Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/luuY-3dhaewWa_FN8jZHYhfPvQg.roa
File: luuY-3dhaewWa_FN8jZHYhfPvQg.roa (raw, json)
Hash identifier: LKXjgSWFRn6MNu68r1nZzX1zUvmVh0fWG1lmBhzl27s=
Subject key identifier: 96:EB:98:FB:77:61:69:EC:16:6B:F1:4D:F2:36:47:62:17:CF:BD:08
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 282512D6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/luuY-3dhaewWa_FN8jZHYhfPvQg.roa
Signing time: Sat 01 Jan 2022 16:09:42 +0000
ROA not before: Sat 01 Jan 2022 16:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201593
IP address blocks: 95.46.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673518294 (0x282512d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96eb98fb776169ec166bf14df236476217cfbd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:06:15:c2:d2:40:b3:f6:75:97:84:74:68:
55:55:8a:79:f4:50:7b:88:b5:7b:c8:2d:f1:86:4e:
f0:26:82:50:c9:ca:5a:81:cd:3e:3f:0d:1c:d1:72:
bb:84:1c:29:c3:50:16:a9:c3:e4:43:80:66:45:af:
18:94:9c:b2:36:38:ae:0e:fb:de:8f:51:b0:53:8e:
11:1f:49:1f:d9:12:53:2d:33:36:30:f5:ce:a2:12:
ff:b7:f1:4c:24:ab:59:d1:cf:69:05:6b:cc:03:3e:
b0:f3:24:c1:54:a6:f0:01:31:af:e5:4e:d0:8c:a6:
00:e0:d0:be:1f:49:d5:d1:9a:1d:5a:96:b2:d9:13:
5a:da:70:ea:55:c5:3a:58:e8:8d:aa:78:f7:db:b8:
91:23:8f:f7:7c:81:5a:ac:bc:31:05:97:67:f4:d7:
3d:96:29:0a:24:7d:73:2c:ba:e2:11:28:4b:bd:40:
90:a4:89:03:32:c7:fd:38:7b:df:60:d1:b0:76:92:
06:25:68:58:ea:9b:cc:c2:4e:89:9f:c7:1a:a9:3b:
cb:9f:bd:71:77:db:e3:1c:45:24:de:07:62:5e:fc:
97:ea:4e:80:9b:90:4a:d2:eb:a6:e2:40:2d:3d:48:
a5:9a:e2:4d:9e:4e:b7:4e:1a:a3:d3:d7:79:d8:d8:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:98:FB:77:61:69:EC:16:6B:F1:4D:F2:36:47:62:17:CF:BD:08
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/luuY-3dhaewWa_FN8jZHYhfPvQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.197.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c1:eb:7d:e1:73:d4:8c:a1:a0:57:47:f5:eb:9b:1d:d7:96:
da:69:ec:e7:30:fe:a0:13:10:39:5b:31:99:49:ac:dd:1a:0a:
79:5d:f2:dd:bb:e8:96:59:9b:a6:b3:ca:fe:6c:99:29:2c:01:
e1:57:f6:5a:69:c7:b5:3e:47:d4:a8:71:2e:4b:34:84:94:0d:
c4:6a:e0:b6:06:d2:64:e4:73:96:a8:a9:96:94:bb:28:1a:e2:
aa:69:63:96:43:1a:11:91:65:77:71:6a:ae:0c:31:61:af:37:
9d:da:b5:38:bf:73:66:91:c2:44:94:04:9a:73:0c:ee:d7:bc:
19:83:8c:a3:c8:12:1b:40:c4:c2:3c:38:bf:7f:25:0f:09:35:
a5:c0:81:25:e3:ce:2b:5f:25:0d:ce:18:ed:d6:84:01:fc:52:
c5:5e:de:ce:4f:c2:64:17:9e:6a:8d:c4:ac:71:1f:7f:01:31:
bd:57:59:1d:e9:53:11:7e:3f:85:81:2c:59:df:5e:91:30:5a:
e9:44:76:e7:8f:5b:d8:15:98:6d:fc:2b:85:d6:37:a3:90:27:
aa:72:c9:99:47:98:3c:6c:af:70:fe:b2:91:c4:3a:d3:61:75:
e1:61:68:e4:cd:88:a1:f5:79:d6:41:b6:af:10:8a:8a:2d:ff:
bb:ff:84:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:18 2025 by rpki-client