mo3cWIqZ3+6U8BfPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmUxYTE3NTk4Y2U5ZjA5NjRhMDFkMDhmMWFlOWNjODI5MjcyYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rE0DgQxtTlS8BfsgsAOOaMe6aQn
qw4r3E1Nx9JEBqvEcKd3h0g5EYysTw8ps510vzn25onIECVRYLlUOS9nnQlKbdD+
NxHXsxHzkL7CydIXHhJqprD9YbFZaTyku1DRy6xwcEGY4DM9LJJiDfvBN4fFtqr+
cvCkvfgTwaD4h/q/0iRNxWw3i73EirL6P7vzRuBA/7H4KCyDKdocwGO7Z/4ZY7l6
PaQYfuTiri+DtyCRpWbeiIyvIj04F4cNK80wLQvgHaPPpZcMpcW6SFC0+YijjV0L
iqGGP/ihKbY6V73oHgT0mndtCK4Wwit0Rx8XIaOgJTQGazdFpDRK/ixp3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFILhoXWYzp8JZKAdCPGunMgpJyvCMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZ3VHaGRaak9ud2xrb0IwSThhNmN5Q2tuSzhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy7RMA0G
CSqGSIb3DQEBCwUAA4IBAQCtPOPbhDHNxRnMtLxOChF4tMKzT39OAfpaV+5p1L4P
1Z9+5Ulj6nA/SBtQ4ZeiwZKs2F5wLgf7QrPCyez5tZHtzK6KjDnsOgi+RyuAJqKP
YKBPQZYU6Iwldv5fO1wF518MDYiUM6pHKPT+Obp1Eil6GFG51UK1ApHXYF2ofqOU
22oAuVMUtwAqaImMn1bXnWyb1z8weEGwin4ZP6agiUuIBnktqSkGoA2QYzho1b6Q
nZXbWZMh2x26fb86Yumisbq3KWG8A9saWFjXrdTyMEb3lIxQSvtdU4dLOnCbHyUP
XlGBaggwzAo+dg2hCn3ICL+RikqEIlxEDu+P9ZV/GFsh
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:32 2025 by rpki-client