Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h0b5U2foWpKpMTz_Y2Ke506JPz8.roa
File: h0b5U2foWpKpMTz_Y2Ke506JPz8.roa (raw, json)
Hash identifier: j55WYOaKvxmIY3u3rKYyUZHLUvsTMi3UtrCpULAj48I=
Subject key identifier: 87:46:F9:53:67:E8:5A:92:A9:31:3C:FF:63:62:9E:E7:4E:89:3F:3F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01954CC789F106B4F6C58FF9ABFE26ED5F5C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h0b5U2foWpKpMTz_Y2Ke506JPz8.roa
Signing time: Fri 28 Feb 2025 13:38:20 +0000
ROA not before: Fri 28 Feb 2025 13:38:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212366
IP address blocks: 95.47.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:c7:89:f1:06:b4:f6:c5:8f:f9:ab:fe:26:ed:5f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 28 13:38:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8746f95367e85a92a9313cff63629ee74e893f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:09:40:94:10:bb:65:be:50:00:0f:36:84:
58:1d:44:92:e7:3e:c1:40:fc:8a:5d:ac:51:c1:11:
60:52:40:85:3a:48:f7:c5:de:54:2d:73:d5:58:8c:
7e:88:2d:98:56:99:72:53:6d:41:ca:0d:62:5b:8e:
a4:80:f4:84:8b:b4:66:f9:ca:13:f6:15:08:e6:9a:
54:5a:b7:2c:1c:b2:81:77:f8:4f:82:f0:6d:a2:c2:
cf:0b:89:9f:ad:d6:0f:5f:13:63:ac:37:d7:93:10:
3e:be:97:1a:64:bb:42:a1:d6:1c:7f:47:0a:f3:2a:
c5:0a:02:eb:fc:42:20:d1:b9:c6:05:a2:33:6b:96:
ce:f3:6e:78:d0:d2:ad:55:0f:65:3b:cb:cb:f6:3b:
94:67:24:5d:f2:65:47:03:57:41:70:f7:91:47:62:
af:5a:ca:dc:0d:12:20:f7:18:b3:e0:b5:09:80:6e:
1a:bc:5e:6c:62:1a:7d:0b:d5:42:04:48:bb:89:fd:
17:eb:95:a5:d5:07:f0:be:97:23:c4:70:ee:fb:11:
50:12:31:dd:6a:54:fc:4f:e8:9a:7e:40:e3:2a:82:
45:9c:d9:cb:35:0c:ae:cf:d3:c9:5f:b4:c2:d6:dc:
c8:6a:e5:d9:21:e4:cd:3b:0c:7c:4c:9c:65:e3:e7:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:F9:53:67:E8:5A:92:A9:31:3C:FF:63:62:9E:E7:4E:89:3F:3F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h0b5U2foWpKpMTz_Y2Ke506JPz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.190.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4b:7e:62:42:31:4d:4a:0b:7f:0f:3b:c9:b3:2d:90:2c:7d:
e7:6a:2b:e6:00:eb:65:c0:66:56:3a:e7:b8:56:19:65:14:ee:
24:84:2b:0b:47:ca:ef:a7:ed:b0:52:47:76:f0:38:bd:77:50:
3d:1e:a1:1f:74:fa:51:47:3f:13:ef:07:6d:a0:e4:2b:74:15:
44:79:b7:b0:3f:bd:4f:4d:1f:10:0c:8c:eb:8d:43:c8:a3:d2:
ed:b2:9d:a9:d8:34:45:c3:50:4e:18:88:d7:5d:a8:d0:3a:61:
18:d1:62:7f:8a:18:89:6d:13:24:89:53:3a:43:62:f4:7d:a5:
e6:a2:cf:31:1d:7d:f9:e4:f9:f7:4c:8a:2f:0c:fc:40:27:83:
ae:b3:71:df:e4:47:b1:4b:ac:dd:d4:8d:a8:33:3a:05:fa:de:
6a:67:47:7d:23:4c:87:3e:07:e7:84:0d:33:72:1c:30:ca:53:
7b:db:15:78:99:b6:09:d9:1d:be:bf:6a:38:fb:55:5f:03:b1:
1e:e0:40:6b:a6:63:6b:be:d3:7d:6e:a5:3e:5e:74:e4:5f:0f:
30:a6:96:83:da:4d:4a:6e:3e:7d:5f:9c:b3:17:40:8b:94:4c:
65:cd:7f:00:d7:10:b9:ae:50:84:5c:7f:d3:4b:ce:57:67:e7:
98:8b:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:38 2025 by rpki-client