Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mM7fHOzTU-MztfyjjCmDaNa39SU.roa
File: mM7fHOzTU-MztfyjjCmDaNa39SU.roa (raw, json)
Hash identifier: gkWCsTNUKmHw2rYz2gLvGLgRye0xHUFf6D8c/NrNJ4g=
Subject key identifier: 98:CE:DF:1C:EC:D3:53:E3:33:B5:FC:A3:8C:29:83:68:D6:B7:F5:25
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956B5BBEB3927D03B07548923504E6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mM7fHOzTU-MztfyjjCmDaNa39SU.roa
Signing time: Mon 02 Jan 2023 03:45:18 +0000
ROA not before: Mon 02 Jan 2023 03:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60510
IP address blocks: 95.47.146.0/24 maxlen: 24
95.47.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6b:5b:be:b3:92:7d:03:b0:75:48:92:35:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98cedf1cecd353e333b5fca38c298368d6b7f525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:27:60:13:99:5b:18:60:ad:77:e8:08:a4:
85:52:5f:7a:1b:34:9a:3d:54:4a:65:e9:60:ac:e5:
ae:f1:8a:9c:6d:4d:7e:7f:0c:84:cf:9d:3d:bc:fc:
4f:99:d5:56:f1:ef:56:1a:95:d3:4e:2d:0f:14:2f:
5d:91:10:b2:a7:38:e3:e2:78:98:ca:a3:19:79:f5:
e5:4e:41:b1:e1:87:7a:a8:81:c6:ed:b3:3b:c9:45:
58:b4:30:42:d8:c8:51:bb:2c:d0:6a:8d:41:3a:5b:
08:74:77:73:77:e1:ec:5a:e3:21:96:43:de:79:69:
3d:1b:38:b3:ab:61:ca:a3:ff:7c:ae:31:49:25:76:
89:89:6d:95:6d:bb:49:a0:76:43:f7:8c:53:07:50:
c5:74:53:56:08:c3:12:1f:5f:0e:37:fa:fb:8f:e4:
ef:e0:2d:8e:2d:17:80:af:3a:82:02:ba:bc:bb:58:
01:71:de:d9:ad:0e:ce:1f:45:32:6f:6b:a2:54:f3:
06:44:b3:58:69:c0:d5:22:d6:6a:aa:3a:9e:1e:e7:
b3:09:98:37:47:9b:97:1d:32:d6:6d:81:36:de:eb:
de:66:c8:97:c4:5a:16:34:f4:c8:f8:a5:f4:ed:bf:
c4:3e:6d:da:ad:28:c5:da:f8:23:95:70:5a:58:c1:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:DF:1C:EC:D3:53:E3:33:B5:FC:A3:8C:29:83:68:D6:B7:F5:25
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mM7fHOzTU-MztfyjjCmDaNa39SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.146.0/24
95.47.155.0/24
Signature Algorithm: sha256WithRSAEncryption
00:4a:44:9a:37:fa:81:6d:3c:65:6e:a0:3d:10:cf:8e:76:78:
6e:a1:e1:ce:01:32:d0:18:fc:d5:62:2e:7f:34:6b:fd:a8:10:
23:23:2a:85:5e:0f:23:fd:5a:62:34:56:68:7e:99:20:63:32:
75:9c:42:84:74:56:a3:fb:77:66:c2:c8:7f:a3:68:02:a3:90:
77:5e:9b:db:f7:07:2b:31:ec:8f:ac:18:0c:ad:0d:05:59:c2:
0f:2a:0a:9d:c7:e1:ff:2a:5c:56:e6:54:7f:c2:47:93:0e:0a:
d4:24:ae:cf:f5:06:fd:7c:e1:46:d6:dc:16:31:99:8e:da:73:
24:31:25:55:96:fd:0a:f5:41:13:b1:4e:50:ca:38:27:90:31:
ef:82:26:67:e7:35:4e:f7:3c:87:3e:0d:f5:d5:8e:e3:81:8e:
95:49:bb:40:36:fb:d5:62:6b:01:c9:10:d5:23:1d:a4:de:21:
03:6a:bc:7f:27:9f:30:32:af:fa:67:f6:d5:30:7f:80:0c:98:
cf:cf:96:ed:73:89:38:24:e6:83:99:f2:a6:72:92:65:3a:bd:
43:2e:de:20:3d:f2:23:21:33:ec:52:4c:a7:d8:80:55:25:17:
1c:39:fc:b0:72:f2:1d:95:b3:8f:b4:ef:7b:f2:eb:30:be:1e:
91:b6:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:18 2025 by rpki-client