Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/LRZeUvhFweXfscF_SbuF1p0hg8Q.roa
File: LRZeUvhFweXfscF_SbuF1p0hg8Q.roa (raw, json)
Hash identifier: ygKuYJ7HZ0hQZi4W857+FTGEDfAyBfd++c1rOeLPqUw=
Subject key identifier: 2D:16:5E:52:F8:45:C1:E5:DF:B1:C1:7F:49:BB:85:D6:9D:21:83:C4
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 019470211F9372BD20CC348DC3F4AC584AD0
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/LRZeUvhFweXfscF_SbuF1p0hg8Q.roa
Signing time: Thu 16 Jan 2025 17:20:06 +0000
ROA not before: Thu 16 Jan 2025 17:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:21:1f:93:72:bd:20:cc:34:8d:c3:f4:ac:58:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 16 17:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d165e52f845c1e5dfb1c17f49bb85d69d2183c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:af:cc:a8:86:55:6b:b0:4d:2f:2f:02:19:
61:ed:cf:e6:38:38:de:df:1c:d6:7e:3d:6a:42:9a:
dd:f4:a2:87:5e:90:19:cf:ce:f0:85:66:11:ee:7e:
78:0f:c7:73:4e:38:90:9a:8a:bc:f2:6e:24:a5:a8:
f3:be:64:de:1a:c6:bc:57:d1:d0:1b:16:91:f5:5f:
75:89:fb:5f:b5:1a:d7:14:85:d1:45:08:ce:85:7a:
5a:2c:03:b1:8a:a4:aa:99:4b:e4:c5:c4:d3:01:0b:
67:5d:b7:8b:c0:4b:82:45:45:42:fb:8f:2b:42:10:
c4:05:d0:be:be:34:f2:21:37:34:a0:e1:31:99:a9:
3d:74:dd:88:f7:e4:fc:d5:7b:3c:01:02:1c:ad:14:
93:fd:7b:2c:d1:9b:15:40:a6:b5:14:37:c0:c2:22:
a4:0a:fc:37:ca:b5:77:3e:e2:74:59:1f:87:5c:b1:
58:ef:2e:23:09:55:e1:a9:f8:a6:3e:e3:c4:bd:ed:
24:2e:e2:53:50:d9:d4:f0:2d:de:af:b7:37:0a:47:
63:b8:4f:94:c7:3b:08:a7:41:92:cf:d3:c1:76:b6:
37:3e:fe:4b:58:eb:4f:3a:f9:c6:8f:01:4c:23:23:
e7:5e:47:ce:10:5c:ce:03:5b:ca:97:5a:6e:00:b6:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:5E:52:F8:45:C1:E5:DF:B1:C1:7F:49:BB:85:D6:9D:21:83:C4
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/LRZeUvhFweXfscF_SbuF1p0hg8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:23:37:78:89:d2:b6:19:b6:e6:9c:e1:08:70:55:d5:79:d1:
26:d3:eb:e2:06:65:4d:09:c8:93:24:31:86:cc:bf:5d:8a:d0:
ac:86:76:59:89:fc:cb:a3:bf:2a:3a:39:e8:02:25:cb:7d:34:
b2:94:74:0f:c2:77:06:81:2a:d2:25:3f:50:8b:42:ca:67:ac:
d7:23:f7:45:ad:d0:9e:f6:28:bb:88:1e:a6:e2:a4:0b:0a:1b:
f2:61:fb:08:9f:0a:da:90:3a:ea:dd:53:eb:77:1b:b3:b0:ae:
4e:43:38:3a:5e:59:44:68:10:24:34:b9:54:39:5e:66:de:cc:
60:5a:3e:61:d8:aa:0b:b6:9f:bf:dc:6a:1b:f3:16:ca:a2:c6:
aa:67:27:6c:46:1a:12:e2:32:c4:c0:b9:da:5c:7a:96:22:a7:
eb:76:82:d5:74:61:6f:a5:04:21:49:df:df:10:de:09:b3:7e:
88:01:2d:25:8e:38:4e:b7:ed:d0:8a:c3:ed:11:d0:7b:2a:88:
4c:c2:3f:80:ea:72:94:f9:ae:4f:07:b2:d1:b8:13:71:c9:48:
2c:14:2f:67:11:8e:93:e1:99:2b:38:79:d6:64:11:8d:30:37:
5a:45:6a:f6:f4:2f:86:9f:9b:42:e7:45:74:5e:6f:f5:cf:5e:
40:8e:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:35:45 2025 by rpki-client