Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/n54CJwmA796KdRIUU6H6jD0zmuQ.roa
File: n54CJwmA796KdRIUU6H6jD0zmuQ.roa (raw, json)
Hash identifier: 7FJJtHL/KGansXVbjDI5ZtA2NAPsjo2dNRhjqlgn8mQ=
Subject key identifier: 9F:9E:02:27:09:80:EF:DE:8A:75:12:14:53:A1:FA:8C:3D:33:9A:E4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0183C6ABE3F01831437870C1B7EFFC715651
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/n54CJwmA796KdRIUU6H6jD0zmuQ.roa
Signing time: Tue 11 Oct 2022 10:51:37 +0000
ROA not before: Tue 11 Oct 2022 10:51:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34990
IP address blocks: 95.46.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:ab:e3:f0:18:31:43:78:70:c1:b7:ef:fc:71:56:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 11 10:51:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f9e02270980efde8a75121453a1fa8c3d339ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:d6:b9:34:9d:ef:d9:7f:eb:4e:d8:95:ae:
4b:98:d0:b8:90:b0:3b:76:9d:4d:76:08:fe:d4:cf:
dc:3e:6a:42:c1:fa:2c:ef:a3:11:a6:76:0b:a7:ae:
dc:cd:4f:b3:70:fa:86:40:2e:71:9f:b8:88:ed:6c:
e9:57:72:2a:1c:32:70:2c:ce:b7:47:c4:26:5d:9b:
e1:e3:c9:c5:99:4e:1f:35:b1:90:0e:32:c7:a4:e2:
a4:6a:6a:6a:7f:57:12:a0:97:b8:38:4a:89:a2:a9:
fa:ff:59:bb:e7:d0:75:32:3b:06:18:3f:43:c8:8d:
07:69:80:58:1b:48:82:60:93:21:25:97:ae:d8:e4:
2d:4d:41:ce:c6:02:c8:97:52:ea:61:c1:57:a1:76:
fc:da:ae:2f:d2:82:21:e5:89:b8:5f:27:71:67:6f:
20:12:e1:af:a5:57:f4:e6:82:fd:7b:da:f9:6d:5c:
e1:a7:ca:48:cf:a8:2a:9b:7c:21:6b:22:7f:12:1e:
4f:3e:a5:47:ca:46:99:b1:7e:22:06:6d:98:7b:dd:
6f:50:1d:af:c1:ec:48:d3:dc:bb:3f:85:69:6f:50:
d5:0d:6e:fc:62:97:eb:c5:0f:00:6b:c3:9e:f0:e6:
85:6f:45:0b:bf:31:ec:09:dd:16:90:6d:9d:d8:af:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9E:02:27:09:80:EF:DE:8A:75:12:14:53:A1:FA:8C:3D:33:9A:E4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/n54CJwmA796KdRIUU6H6jD0zmuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.146.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:8e:e4:23:67:fc:9c:4f:85:b2:6e:a5:92:9b:f0:66:af:79:
0a:64:b4:c1:f0:e3:24:98:93:e2:35:88:c6:58:aa:fe:6c:70:
9f:38:6d:44:a1:da:39:23:cc:2b:98:e1:0b:1b:18:4f:b6:d5:
6c:d9:e6:b9:92:f3:42:8f:9d:00:7b:bc:8d:f1:ac:aa:1e:ee:
7a:81:a8:23:9e:1e:d9:ad:02:72:7b:88:28:65:5e:75:e8:67:
f2:a8:ef:90:ec:1c:80:96:04:87:76:9a:dd:77:3b:50:67:77:
60:72:8d:34:3a:2c:b0:1b:80:e9:a5:f7:f4:d2:e4:47:85:a0:
31:05:ab:22:42:dc:d7:48:d9:ec:79:f7:94:bc:c3:cb:40:b5:
01:d5:16:b2:d4:74:30:ed:ed:b4:22:ad:e6:66:f0:bf:15:e4:
8d:a6:7c:3b:d7:9f:80:3b:1e:28:20:85:ac:7c:64:04:96:72:
31:01:14:47:db:a1:c4:cd:8e:b0:a9:d7:4f:e6:0d:e6:41:59:
2d:0e:a1:e7:b1:81:bb:5f:38:ed:7e:cd:30:04:5b:46:fb:a6:
0b:08:7d:55:ac:3b:50:ee:1c:55:ab:1a:c2:f1:e2:02:b3:8f:
ef:23:db:8e:ef:30:2e:45:be:f7:8f:29:3c:15:ff:d8:bb:b2:
ee:dd:54:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:21 2025 by rpki-client