Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rOqjpHL2Qo4rO2LLzpgO9biDzY8.roa
File: rOqjpHL2Qo4rO2LLzpgO9biDzY8.roa (raw, json)
Hash identifier: sJPhHowIsoFWYS275i/74/1joM3Tx0QO+fKXBYEKh3I=
Subject key identifier: AC:EA:A3:A4:72:F6:42:8E:2B:3B:62:CB:CE:98:0E:F5:B8:83:CD:8F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 278CB24F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rOqjpHL2Qo4rO2LLzpgO9biDzY8.roa
Signing time: Sat 01 Jan 2022 16:08:17 +0000
ROA not before: Sat 01 Jan 2022 16:08:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43724
IP address blocks: 95.47.238.0/23 maxlen: 24
93.170.176.0/23 maxlen: 24
92.38.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663532111 (0x278cb24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aceaa3a472f6428e2b3b62cbce980ef5b883cd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:83:93:10:c3:0f:70:d5:38:dd:13:5a:07:
55:d0:b3:f4:79:bb:30:7c:5a:86:47:55:5b:d5:1d:
48:67:c9:4a:26:f1:fe:3b:ba:ac:49:31:d8:7b:10:
4f:3a:ac:56:3d:7e:4d:9c:be:30:3f:3c:a2:f4:bb:
0f:ee:ea:2c:3f:9f:63:dd:76:ef:19:8e:c2:68:35:
27:5e:8a:f0:b9:84:14:a1:ab:e6:17:6a:c4:60:1e:
03:33:b7:64:a6:95:79:66:2f:7a:60:61:c4:3d:b3:
09:1e:e9:51:1e:62:83:34:3b:bc:df:05:8f:45:4b:
38:2e:c6:df:3d:96:6f:8b:d4:81:39:14:d2:2e:74:
df:4e:20:c7:51:93:a3:3a:a1:6c:6f:3c:38:21:85:
50:f9:e6:8c:d5:0a:87:01:08:47:c6:6d:23:f1:a7:
4c:88:76:63:f8:c4:b8:ed:68:54:d3:b2:98:ff:cd:
d9:03:9f:dc:ea:55:06:6e:0e:3c:6d:bc:de:e0:40:
16:00:49:7d:04:7e:87:9f:96:44:ca:21:87:ab:87:
59:84:51:1c:9f:a8:6e:4d:53:0f:4c:70:87:36:be:
a9:fc:07:89:09:af:6a:78:16:8d:5e:aa:9f:dd:97:
f3:5a:61:66:09:39:51:0d:26:6c:5a:0d:b8:21:b8:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:A3:A4:72:F6:42:8E:2B:3B:62:CB:CE:98:0E:F5:B8:83:CD:8F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rOqjpHL2Qo4rO2LLzpgO9biDzY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.20.0/23
93.170.176.0/23
95.47.238.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:cc:ab:40:56:cc:9d:6e:6a:8f:da:29:94:b1:e3:d4:22:ab:
ab:96:81:45:a7:d5:41:67:cc:ef:b3:70:3f:8b:69:74:bd:13:
40:27:d4:20:79:d0:04:9a:4b:a5:91:3d:76:68:b0:2e:a4:9e:
de:6c:1b:f8:25:05:53:59:11:c8:86:7e:f0:dd:da:69:a9:68:
d2:bb:74:c2:21:0d:12:6a:8c:e6:e6:e0:55:84:0c:d5:77:9e:
0e:68:b1:bf:d2:21:e2:f5:72:f8:3e:bb:9d:b0:0b:b9:98:a4:
8c:8f:39:41:ed:74:86:08:80:18:fb:40:5e:d5:87:1a:81:6b:
63:35:d4:18:e0:72:ee:9a:12:0a:ab:85:5a:14:c4:27:b5:60:
8f:da:06:98:2b:19:b0:0c:7d:66:08:d6:f9:6a:a6:5e:16:e1:
9b:a5:9d:6c:99:95:9d:93:b2:e3:66:7b:f2:b4:bd:b1:b9:63:
fd:fc:4a:00:db:27:a9:d9:46:51:79:db:2f:10:86:2c:8a:45:
52:f2:30:5e:40:b7:ad:e7:df:f7:b3:c9:5a:de:e2:de:00:2f:
14:16:0c:a8:00:c5:09:cb:c7:29:f0:5d:36:43:c7:39:87:ea:
61:b1:8e:91:11:f4:85:3a:f1:ca:53:93:26:ce:f0:2a:3b:42:
5c:50:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:41 2025 by rpki-client