Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mlMhlljqq8ZBKHvPCoLKKkf3e24.roa
File: mlMhlljqq8ZBKHvPCoLKKkf3e24.roa (raw, json)
Hash identifier: HRh2wgzlrszCGNErzZnFZWE9p/c3fBh26FrOfXYS1WQ=
Subject key identifier: 9A:53:21:96:58:EA:AB:C6:41:28:7B:CF:0A:82:CA:2A:47:F7:7B:6E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259017789462282EE366F1ADA6C76D14
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mlMhlljqq8ZBKHvPCoLKKkf3e24.roa
Signing time: Thu 02 Jan 2025 05:49:47 +0000
ROA not before: Thu 02 Jan 2025 05:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215572
IP address blocks: 95.46.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:17:78:94:62:28:2e:e3:66:f1:ad:a6:c7:6d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a53219658eaabc641287bcf0a82ca2a47f77b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:45:aa:91:28:9b:cd:12:99:87:ed:e1:2c:
cb:28:c2:7c:a4:99:90:a2:f1:8b:9a:91:49:a7:45:
23:e5:0a:9f:ca:70:49:00:e3:47:85:80:26:2f:7d:
79:49:91:fb:1a:77:e1:7f:6a:31:23:8d:99:f6:ec:
4b:e3:00:bd:14:4b:f5:a8:05:76:98:65:c1:36:68:
d9:f2:74:ef:fd:d0:6f:62:32:da:9f:95:6a:39:55:
94:3a:92:ce:97:ce:85:40:83:63:15:d8:37:b7:04:
1b:3f:1d:e1:ea:f7:d3:75:39:7d:2e:d7:09:c7:e2:
f4:ae:87:c1:57:8f:5b:46:a6:5c:2f:c9:83:2c:1f:
4b:dd:7c:85:e1:e4:78:0b:de:ad:56:1e:a5:0d:1a:
22:02:90:34:9f:bd:ce:9a:fc:1b:4e:90:4b:1a:07:
ad:ba:92:cf:99:36:7e:02:82:e5:b9:66:52:24:18:
f4:2f:0a:a2:4f:e6:14:65:0a:de:98:74:05:af:b5:
b1:0b:27:a7:97:46:b5:64:d0:e0:76:fd:5c:94:ff:
9b:13:35:d9:1d:0c:23:27:0e:44:16:ef:4f:90:b0:
a3:19:a6:dd:dd:f0:3e:6f:48:10:0e:81:33:81:71:
39:c8:d4:f5:38:1c:2f:7a:f7:04:69:24:02:1c:06:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:21:96:58:EA:AB:C6:41:28:7B:CF:0A:82:CA:2A:47:F7:7B:6E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mlMhlljqq8ZBKHvPCoLKKkf3e24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:09:74:a1:8c:05:4e:22:df:b2:66:38:04:aa:77:0c:dd:29:
24:1c:b9:06:22:72:8f:b3:d1:0c:a4:01:66:ff:4d:15:62:65:
40:9a:5d:a4:54:00:65:e4:a5:cd:5b:55:76:5f:63:3f:6b:3f:
0e:6b:9d:dc:fa:38:d6:35:35:ab:87:4d:23:95:ed:e6:5f:7c:
62:71:51:ec:75:03:43:b0:a5:74:fd:21:bc:1b:19:36:31:32:
d3:ad:03:1e:64:f5:a3:7f:e3:de:13:94:96:57:12:fe:cb:ba:
47:55:d1:9e:61:4d:c4:14:ed:e8:c4:6f:1a:bb:c5:94:f8:1d:
5c:73:94:d9:b3:2c:81:5a:3c:cf:aa:43:13:98:f9:aa:79:00:
22:ab:67:a8:2f:8b:5a:04:f8:93:ce:28:bc:86:47:53:f7:6a:
28:b6:0f:77:db:22:ae:46:67:fd:98:e4:57:82:15:a8:45:4d:
76:ce:e3:95:9d:15:0e:1d:6a:81:5b:c2:74:52:fc:9e:a9:34:
ff:75:af:09:6f:24:80:be:0d:08:a6:4b:15:53:ab:ac:54:64:
b3:79:d4:e2:32:ef:87:62:7b:c8:2d:bb:52:3d:82:1f:22:a5:
35:0d:1d:21:40:70:d9:73:aa:2a:85:ef:26:6d:04:f7:54:22:
f9:e5:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:29 2025 by rpki-client