Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lhX7M22bJhrM3w4Whp25Z4HQb_4.roa
File: lhX7M22bJhrM3w4Whp25Z4HQb_4.roa (raw, json)
Hash identifier: NJngyUJai2fjIwY07IUpAs4F2GFkd1tEHcwXvYe++yo=
Subject key identifier: 96:15:FB:33:6D:9B:26:1A:CC:DF:0E:16:86:9D:B9:67:81:D0:6F:FE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27A77BD8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lhX7M22bJhrM3w4Whp25Z4HQb_4.roa
Signing time: Sat 01 Jan 2022 16:08:31 +0000
ROA not before: Sat 01 Jan 2022 16:08:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49168
IP address blocks: 95.47.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665287640 (0x27a77bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9615fb336d9b261accdf0e16869db96781d06ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:82:87:0b:73:38:cd:f8:25:45:a6:64:ee:
d0:30:a7:13:11:77:48:97:ee:73:5e:a6:59:a0:89:
73:ca:90:4f:ab:25:97:2f:88:bc:d6:25:16:78:7e:
d4:72:6a:0f:71:20:68:50:68:52:bc:f8:1b:b8:3c:
5c:8c:88:c3:dc:7d:18:c2:a3:f8:0d:75:ff:ef:4b:
86:43:c3:bd:01:57:d3:e4:e3:b7:76:d6:5e:55:3e:
28:94:af:24:fe:4b:b7:75:bc:c2:4b:73:07:d1:af:
66:0c:e9:de:52:d4:b8:76:e9:10:d0:3a:97:af:94:
5b:c2:53:cb:62:ff:cf:74:9f:02:0e:59:ab:47:e6:
66:fb:c0:ae:a3:74:67:36:7f:6e:aa:56:b6:f0:bb:
4f:da:bb:c7:6e:45:1c:31:5d:08:14:30:59:2d:61:
c1:61:ff:3d:55:21:3e:3c:f5:92:88:3a:aa:76:b4:
39:bc:b3:97:c5:24:90:ce:92:c1:e6:f1:6f:f7:a5:
d0:df:27:9a:0a:a0:0f:b4:e1:3f:93:1c:5f:e6:cd:
51:2e:f4:55:ed:91:f2:fb:00:c3:f8:13:e4:2f:57:
3d:2b:ee:a9:92:fe:72:db:2b:43:00:33:ea:e0:ae:
d4:07:16:0c:2c:1c:c1:22:74:b7:ee:21:d6:cd:f8:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:FB:33:6D:9B:26:1A:CC:DF:0E:16:86:9D:B9:67:81:D0:6F:FE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lhX7M22bJhrM3w4Whp25Z4HQb_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.253.0/24
Signature Algorithm: sha256WithRSAEncryption
31:7f:bc:b1:46:a8:4b:91:2e:df:cf:90:ea:9a:dd:b4:71:a2:
84:e2:97:aa:79:a4:45:6e:62:23:5e:fb:c0:4d:08:df:cd:dc:
b4:30:94:6d:e3:6d:0f:fc:5a:e4:35:c7:ae:82:cb:e7:09:c0:
f7:e7:68:7d:94:42:a6:5c:85:63:30:02:74:05:ba:f6:5d:5c:
05:db:e9:81:ce:2b:da:a1:8d:61:1a:a0:ae:39:82:bf:2c:e6:
11:7c:49:ec:85:c3:c9:8f:0a:29:4f:3d:78:f8:4c:f6:b5:5e:
a8:7d:a8:0b:df:90:4f:99:c2:26:a7:b2:55:05:8c:e5:5a:18:
50:6b:b5:5b:76:4d:e1:fd:0a:11:7e:f2:42:a1:d4:75:2b:93:
5b:8f:a7:18:16:05:da:c9:1c:ed:6d:34:f0:10:01:34:0b:30:
81:20:2e:26:b4:15:ff:a5:d6:45:3e:b5:c7:88:71:0b:7b:7d:
7b:4b:94:74:8d:49:73:f5:8a:12:ff:b8:35:42:c0:55:25:7c:
8d:6c:0d:f1:b8:e5:59:2e:a1:02:17:69:e0:92:d7:bc:81:9e:
35:df:d0:c2:88:68:11:c6:39:ca:8e:99:e7:19:6c:1e:94:f2:
a7:6f:60:8e:5d:53:23:9d:0f:14:50:e4:40:83:9b:c2:0d:cb:
76:c7:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:55 2025 by rpki-client