Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rjPnwnBQ9wdeHtKU77pmHVQW7E4.roa
File: rjPnwnBQ9wdeHtKU77pmHVQW7E4.roa (raw, json)
Hash identifier: ulMnRRkOXHzrnkWPv3Xz9wRz0Bqw9YHAQckzamARcF4=
Subject key identifier: AE:33:E7:C2:70:50:F7:07:5E:1E:D2:94:EF:BA:66:1D:54:16:EC:4E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F80F98
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rjPnwnBQ9wdeHtKU77pmHVQW7E4.roa
Signing time: Sat 01 Jan 2022 16:09:16 +0000
ROA not before: Sat 01 Jan 2022 16:09:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61116
IP address blocks: 95.46.155.0/24 maxlen: 24
93.171.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670568344 (0x27f80f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae33e7c27050f7075e1ed294efba661d5416ec4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:8c:55:bc:ef:88:61:c2:7d:15:0b:f6:3a:
6e:04:47:99:0c:a9:b0:a9:0c:d2:70:dc:2c:c2:e2:
63:09:47:96:d0:87:e3:77:d8:2f:b6:cf:5c:d2:e7:
4d:31:5a:79:24:b0:88:ca:db:53:ec:fc:1f:49:1d:
6b:6b:a4:e0:22:8f:9b:f1:c0:f7:63:8f:d7:f0:cf:
09:9f:7f:c4:94:df:e5:bf:e6:f3:5b:f8:a3:31:05:
e0:95:01:00:39:bd:60:9e:6a:64:5d:a2:35:80:88:
d6:98:67:fb:d3:39:f8:a1:94:a1:7b:16:c8:08:04:
68:4c:cf:0e:b6:61:e8:59:94:2d:09:8e:f9:e4:a8:
d6:43:0f:4e:d9:3c:bd:8d:d4:1f:e6:89:d5:67:3b:
45:01:7f:23:8c:5d:eb:a4:af:15:8c:65:54:59:e8:
61:56:db:14:45:d3:a5:db:a7:a2:a9:a5:2c:12:20:
a1:5b:3d:e8:cf:3d:1f:76:08:18:57:73:ca:7d:20:
8b:a9:d6:cd:6c:96:7d:36:29:f5:5c:3f:bd:ee:01:
4c:3d:95:cb:23:89:ed:93:4d:88:be:0b:03:29:0a:
32:fe:bb:b5:fb:c2:af:c9:ef:3d:03:6c:0e:9a:1e:
45:c4:73:44:82:9e:e5:e8:9f:19:53:86:cc:93:3b:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:E7:C2:70:50:F7:07:5E:1E:D2:94:EF:BA:66:1D:54:16:EC:4E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rjPnwnBQ9wdeHtKU77pmHVQW7E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.225.0/24
95.46.155.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8e:59:16:12:79:ea:14:c0:aa:8a:c9:30:50:ae:e8:75:7a:
8f:d4:7c:4f:78:30:1a:03:aa:18:2e:aa:ac:ac:54:3a:40:85:
ab:cf:90:d2:e6:7e:f8:e9:61:5f:f0:8b:3c:4e:37:31:9d:af:
80:54:9b:73:c9:f4:09:50:4b:a8:2d:fd:ed:2c:73:eb:d7:f2:
5f:29:46:8f:eb:0e:ee:d5:9d:8a:65:97:a0:b4:3d:34:99:01:
7c:b2:f1:8b:66:98:dc:bf:8d:f9:78:bb:73:35:72:76:e6:ec:
1c:f4:54:9f:eb:59:f9:bc:35:81:9a:1b:c0:d9:99:b1:77:39:
b5:20:07:4e:63:46:93:29:75:0f:a8:9b:4c:d2:40:be:c1:65:
18:39:4d:9e:56:e6:7e:6c:22:c8:bb:17:bc:cc:37:28:6e:32:
6d:84:46:cc:76:a4:c0:bb:18:a8:68:47:da:05:63:c8:fa:95:
76:08:d2:01:46:45:1b:f2:a0:d1:d4:da:84:24:60:a1:03:2d:
7c:3d:1c:4a:a5:1a:49:ca:85:6c:0a:57:59:5c:fe:ca:f1:5a:
84:f3:5d:97:39:1b:54:b3:78:13:b4:e1:87:da:59:df:e4:08:
40:89:db:b1:3c:c4:b1:5b:e9:b3:d5:a3:13:ff:31:ff:db:c6:
b3:5e:8f:45
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEJ/gPmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWUzM2U3YzI3MDUw
ZjcwNzVlMWVkMjk0ZWZiYTY2MWQ1NDE2ZWM0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2DjFW874hhwn0VC/Y6bgRHmQypsKkM0nDcLMLiYwlHltCH
43fYL7bPXNLnTTFaeSSwiMrbU+z8H0kda2uk4CKPm/HA92OP1/DPCZ9/xJTf5b/m
81v4ozEF4JUBADm9YJ5qZF2iNYCI1phn+9M5+KGUoXsWyAgEaEzPDrZh6FmULQmO
+eSo1kMPTtk8vY3UH+aJ1Wc7RQF/I4xd66SvFYxlVFnoYVbbFEXTpdunoqmlLBIg
oVs96M89H3YIGFdzyn0gi6nWzWyWfTYp9Vw/ve4BTD2VyyOJ7ZNNiL4LAykKMv67
tfvCr8nvPQNsDpoeRcRzRIKe5eifGVOGzJM7CIECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSuM+fCcFD3B14e0pTvumYdVBbsTjAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L3JqUG53bkJROXdkZUh0S1U3N3BtSFZRVzdFNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF2r4QMEAF8umzANBgkqhkiG9w0B
AQsFAAOCAQEAV45ZFhJ56hTAqorJMFCu6HV6j9R8T3gwGgOqGC6qrKxUOkCFq8+Q
0uZ++OlhX/CLPE43MZ2vgFSbc8n0CVBLqC397Sxz69fyXylGj+sO7tWdimWXoLQ9
NJkBfLLxi2aY3L+N+Xi7czVydubsHPRUn+tZ+bw1gZobwNmZsXc5tSAHTmNGkyl1
D6ibTNJAvsFlGDlNnlbmfmwiyLsXvMw3KG4ybYRGzHakwLsYqGhH2gVjyPqVdgjS
AUZFG/Kg0dTahCRgoQMtfD0cSqUaScqFbApXWVz+yvFahPNdlzkbVLN4E7Thh9pZ
3+QIQInbsTzEsVvps9WjE/8x/9vGs16PRQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:16:21 2025 by rpki-client