Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iM6xVMnkwMu-By8g-02_FyMOUno.roa
File: iM6xVMnkwMu-By8g-02_FyMOUno.roa (raw, json)
Hash identifier: bNBrCSfqpjM2ZRsiXY8NutCmqYanUtaS6KH2Lqp3N3s=
Subject key identifier: 88:CE:B1:54:C9:E4:C0:CB:BE:07:2F:20:FB:4D:BF:17:23:0E:52:7A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0195AE7974931F95BFB4DFCEB8075C7980A8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iM6xVMnkwMu-By8g-02_FyMOUno.roa
Signing time: Wed 19 Mar 2025 12:55:50 +0000
ROA not before: Wed 19 Mar 2025 12:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60757
IP address blocks: 95.47.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:79:74:93:1f:95:bf:b4:df:ce:b8:07:5c:79:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 19 12:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88ceb154c9e4c0cbbe072f20fb4dbf17230e527a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:e6:91:34:86:35:5c:72:c0:33:e3:51:58:
e7:39:d5:11:7d:69:5d:5b:24:c4:af:b5:48:09:a8:
b8:1c:eb:e5:dd:79:db:40:bd:d0:b8:60:a9:21:fa:
f4:59:c3:88:c7:dc:7d:6e:2c:0f:bb:91:c9:b4:80:
ed:45:1e:1a:dd:86:2f:20:b7:46:0c:d3:b3:a4:4e:
ff:14:c3:18:c3:f3:41:52:68:ee:07:c6:76:d0:a1:
78:f3:32:09:85:74:a1:5a:1d:f8:a3:0e:b4:31:6f:
88:d6:40:a5:33:85:93:8f:ce:49:11:35:b5:1f:44:
1a:42:69:ab:8d:f7:c7:b0:54:7f:b3:37:92:b2:d3:
77:3e:c0:f8:8c:e8:76:c4:cd:91:dd:fe:87:6e:2a:
4d:05:c7:35:41:57:15:74:02:b6:4b:6d:7e:ec:3f:
bc:b5:27:9a:51:bd:72:24:09:82:33:d9:91:6a:30:
39:34:48:1d:c2:96:60:41:21:a6:67:e6:58:6d:89:
72:24:91:5c:21:04:54:c0:57:e0:83:9b:4b:6d:64:
7b:05:1c:41:55:02:70:e6:d9:cc:19:32:b0:e1:36:
45:88:cd:38:b1:c1:dd:f0:74:7e:cc:db:d7:1e:85:
36:c0:28:7d:74:da:cb:38:a4:a5:1f:f3:a9:c7:b8:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:B1:54:C9:E4:C0:CB:BE:07:2F:20:FB:4D:BF:17:23:0E:52:7A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iM6xVMnkwMu-By8g-02_FyMOUno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.108.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:cf:8f:25:97:19:43:8c:31:96:1f:5e:1f:d7:ef:d8:ec:81:
f7:bb:52:1a:43:e5:c9:c7:1d:42:48:ae:fe:88:22:9f:f3:e8:
ce:3c:cf:04:bd:a3:ca:d1:0d:c7:5f:91:8e:ef:a3:7d:f6:f3:
db:69:e3:c2:95:2a:b2:0b:10:34:ac:35:ce:54:83:4a:eb:77:
e5:c1:30:5d:78:18:76:15:a0:d1:ac:57:31:ee:fa:06:3f:8f:
5e:ac:b5:a0:1c:99:ca:28:3a:51:cc:4d:2b:cb:62:2f:4b:75:
86:e1:b8:50:33:04:f1:07:d0:9e:4e:59:be:15:82:65:72:15:
21:83:70:ee:cd:5a:49:9c:93:8c:2a:93:39:5e:17:84:7a:8e:
eb:c0:2f:be:75:ca:77:a0:4a:c8:76:bb:db:ea:cb:56:fa:eb:
bf:18:21:2a:37:0f:2d:e0:60:c8:41:e2:fe:02:39:54:a8:63:
d3:b9:9c:8d:01:9a:01:bf:b3:d3:18:f0:a8:a0:c5:d8:63:f0:
d8:f5:64:25:64:85:37:11:5e:e1:a8:20:fa:b2:38:6b:cd:cd:
cb:7a:46:e0:fc:37:78:ba:a6:2e:4b:98:e9:43:0d:3a:e5:45:
ca:fa:fd:46:e1:a9:17:dc:02:b1:49:50:01:c9:d7:4c:44:b1:
1c:0c:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:12 2025 by rpki-client