Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wUEYPDkw3E7HRCkANCSjvNNWf6o.roa
File: wUEYPDkw3E7HRCkANCSjvNNWf6o.roa (raw, json)
Hash identifier: r5R+fuWZrDEwzZOa9zxh2a9WJAEmBazQyqi+LHIYgJ4=
Subject key identifier: C1:41:18:3C:39:30:DC:4E:C7:44:29:00:34:24:A3:BC:D3:56:7F:AA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC0FF3767ABBF7E892E5BB0A692EE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wUEYPDkw3E7HRCkANCSjvNNWf6o.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56465
IP address blocks: 95.47.116.0/24 maxlen: 24
95.47.117.0/24 maxlen: 24
146.120.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c0:ff:37:67:ab:bf:7e:89:2e:5b:b0:a6:92:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c141183c3930dc4ec74429003424a3bcd3567faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:8b:d8:ea:25:0e:32:ff:33:cd:8c:38:d3:
1b:d1:72:b2:43:0d:b0:4b:2c:7c:f9:6e:92:52:d8:
4f:4d:6f:ed:3a:76:84:3b:71:f2:aa:43:4f:21:28:
37:45:ef:4b:eb:d7:c9:8d:dc:93:e4:2f:6b:2d:6a:
f9:29:9f:23:86:34:33:d4:c9:43:ea:1e:41:1e:79:
cf:0a:1d:ff:a2:b4:28:4f:6d:d2:c1:0b:5f:55:36:
2d:2d:ce:78:4b:25:83:27:6b:b1:f9:a6:0f:e9:19:
1c:c8:51:52:a3:44:5e:8d:32:dc:d4:4f:f1:a1:cc:
46:ab:21:5c:64:8e:ff:93:53:cb:5f:d6:da:4f:3e:
ce:a3:9e:b0:a8:a3:c8:9e:36:ab:7a:b1:e6:f9:d6:
56:2c:1c:83:3e:c5:41:c2:f5:8a:a1:2f:00:e3:ae:
fb:ea:73:6b:91:e8:3a:60:53:17:fc:0f:7f:be:19:
23:a5:33:74:a5:29:2f:fc:dd:85:0e:a7:93:ac:0f:
7c:f8:07:c3:8e:bf:ad:c3:c8:23:fb:c6:c1:b7:8b:
71:87:7d:05:55:0d:76:3f:cf:09:d1:14:93:46:b0:
df:08:11:db:fc:1a:2f:72:b9:e8:d0:32:7b:70:58:
c5:4a:ca:84:dd:eb:2c:67:c6:6c:af:a1:0a:73:18:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:41:18:3C:39:30:DC:4E:C7:44:29:00:34:24:A3:BC:D3:56:7F:AA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wUEYPDkw3E7HRCkANCSjvNNWf6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.116.0/23
146.120.95.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f0:26:2e:68:6d:ab:6a:a2:37:b8:0a:ce:bf:75:f2:ee:41:
05:b1:2e:74:31:7a:09:37:d9:e7:8b:35:b4:24:e7:6f:3b:a2:
d4:26:6e:07:85:9d:2f:40:68:99:fe:d8:83:a1:79:2b:d7:8f:
88:cf:7f:ae:08:31:d0:4c:8c:9d:cd:b7:ab:46:61:bf:96:31:
ca:ea:5e:12:1a:9e:90:33:f3:b1:a6:e2:d9:98:db:c0:be:05:
7d:28:8f:88:9d:e8:ff:9f:52:8f:18:61:d9:b9:84:b8:4e:23:
77:22:38:5d:ee:ca:b3:32:95:6c:6d:f7:94:8e:e0:4c:6e:89:
8a:2e:fa:6e:00:bd:7c:bc:3e:82:72:80:9f:ac:95:9e:fe:07:
bc:21:b1:75:fd:71:73:dd:e9:85:20:74:54:06:fc:a2:18:d6:
d9:23:35:10:87:73:d0:c5:7e:26:92:57:3b:39:e5:b3:5b:ec:
b1:61:64:26:a2:5d:2e:bf:f7:4f:8c:00:a3:16:3d:f8:79:89:
05:98:87:22:fd:74:ea:f8:9e:25:24:c3:e5:5e:a1:ed:96:7a:
fe:26:b4:a5:a8:f1:2f:98:e5:8d:0e:6d:10:68:dc:73:14:89:
15:ef:c3:8e:a7:ba:18:9f:ef:6e:32:2d:15:1e:b7:48:c6:e4:
73:2e:11:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj8D/N2erv36JLluwppLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQxMTgzYzM5MzBkYzRlYzc0NDI5MDAzNDI0YTNiY2QzNTY3ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSCL2OolDjL/M82MONMb0XKyQw2w
Syx8+W6SUthPTW/tOnaEO3HyqkNPISg3Re9L69fJjdyT5C9rLWr5KZ8jhjQz1MlD
6h5BHnnPCh3/orQoT23SwQtfVTYtLc54SyWDJ2ux+aYP6RkcyFFSo0RejTLc1E/x
ocxGqyFcZI7/k1PLX9baTz7Oo56wqKPInjarerHm+dZWLByDPsVBwvWKoS8A4677
6nNrkeg6YFMX/A9/vhkjpTN0pSkv/N2FDqeTrA98+AfDjr+tw8gj+8bBt4txh30F
VQ12P88J0RSTRrDfCBHb/Bovcrno0DJ7cFjFSsqE3essZ8Zsr6EKcxjMnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMFBGDw5MNxOx0QpADQko7zTVn+qMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvd1VFWVBEa3czRTdIUkNrQU5DU2p2Tk5XZjZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXy90AwQA
knhfMA0GCSqGSIb3DQEBCwUAA4IBAQA58CYuaG2raqI3uArOv3Xy7kEFsS50MXoJ
N9nnizW0JOdvO6LUJm4HhZ0vQGiZ/tiDoXkr14+Iz3+uCDHQTIydzberRmG/ljHK
6l4SGp6QM/OxpuLZmNvAvgV9KI+Inej/n1KPGGHZuYS4TiN3Ijhd7sqzMpVsbfeU
juBMbomKLvpuAL18vD6CcoCfrJWe/ge8IbF1/XFz3emFIHRUBvyiGNbZIzUQh3PQ
xX4mklc7OeWzW+yxYWQmol0uv/dPjACjFj34eYkFmIci/XTq+J4lJMPlXqHtlnr+
JrSlqPEvmOWNDm0QaNxzFIkV78OOp7oYn+9uMi0VHrdIxuRzLhH4
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:13 2025 by rpki-client