Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zTLaJnut6WS1lNgkxOAvEuF0-14.roa
File: zTLaJnut6WS1lNgkxOAvEuF0-14.roa (raw, json)
Hash identifier: cWx1xgzhnFcVvQ/a0lB/23ozSA/+dRKUYvoHug4V/q8=
Subject key identifier: CD:32:DA:26:7B:AD:E9:64:B5:94:D8:24:C4:E0:2F:12:E1:74:FB:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27D4F0BC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zTLaJnut6WS1lNgkxOAvEuF0-14.roa
Signing time: Sat 01 Jan 2022 16:08:56 +0000
ROA not before: Sat 01 Jan 2022 16:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57764
IP address blocks: 95.46.166.0/24 maxlen: 24
95.46.167.0/24 maxlen: 24
95.46.64.0/21 maxlen: 24
95.46.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668266684 (0x27d4f0bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd32da267bade964b594d824c4e02f12e174fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:e5:d8:91:28:15:af:48:3b:dd:cd:c5:f8:
33:3f:b0:4a:d9:e9:f8:1f:67:9c:8b:4a:fc:40:e8:
d7:8a:fc:78:09:27:31:e9:35:2e:dc:f4:11:f2:a6:
a6:f3:d2:51:3f:6b:3a:1d:73:a1:66:a5:a9:ce:52:
a0:a9:69:bb:19:cc:5b:1f:d9:ac:09:83:a2:48:ea:
97:cf:b0:68:05:d6:22:9c:c9:7b:22:ac:de:29:b7:
ea:ba:d3:52:e3:25:ce:8a:d2:b2:86:16:bb:8c:ea:
8f:bb:d9:7a:d9:bf:ec:48:dd:5c:84:66:26:24:b0:
7f:ae:04:23:33:92:e5:59:9a:47:1e:d1:78:30:b1:
4b:14:0d:8e:cb:62:c6:e0:ea:75:bb:5c:54:09:ab:
17:e0:69:3d:b2:f5:ec:be:40:84:a5:28:0e:22:5b:
bd:c5:0b:80:4b:ac:90:f7:e9:c7:d3:e6:a9:a2:60:
66:9a:10:cf:ef:42:49:6f:6b:da:96:3c:8b:18:2b:
da:91:e5:f5:d4:72:d8:76:55:a6:79:d3:e5:ec:b7:
98:a1:b0:23:d1:0d:63:b1:95:97:cd:c0:8d:09:f9:
56:1a:05:42:eb:2c:8c:dc:2a:94:f3:77:fc:d3:43:
e0:cd:da:02:97:6c:66:9d:26:74:14:de:a9:7b:4e:
31:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:DA:26:7B:AD:E9:64:B5:94:D8:24:C4:E0:2F:12:E1:74:FB:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zTLaJnut6WS1lNgkxOAvEuF0-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.64.0/21
95.46.166.0/23
95.46.174.0/23
Signature Algorithm: sha256WithRSAEncryption
55:69:3a:93:af:af:e1:e0:27:ab:20:7a:61:fb:8f:51:f1:0b:
3a:8d:b5:ab:6d:07:4e:00:d1:2d:fe:2c:56:92:bc:fa:9c:ba:
e3:2e:00:d2:ed:5e:bf:aa:a2:89:a0:9b:1f:6f:6b:f0:20:33:
2c:17:b1:8c:82:6f:55:b3:c1:28:27:b2:8f:b1:79:cd:6c:70:
09:38:2f:80:a5:0c:1a:16:1c:4a:fe:cc:09:01:8a:f8:6f:8d:
be:01:2e:50:a3:37:b8:93:07:14:ab:f3:94:af:fb:a9:7f:a4:
51:15:3b:fe:83:fa:89:a3:73:de:e1:f8:6c:05:1d:4c:9f:63:
8e:70:d9:88:f6:65:47:ee:7e:27:f6:40:0c:fd:55:d7:65:54:
9b:2c:39:c9:88:a7:ad:1c:ca:72:0f:49:d5:d0:0d:98:21:f6:
78:0c:e7:15:45:1a:52:a9:bd:ee:f5:94:ae:65:18:5f:50:50:
d2:81:ea:cb:f9:84:cd:a4:14:32:7d:e2:2c:f0:59:78:cc:c6:
5b:03:43:2d:b7:96:b9:8f:9f:79:b3:74:f0:59:a5:32:85:32:
23:b2:f9:b7:64:69:b8:c2:d6:4c:11:f8:66:9c:ab:94:76:77:
17:5c:70:59:8c:27:3a:94:70:e2:95:7a:6f:a6:98:8a:7a:cd:
1d:00:e0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:22 2025 by rpki-client