Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/r2HBnQCScf2nJn4uLkYWWhl6f7c.roa
File: r2HBnQCScf2nJn4uLkYWWhl6f7c.roa (raw, json)
Hash identifier: QseRo+0ZpNFawSYlU6UpKacvf7IdknyLNSBfunddSq0=
Subject key identifier: AF:61:C1:9D:00:92:71:FD:A7:26:7E:2E:2E:46:16:5A:19:7A:7F:B7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186C137BE9F06502969DA2A2D2CF3D1B682
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/r2HBnQCScf2nJn4uLkYWWhl6f7c.roa
Signing time: Wed 08 Mar 2023 12:35:01 +0000
ROA not before: Wed 08 Mar 2023 12:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56465
IP address blocks: 95.47.117.0/24 maxlen: 24
95.47.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:37:be:9f:06:50:29:69:da:2a:2d:2c:f3:d1:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 8 12:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af61c19d009271fda7267e2e2e46165a197a7fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:68:61:ee:c7:23:90:23:5c:f1:fc:1f:c5:bd:
8e:6b:52:2a:73:e3:f4:a8:4e:48:39:64:e8:12:bd:
8b:76:72:d5:dd:2e:4a:35:1e:4a:75:02:3b:0f:11:
b2:bd:87:62:48:02:8d:cb:61:bf:37:dd:2f:06:e1:
c4:b3:00:82:10:f8:3f:18:01:3e:d7:19:fb:27:b4:
91:f3:67:57:62:db:46:ba:75:54:01:47:ff:c6:fd:
7a:c8:90:9b:3d:4c:84:1e:65:e7:e2:d1:80:bf:9d:
77:75:bb:5e:aa:cd:e6:98:21:6c:c4:35:57:0b:f3:
08:39:40:9c:c1:3a:26:27:96:0e:e1:18:a6:dd:b8:
1b:92:74:a7:ad:31:89:56:67:76:0d:28:ea:2a:3b:
5a:82:48:69:07:bf:0c:ad:f0:5f:f2:f1:ea:c8:66:
2b:98:8c:a7:8c:12:55:b8:a9:05:d5:c8:c9:ee:36:
d3:bc:2a:be:b8:6c:5d:2f:55:d2:f5:28:08:65:39:
88:bd:b3:a5:bc:95:e5:0a:c8:da:9f:89:7f:99:3b:
3f:79:51:00:b8:6f:ff:83:68:b8:e2:7d:cb:5d:fc:
be:37:11:1b:36:54:5f:a0:ba:ce:54:0c:f3:cc:38:
30:fc:58:5b:87:98:6f:48:2c:9d:31:05:62:6e:26:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:C1:9D:00:92:71:FD:A7:26:7E:2E:2E:46:16:5A:19:7A:7F:B7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/r2HBnQCScf2nJn4uLkYWWhl6f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.116.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e2:21:79:16:af:b6:a5:b1:e8:9d:a9:02:71:28:f6:d0:f6:
40:6a:89:15:cb:4f:7f:e6:5c:f0:e6:09:3b:7d:c8:eb:03:01:
09:c0:d5:f3:35:db:86:4f:dd:ac:ab:43:30:21:2e:23:4c:8a:
f4:b3:4e:e1:84:54:05:44:98:8d:eb:d9:e5:cc:29:e8:e5:6c:
73:e9:56:43:35:87:32:a5:6b:3d:a1:55:43:b2:ac:39:11:77:
5c:b7:a9:49:5a:e4:cc:aa:03:a5:08:5d:2c:d1:76:d0:ee:80:
a1:67:bd:eb:db:f3:a7:10:16:c0:6a:02:50:31:19:79:c8:59:
fe:32:6b:4e:28:10:45:50:f0:3b:49:15:f6:87:12:00:6f:c1:
ef:b6:29:0f:be:34:fe:56:79:d5:a5:aa:d2:74:d3:3c:1d:7a:
7b:47:58:1d:d4:34:ad:ab:62:99:78:f6:69:41:ec:98:92:f3:
bc:af:d2:00:44:d0:1f:80:18:a4:8f:36:91:fe:69:c8:2e:1a:
71:64:64:12:c8:c5:c4:f3:bd:43:71:a0:5c:2d:47:e9:0d:cd:
1f:d5:f4:53:81:da:2d:23:fa:36:e3:af:71:c9:b6:af:19:2f:
fd:18:ff:cd:56:c3:27:e3:80:49:98:c7:03:de:38:6b:f9:24:
3b:e0:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:28 2025 by rpki-client