Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tkI5hb9QGYE_INc51Rt4LYsZdk0.roa
File: tkI5hb9QGYE_INc51Rt4LYsZdk0.roa (raw, json)
Hash identifier: 30XYLQGYZnS2BrlG6Y0rg9LWTbBqd2rC2NoEfSnun+k=
Subject key identifier: B6:42:39:85:BF:50:19:81:3F:20:D7:39:D5:1B:78:2D:8B:19:76:4D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28359CA3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tkI5hb9QGYE_INc51Rt4LYsZdk0.roa
Signing time: Sat 01 Jan 2022 16:09:51 +0000
ROA not before: Sat 01 Jan 2022 16:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204752
IP address blocks: 95.47.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674602147 (0x28359ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6423985bf5019813f20d739d51b782d8b19764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:c7:68:25:e7:3a:fd:76:c5:bc:04:9c:ef:
92:5b:f8:4c:12:0b:73:2c:3e:9c:a2:13:b4:81:28:
3a:a4:f1:29:d9:71:ec:85:b9:cb:2a:a9:92:05:a8:
93:55:96:43:35:d9:a7:0c:ae:17:5d:3b:b1:d2:f6:
b3:3c:99:24:b8:5e:d7:26:1c:9f:90:55:db:3a:e3:
c6:38:d5:bc:59:cf:3b:39:2a:8d:3f:9d:8e:79:b3:
d8:34:17:8e:10:46:d3:3f:24:f8:18:fe:22:ea:49:
d3:61:1e:5e:c3:69:69:92:3a:80:db:7c:79:69:74:
22:6c:a8:18:04:15:f7:c3:60:99:cf:15:06:9e:98:
af:0c:37:0f:63:68:11:c5:59:94:43:7e:e2:68:3b:
27:47:df:e7:b8:85:7e:d6:e5:cc:19:52:de:79:6d:
71:98:e0:63:73:0a:41:f6:fa:7b:34:db:4e:65:f0:
98:91:51:de:99:eb:f0:1c:d7:0a:fd:29:19:cc:37:
99:43:bc:99:30:31:cc:2d:5f:19:59:e8:f0:86:c6:
89:f0:24:0a:19:70:ca:37:4e:ea:10:a3:38:1d:2c:
70:f1:27:1e:ae:c2:65:96:d5:32:e9:42:ed:50:07:
71:f7:8e:b5:68:90:42:b3:3e:ab:e2:54:91:e9:36:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:39:85:BF:50:19:81:3F:20:D7:39:D5:1B:78:2D:8B:19:76:4D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tkI5hb9QGYE_INc51Rt4LYsZdk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ba:f9:03:06:72:b8:79:b3:19:6a:78:8d:01:6f:25:54:5f:
fb:54:00:7f:0e:ba:13:14:f9:c7:d5:70:58:18:84:85:be:60:
cc:e7:fc:60:f4:4f:91:c3:65:3d:12:f9:f9:5f:ae:c9:99:4c:
81:50:53:5f:04:b8:e7:d7:11:d6:3f:1a:c3:6c:a3:89:3d:de:
95:0b:ad:d2:44:fc:3a:0a:60:81:1b:92:3b:ec:03:0a:63:a5:
23:46:cc:ce:39:57:98:dd:d6:60:c3:9c:c7:bf:d7:b3:ca:0b:
67:e0:b4:2e:8d:bd:07:8d:b9:be:08:c9:e0:f4:59:2a:7c:1b:
ba:fd:7e:ba:fe:eb:f4:8b:a4:6c:64:9f:55:e7:c4:da:95:25:
84:d4:bd:88:86:92:bf:f3:f4:2f:a1:1a:bd:dc:81:cf:75:e4:
05:81:8e:e5:f1:42:58:a4:88:e7:b6:0d:ba:ef:51:00:bd:62:
f1:f2:da:e3:ab:8b:de:d2:1d:cb:00:4f:ea:16:20:86:93:f8:
f8:4b:b5:37:41:3d:34:4e:60:7f:40:0d:e6:39:89:e5:94:ac:
ca:20:90:6c:28:cf:3b:b8:29:ac:25:11:81:0f:d2:28:5c:96:
7e:48:e1:f2:62:c4:ac:98:c6:82:55:81:12:57:f5:2a:72:db:
d1:aa:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:24 2025 by rpki-client