Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sQA58chHX70TjEgfDvkrnE4pZ4s.roa
File: sQA58chHX70TjEgfDvkrnE4pZ4s.roa (raw, json)
Hash identifier: ah7J/MxniS3WD3tXLHl8vP+fX5Hh+NSvW5z+OusVvNE=
Subject key identifier: B1:00:39:F1:C8:47:5F:BD:13:8C:48:1F:0E:F9:2B:9C:4E:29:67:8B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187FB8F10CC5FE8FF746065C6258C2E41EC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sQA58chHX70TjEgfDvkrnE4pZ4s.roa
Signing time: Mon 08 May 2023 13:31:09 +0000
ROA not before: Mon 08 May 2023 13:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48511
IP address blocks: 146.120.223.0/24 maxlen: 24
95.46.196.0/24 maxlen: 24
2a02:128:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:8f:10:cc:5f:e8:ff:74:60:65:c6:25:8c:2e:41:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 8 13:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b10039f1c8475fbd138c481f0ef92b9c4e29678b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:b3:9b:e8:71:f2:14:62:ca:58:96:05:6a:
60:90:95:66:a6:60:71:63:93:e1:f1:91:67:19:a6:
19:86:3c:ba:5a:8a:4b:57:dc:53:13:50:4d:25:26:
8e:95:7e:d3:13:36:d9:a5:1a:12:48:fa:3d:8a:59:
44:be:bf:1b:51:53:55:7c:c4:66:11:2c:2d:46:9a:
4b:8f:de:5a:06:0f:4b:ea:8a:11:9c:ff:15:03:eb:
29:8d:40:2d:8c:d0:e5:1a:b7:df:8d:5d:55:93:12:
a9:28:62:d2:f7:a6:86:f9:de:c5:8f:17:ad:0e:29:
80:fd:fb:86:cb:37:64:7f:50:76:a2:70:77:2a:76:
e8:a7:ce:d7:4b:b3:eb:cc:32:58:02:f8:7f:a9:bf:
4e:63:47:79:63:0d:40:db:87:63:f8:37:08:84:95:
6e:34:7d:47:79:14:92:27:f2:3f:87:2a:6e:e5:c3:
a3:74:5b:f1:cc:5c:56:5a:c4:e6:5d:26:bf:26:f3:
5c:86:90:c8:f0:3c:3d:7e:4e:8b:7a:9a:e4:aa:7b:
12:53:a0:ba:ca:0f:57:30:f5:41:58:f6:5b:50:f6:
ff:1b:42:1e:f3:06:1a:d5:29:fa:42:4b:80:de:28:
e2:3a:62:09:9e:f5:38:c6:23:d0:c3:d6:b8:97:59:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:00:39:F1:C8:47:5F:BD:13:8C:48:1F:0E:F9:2B:9C:4E:29:67:8B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sQA58chHX70TjEgfDvkrnE4pZ4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.196.0/24
146.120.223.0/24
IPv6:
2a02:128:22::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d4:e2:d7:67:e4:d2:4e:94:c0:c2:9d:73:30:14:e5:32:e1:
87:81:6b:d0:d3:06:eb:8e:bf:10:a2:66:f2:65:41:1f:13:fa:
51:fd:45:33:30:22:7e:af:33:61:b5:e6:fb:fd:e9:fb:37:a2:
81:a9:e4:76:76:3d:0a:ab:c4:e7:d8:17:38:75:e1:98:67:34:
af:40:a0:3e:2c:50:8d:35:53:0f:b1:e9:af:52:c8:54:3d:07:
3e:7b:45:bb:c8:b4:2c:81:5c:33:a1:fd:05:44:4e:b1:11:52:
c4:9f:fd:82:2d:f6:45:99:85:8c:bd:84:59:c1:f1:c8:56:6c:
c2:1d:39:fe:67:93:14:1f:b4:43:c7:09:df:fd:5b:34:4a:f3:
a3:6e:74:4d:b1:97:3a:02:81:e3:6e:52:12:c3:7f:c1:90:f6:
30:5d:d9:8b:55:58:2e:23:e3:9c:bf:da:8e:58:78:ec:42:59:
0a:96:a5:e5:41:79:f3:6b:da:b5:d4:75:46:08:13:04:cd:bd:
e0:91:fa:91:a9:cd:67:01:84:ea:1b:8c:d7:6d:a4:6a:ba:82:
f6:13:8b:d6:da:8a:d1:36:8f:76:de:0e:1b:af:a4:96:d6:3f:
35:46:44:51:74:e4:b9:7b:94:54:e2:ee:69:f0:b7:96:03:3a:
63:1a:f9:08
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYf7jxDMX+j/dGBlxiWMLkHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwNTA4MTMzMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTAwMzlmMWM4NDc1ZmJkMTM4YzQ4MWYwZWY5MmI5YzRlMjk2NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2yzm+hx8hRiyliWBWpgkJVmpmBx
Y5Ph8ZFnGaYZhjy6WopLV9xTE1BNJSaOlX7TEzbZpRoSSPo9illEvr8bUVNVfMRm
ESwtRppLj95aBg9L6ooRnP8VA+spjUAtjNDlGrffjV1VkxKpKGLS96aG+d7Fjxet
DimA/fuGyzdkf1B2onB3Knbop87XS7PrzDJYAvh/qb9OY0d5Yw1A24dj+DcIhJVu
NH1HeRSSJ/I/hypu5cOjdFvxzFxWWsTmXSa/JvNchpDI8Dw9fk6LeprkqnsSU6C6
yg9XMPVBWPZbUPb/G0Ie8wYa1Sn6QkuA3ijiOmIJnvU4xiPQw9a4l1nM9wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLEAOfHIR1+9E4xIHw75K5xOKWeLMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvc1FBNThjaEhYNzBUakVnZkR2a3JuRTRwWjRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAXy7EAwQA
knjfMA8EAgACMAkDBwAqAgEoACIwDQYJKoZIhvcNAQELBQADggEBAH/U4tdn5NJO
lMDCnXMwFOUy4YeBa9DTBuuOvxCiZvJlQR8T+lH9RTMwIn6vM2G15vv96fs3ooGp
5HZ2PQqrxOfYFzh14ZhnNK9AoD4sUI01Uw+x6a9SyFQ9Bz57RbvItCyBXDOh/QVE
TrERUsSf/YIt9kWZhYy9hFnB8chWbMIdOf5nkxQftEPHCd/9WzRK86NudE2xlzoC
geNuUhLDf8GQ9jBd2YtVWC4j45y/2o5YeOxCWQqWpeVBefNr2rXUdUYIEwTNveCR
+pGpzWcBhOobjNdtpGq6gvYTi9baitE2j3beDhuvpJbWPzVGRFF05Ll7lFTi7mnw
t5YDOmMa+Qg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:30 2025 by rpki-client