Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vDdvSaLQRBU1fGCjmHxBAcFdJNE.roa
File: vDdvSaLQRBU1fGCjmHxBAcFdJNE.roa (raw, json)
Hash identifier: 86pDxSBIAHNwvVBPQEC6FCW7C40TMzSDvl4qY0SOrdI=
Subject key identifier: BC:37:6F:49:A2:D0:44:15:35:7C:60:A3:98:7C:41:01:C1:5D:24:D1
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 04D9B959
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vDdvSaLQRBU1fGCjmHxBAcFdJNE.roa
Signing time: Thu 07 Apr 2022 19:56:58 +0000
ROA not before: Thu 07 Apr 2022 19:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 185.95.159.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81377625 (0x4d9b959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 7 19:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc376f49a2d04415357c60a3987c4101c15d24d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:74:52:e5:34:a8:5a:b1:ac:9e:52:80:70:
07:d7:60:af:8b:ea:7b:18:b8:96:12:3a:62:d6:b8:
78:48:92:28:c9:68:a5:48:63:4d:2f:80:94:66:38:
23:24:ec:25:5d:2b:02:a3:d7:e2:d0:31:f6:3f:f3:
48:c3:83:9a:e6:c0:78:62:d0:ba:67:3d:a5:31:5d:
af:14:23:06:c2:ff:e0:4b:7c:3e:df:fa:c2:26:52:
c6:dd:d7:e8:c1:87:4a:a2:7a:b1:e6:db:5c:94:e7:
0c:63:94:dc:55:fb:21:1e:c0:42:21:8f:a2:3b:33:
f7:af:09:c3:59:0d:13:79:de:fa:16:fd:89:c0:b2:
d3:af:2b:54:a7:00:06:4a:c5:3c:fa:56:3a:7e:c9:
25:b5:ca:66:7c:9d:d6:51:02:6b:b3:41:4e:36:a7:
ae:5e:04:8e:2e:8e:9b:6a:19:08:a0:fa:eb:15:9c:
99:94:fd:e3:96:8a:b8:4e:9f:82:b5:59:5e:95:23:
68:f8:c9:4b:17:0d:c5:87:fa:74:36:9b:fb:3a:d3:
f0:bc:ce:d1:30:e0:d0:3e:d9:9a:49:fb:fe:ad:28:
03:35:cd:29:31:c7:0d:0d:3d:2d:8d:26:ad:b9:a0:
97:8c:0b:a5:c4:77:83:ea:0b:50:8b:6a:6a:19:0e:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:6F:49:A2:D0:44:15:35:7C:60:A3:98:7C:41:01:C1:5D:24:D1
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vDdvSaLQRBU1fGCjmHxBAcFdJNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.157.0/24
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e0:f7:6f:72:95:23:61:97:28:f2:fd:63:1b:41:9f:8c:57:
f9:67:0a:a7:00:47:41:8d:1b:3b:c7:a7:25:5c:e8:ad:8f:b5:
f0:7b:23:c2:c4:8b:e3:98:ea:c6:a4:5d:e9:06:59:e5:f5:4f:
03:7a:67:ff:28:2d:40:3d:63:71:7d:2b:09:07:17:a0:0b:74:
61:4b:25:0b:41:10:f6:a0:34:1b:b2:79:de:d2:d6:22:b5:68:
b3:72:9c:b7:55:f6:34:76:3a:cf:97:fa:07:f0:34:d4:fc:5f:
81:f1:04:48:11:f8:bc:95:54:c4:d6:1b:3b:f7:5d:d1:27:f6:
5f:a4:60:39:db:98:34:31:e3:e9:ce:05:ef:16:da:8f:bc:34:
ee:4b:6d:7c:38:14:29:50:d0:ca:72:c6:cf:3a:e2:64:3a:d0:
d4:3e:88:0d:f2:ea:0c:63:29:32:9a:0d:17:af:da:b4:e4:4f:
32:d4:98:d7:01:a3:79:7e:53:a5:9e:6b:7a:eb:e4:11:b9:f5:
a3:e3:c9:b7:ad:8d:42:8d:0c:13:6b:e6:d6:52:f5:ff:ec:4f:
38:09:c3:f2:9a:ab:db:94:dd:20:dd:4e:c6:82:ae:93:f1:24:
60:80:3e:43:49:36:c0:24:53:9a:95:2b:49:79:71:f6:72:a6:
4f:db:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:28 2025 by rpki-client