Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tqBs9yo-oBlajOjrmVgBjFROOBk.roa
File: tqBs9yo-oBlajOjrmVgBjFROOBk.roa (raw, json)
Hash identifier: M2NZlLKfmeffUWaYugCbtlxq6RcwG66nuqThRxBx1yU=
Subject key identifier: B6:A0:6C:F7:2A:3E:A0:19:5A:8C:E8:EB:99:58:01:8C:54:4E:38:19
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956ABBC47F47C5059776BF1EA24089
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tqBs9yo-oBlajOjrmVgBjFROOBk.roa
Signing time: Mon 02 Jan 2023 03:45:18 +0000
ROA not before: Mon 02 Jan 2023 03:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60313
IP address blocks: 95.47.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6a:bb:c4:7f:47:c5:05:97:76:bf:1e:a2:40:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a06cf72a3ea0195a8ce8eb9958018c544e3819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:4c:09:83:b3:04:f6:dd:68:2a:89:51:19:
1c:2b:2b:fc:95:ba:76:df:de:26:73:af:a6:52:f5:
ab:54:fd:ae:e0:2f:45:89:d3:af:74:82:bf:21:13:
d1:6f:84:df:08:4f:13:4c:44:38:dd:dd:9c:82:71:
f2:c6:81:08:61:64:ee:a0:69:12:c3:1c:78:13:3e:
c7:24:e5:08:2d:8c:7b:c9:ed:a5:d7:83:05:91:41:
b1:97:93:10:1b:cb:eb:49:3f:35:0c:a3:3f:0f:70:
56:e3:b8:55:a2:46:f3:94:2d:e0:27:11:50:a4:51:
35:92:09:e3:1d:51:e5:d5:f6:86:40:4a:ff:e6:1f:
b8:f8:02:af:fa:fa:9d:56:7e:95:e9:39:d0:5d:61:
a4:f8:1e:d6:dc:e0:48:af:e2:48:a9:49:9c:8f:df:
98:98:3c:8a:55:25:56:87:11:ff:b7:24:ec:d2:b9:
62:14:37:d8:82:6a:85:55:a1:f4:cf:3c:d0:85:24:
ac:80:3c:40:8d:c8:d9:81:a5:7c:2c:c6:a5:f7:9a:
ed:47:31:94:2e:96:aa:0f:79:00:fc:66:d6:7b:cb:
52:7a:36:40:22:ab:be:68:81:3b:ec:f0:27:63:f2:
bd:89:c9:8d:de:0a:17:04:b2:d9:3a:8f:5e:3a:ce:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:6C:F7:2A:3E:A0:19:5A:8C:E8:EB:99:58:01:8C:54:4E:38:19
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tqBs9yo-oBlajOjrmVgBjFROOBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:29:4d:67:fa:0d:9e:42:0f:84:25:2e:ae:ed:78:4b:b2:f0:
36:9f:d7:6d:de:60:09:49:59:8a:a9:85:95:97:dc:f2:bd:da:
fd:86:b1:50:05:5d:62:58:49:65:86:d2:71:f1:44:c0:19:23:
ab:16:8a:e3:56:ae:7f:b2:1f:18:9d:96:69:46:33:3f:55:9b:
d0:d5:3c:20:d2:86:9d:1a:47:9d:0b:3e:28:00:e9:e0:f0:4f:
96:36:89:9f:80:04:a9:dd:93:f2:56:34:6f:f2:84:80:a1:a3:
78:93:f5:f8:7d:dc:21:c9:a6:aa:6a:87:b9:19:e7:a3:e8:93:
0b:49:c0:cf:6e:bb:7c:87:cb:b1:4c:4c:6f:2b:e7:4b:be:31:
23:f7:db:4b:8b:b3:8b:b9:cd:71:96:43:5a:68:60:d0:2c:52:
e4:25:36:c6:af:ee:7c:13:93:4d:34:76:76:fc:2d:43:bd:4b:
68:31:4b:65:02:b4:31:58:4d:ad:5a:bb:ba:06:8e:a3:43:31:
0e:40:b7:50:74:bb:fb:51:0d:ad:d8:89:ae:8a:a4:96:13:f1:
6c:af:b0:d9:12:c8:28:f7:88:21:3f:00:5d:70:d5:1c:fe:0f:
38:f9:36:0f:fc:96:9d:0e:c3:36:ec:82:80:87:92:fb:23:b7:
e7:d9:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:51 2025 by rpki-client