Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oxXv-ISzkM0zdytS_-7hbM-cc9A.roa
File: oxXv-ISzkM0zdytS_-7hbM-cc9A.roa (raw, json)
Hash identifier: CStLfkny/1mJsJdL3RfHA0GPWqLHdRcUBjPoVsOsBuE=
Subject key identifier: A3:15:EF:F8:84:B3:90:CD:33:77:2B:52:FF:EE:E1:6C:CF:9C:73:D0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FEDB45B97BDD75666A177A6BC35AC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oxXv-ISzkM0zdytS_-7hbM-cc9A.roa
Signing time: Thu 02 Jan 2025 05:49:36 +0000
ROA not before: Thu 02 Jan 2025 05:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202969
IP address blocks: 95.47.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ed:b4:5b:97:bd:d7:56:66:a1:77:a6:bc:35:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a315eff884b390cd33772b52ffeee16ccf9c73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:9b:0b:5b:cd:5c:36:20:c3:35:95:d7:44:
69:27:07:71:3c:07:11:34:7b:ec:b5:f2:36:ce:cc:
5e:31:a1:34:2b:47:f4:2d:c3:27:37:4e:74:1e:61:
d0:29:ea:bf:ff:f0:85:6b:bd:7a:d0:7f:24:24:55:
29:e9:b5:a2:96:5f:91:3e:93:b8:55:f3:df:7a:d4:
2e:0d:c8:c8:54:3b:b8:dc:3a:bb:5a:92:f1:c0:56:
f0:94:49:cb:7d:7c:bf:f5:9c:14:fa:cc:3f:11:9a:
08:43:4a:32:90:b6:18:f6:93:a6:c0:b1:d5:61:b1:
1a:94:73:ac:9c:04:ba:71:85:48:e1:31:f4:c9:81:
11:83:4a:4a:11:1d:e8:e6:d7:79:29:99:8a:88:6c:
c8:59:fa:7d:9f:28:cc:2d:c7:88:30:59:fe:d5:f0:
e3:9d:c1:ae:b9:32:a8:69:da:94:2d:77:c6:78:5c:
5f:cb:45:fe:68:fa:1d:ac:19:97:fc:af:67:80:01:
b8:fe:a2:16:bc:43:d8:a9:9f:ec:d0:21:25:7c:3f:
f5:b3:96:4b:4e:69:9f:62:19:85:2b:1c:88:47:74:
1b:fb:ce:d8:ff:5b:27:0b:10:03:2d:9f:d8:55:c0:
62:27:ba:50:55:fc:84:88:ee:cb:82:b4:68:44:5a:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:EF:F8:84:B3:90:CD:33:77:2B:52:FF:EE:E1:6C:CF:9C:73:D0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oxXv-ISzkM0zdytS_-7hbM-cc9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d3:8b:78:76:ee:fa:a0:7a:0a:55:13:95:13:ea:60:a6:38:
a8:44:5d:3c:0a:03:c3:6e:7f:0f:22:e7:49:fa:1a:d5:72:f1:
3e:e4:ae:8c:3f:d3:70:f6:38:20:37:dd:42:bb:58:f0:99:5f:
81:1d:73:09:a2:75:fa:69:c2:9d:5b:7b:89:8a:4b:97:81:a7:
f6:f5:9e:9b:aa:a8:4c:7e:72:19:42:9d:35:54:d3:3b:5d:ce:
9b:39:20:8d:aa:bf:31:6b:4a:9f:f0:ca:51:b7:f6:fa:c7:a7:
c9:ee:ca:56:d3:46:38:ef:6c:5e:66:2d:eb:0c:5a:7d:c6:49:
7e:e0:b0:60:47:16:b6:14:ee:50:51:55:9c:be:00:0d:a3:a6:
8b:5a:69:b8:ce:4d:a8:78:70:79:a0:72:e7:dc:cb:44:b1:97:
e2:57:06:12:fe:31:53:50:2f:ac:1a:df:b5:b2:8f:d5:9d:9e:
c2:55:35:99:c4:04:63:5a:ea:c8:48:6a:97:83:e8:8e:f0:4d:
cc:ef:f9:8b:27:dc:60:42:44:f9:43:a7:f1:16:bd:15:6e:7f:
79:c5:52:6c:c9:33:f1:81:e6:b2:7f:ac:3d:22:70:14:0a:e8:
a5:ae:53:d7:4e:6e:0d:21:5f:3d:a3:8f:10:88:e4:aa:d6:87:
71:be:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:35 2025 by rpki-client