Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/maaIxPbArBKiy44hwMBGUWVSvl0.roa
File: maaIxPbArBKiy44hwMBGUWVSvl0.roa (raw, json)
Hash identifier: tn9i6EaqZOQNNOX5tvE5JPZL8bD243nP4ctsQ+cqIb8=
Subject key identifier: 99:A6:88:C4:F6:C0:AC:12:A2:CB:8E:21:C0:C0:46:51:65:52:BE:5D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FFF92FC8B983044267CC6BB0CE190
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/maaIxPbArBKiy44hwMBGUWVSvl0.roa
Signing time: Thu 02 Jan 2025 05:49:41 +0000
ROA not before: Thu 02 Jan 2025 05:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208941
IP address blocks: 95.46.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ff:92:fc:8b:98:30:44:26:7c:c6:bb:0c:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99a688c4f6c0ac12a2cb8e21c0c046516552be5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:b2:2b:32:46:87:aa:7c:39:3e:5e:10:8f:
d0:d6:71:36:f6:31:a3:1c:fe:fe:2d:d6:4e:74:79:
78:e2:9b:8e:5b:1e:8b:49:6e:6f:2c:3b:e2:19:dc:
41:50:22:a3:10:79:07:a4:47:92:28:3a:08:02:96:
b2:43:b6:0a:8d:1a:96:db:c4:7a:d6:3f:2f:b6:75:
cb:94:25:c4:ca:5d:61:75:b6:89:02:b8:95:c5:7f:
b3:a7:19:ea:c8:c1:d2:a8:4b:58:5c:f1:13:73:69:
57:42:be:9a:1d:c4:8e:de:7b:5e:1e:c7:6e:87:a6:
55:9c:5d:aa:43:1b:d1:89:d6:0e:fb:64:3c:49:ec:
8f:af:a7:0c:41:83:9a:d4:ad:04:ef:26:3b:40:31:
34:4d:e3:c9:91:d9:23:94:8d:92:64:77:c2:42:8f:
d8:eb:bd:64:0c:c4:53:ed:37:26:cc:06:86:b9:b1:
d8:3c:1e:39:a1:e5:ad:9b:2d:f5:99:c9:c6:28:fa:
78:e5:f6:0c:97:9b:46:d2:a1:bb:45:d2:5b:85:97:
b8:48:b4:58:89:29:ba:2f:a7:e8:54:67:20:0b:d5:
c7:30:d5:4a:2a:75:cf:64:7d:46:ff:f6:fa:30:79:
4b:59:a5:4a:66:fa:7c:7f:fc:61:c8:eb:85:11:84:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:88:C4:F6:C0:AC:12:A2:CB:8E:21:C0:C0:46:51:65:52:BE:5D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/maaIxPbArBKiy44hwMBGUWVSvl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.73.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0f:52:2c:28:a0:68:dd:c3:f3:b0:03:d7:69:9e:12:bc:18:
ff:ad:98:d5:7f:ea:20:9c:41:21:66:36:50:3c:21:b4:d5:7e:
5f:6b:e9:a6:ef:f2:6b:41:e4:cd:8a:a6:b0:02:a8:ca:0f:79:
6a:0e:d6:c9:a5:c5:fa:ba:64:32:87:e3:13:b2:5a:ad:a5:0f:
2c:d1:a0:da:4b:1e:2f:04:0f:bd:7d:48:e0:c3:db:76:2c:d4:
2c:05:b4:cb:02:69:ac:8f:4c:5c:fc:f3:b8:26:7f:51:73:ad:
70:fb:f3:a3:0b:73:1b:86:73:a0:89:11:11:d4:57:d7:15:56:
5d:4c:18:25:ef:99:72:c3:7b:ff:82:f5:2f:43:42:49:98:64:
c2:35:37:7b:9d:6c:9b:4d:79:f3:e7:61:03:89:f6:ea:0a:96:
8b:56:50:e7:e9:a5:5f:d0:60:5a:bc:b1:76:c5:2b:dc:cc:49:
f1:35:bf:df:6b:85:9b:12:65:d5:4d:98:bb:0d:08:d4:de:a0:
68:23:eb:3a:d2:a3:ff:e1:da:1f:68:aa:21:0b:2e:6f:03:46:
32:c3:7b:19:85:6f:80:30:88:e4:be:70:64:53:ee:11:73:4c:
d3:82:9e:cf:ee:68:21:21:70:8c:94:c8:0d:c1:c7:fe:8c:e9:
f9:a5:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:43 2025 by rpki-client