Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nGXk8ohvF2i5jEVpoVqZZC6-TNA.roa
File: nGXk8ohvF2i5jEVpoVqZZC6-TNA.roa (raw, json)
Hash identifier: MaP8ZEg5r/LPmg9VcsfUSdvHGBbilbpb+VsnFP8QVP8=
Subject key identifier: 9C:65:E4:F2:88:6F:17:68:B9:8C:45:69:A1:5A:99:64:2E:BE:4C:D0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0184CD4D8D1EC791A52576E0E975805FE6BB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nGXk8ohvF2i5jEVpoVqZZC6-TNA.roa
Signing time: Thu 01 Dec 2022 10:48:42 +0000
ROA not before: Thu 01 Dec 2022 10:48:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50516
IP address blocks: 95.47.242.0/24 maxlen: 24
31.148.96.0/24 maxlen: 24
146.158.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:4d:8d:1e:c7:91:a5:25:76:e0:e9:75:80:5f:e6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 1 10:48:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c65e4f2886f1768b98c4569a15a99642ebe4cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:8d:fc:77:2f:06:06:a4:0c:61:3e:b1:6e:
60:1a:73:d8:fc:f5:43:11:f1:aa:74:d3:43:e2:84:
a5:6b:bf:64:b7:82:0a:f9:4f:d5:fd:e6:2b:ba:84:
b7:46:6e:c7:b2:91:9a:a8:bb:16:37:94:c0:0b:2b:
c5:cc:92:87:9b:d1:54:c2:6b:93:e9:6d:c1:d6:5f:
bf:45:ef:ae:fd:00:fc:15:a3:5a:1d:e7:53:76:3a:
65:61:2d:91:27:12:42:c9:ef:7f:32:e5:bc:58:fa:
1a:e1:da:09:3b:6d:64:9c:7a:f4:6b:23:8c:57:b0:
41:c6:b6:e8:54:0b:3c:3c:06:0d:be:ce:d8:6c:5a:
60:b2:87:fc:9f:40:66:43:6e:ab:8c:8e:f8:8d:a9:
5a:d6:0f:16:23:89:49:0b:3b:bc:6b:44:a7:61:9b:
33:b2:ee:5b:de:2e:59:2c:87:c0:92:78:27:67:23:
26:f2:4a:44:10:8f:3f:42:77:a6:34:62:46:cd:11:
55:f3:f9:b9:eb:32:2d:d6:74:2b:2f:1e:fc:c6:0f:
76:7d:a3:8b:b5:2c:8f:4f:d9:90:7f:47:ce:3d:38:
21:60:ac:c8:1e:cc:8f:a8:75:e3:38:53:c5:86:82:
af:58:f0:1a:88:09:62:f4:c9:ee:e9:d6:68:29:a4:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:E4:F2:88:6F:17:68:B9:8C:45:69:A1:5A:99:64:2E:BE:4C:D0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nGXk8ohvF2i5jEVpoVqZZC6-TNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.96.0/24
95.47.242.0/24
146.158.12.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:60:da:ed:53:27:14:f9:ca:99:84:3f:c5:a0:29:aa:df:73:
51:fb:59:8b:15:a3:fe:a1:19:76:e1:95:a5:f3:39:fa:24:02:
92:f3:9e:64:cc:ac:bb:90:a9:2b:3c:c3:12:de:ba:52:e5:80:
59:6e:d5:01:9a:79:d8:65:0e:aa:1b:ac:83:26:fd:54:77:83:
3d:c6:75:43:e9:27:33:66:1d:b9:df:0f:85:bc:33:8f:5c:6c:
b9:67:e8:d5:8f:b0:ff:5b:4e:8a:46:fa:05:e0:0a:8e:ec:c8:
5b:f4:fd:0d:2c:45:9a:11:54:ee:39:f4:3b:d3:99:a4:f9:ba:
99:f9:79:2a:66:58:a5:14:12:fe:e2:24:2b:97:43:0c:c8:27:
e9:38:9b:31:a7:05:db:8c:56:fa:80:4a:0e:de:14:0b:5b:60:
b0:e4:30:a8:7e:be:e7:52:2f:c2:49:74:ba:67:c2:e9:26:12:
63:46:2a:01:c0:d3:7e:54:76:d1:1c:30:4f:7b:42:0f:85:ce:
f3:6b:4f:4d:96:3e:32:66:49:72:a1:6c:2d:cf:17:da:38:f5:
54:a9:85:51:4e:ba:dd:8c:f0:76:89:49:1a:d7:ec:19:16:c1:
75:85:22:4b:f1:48:3a:4b:52:cd:7f:8b:38:ca:75:5a:55:7f:
f3:19:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:37 2025 by rpki-client