Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/0ScG0SYY1VJYmCkO7bu4SWFCgDw.roa
File: 0ScG0SYY1VJYmCkO7bu4SWFCgDw.roa (raw, json)
Hash identifier: nEK6JQy7FzSZP+R7rro7N3DM3RNkDpivxyHHYO4T3GY=
Subject key identifier: D1:27:06:D1:26:18:D5:52:58:98:29:0E:ED:BB:B8:49:61:42:80:3C
Certificate issuer: /CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Certificate serial: 019420D6275C6B6FAC5D196CD68B0C4BFF06
Authority key identifier: C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/0ScG0SYY1VJYmCkO7bu4SWFCgDw.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 188.95.140.0/24 maxlen: 24
188.95.141.0/24 maxlen: 24
188.95.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:27:5c:6b:6f:ac:5d:19:6c:d6:8b:0c:4b:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d12706d12618d5525898290eedbbb8496142803c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:a0:46:63:38:5c:97:9d:a0:a7:b8:a9:83:
51:41:7a:fd:3b:da:42:c8:6f:ac:b2:de:d1:2a:c0:
8a:2e:4e:4a:b8:31:6f:ac:fa:b8:3c:5b:47:57:38:
49:81:66:87:d0:76:14:54:8d:44:07:4b:27:fd:b9:
8e:a0:c6:0c:b8:74:d5:a5:3b:ca:81:9b:44:2c:26:
79:a5:2e:e9:2d:69:d5:23:db:82:15:74:81:95:b4:
36:08:fc:e6:9d:b9:f6:80:d5:e5:6a:7d:d2:2f:fc:
00:25:08:96:49:a4:01:e1:38:fe:6e:ec:58:b1:e0:
e6:f0:7d:b0:38:2a:d4:aa:05:9a:44:80:2d:19:11:
a9:57:c8:7f:a6:fb:01:71:58:b2:a3:43:0f:56:59:
6a:9e:91:a4:ae:e9:f7:6a:8b:48:55:7c:e3:8f:b4:
bb:f7:ac:a8:4d:c3:39:68:29:c1:de:53:03:29:ff:
87:ce:11:0e:50:5a:3d:1f:8a:55:14:d9:d6:b1:a4:
1a:58:a5:bc:6e:c0:ab:a0:70:73:f1:0c:f3:8b:2b:
64:4c:6e:89:d1:b1:e6:81:f1:c5:de:9a:de:4f:aa:
1c:92:52:2b:55:8d:89:46:81:bc:12:7e:c6:ed:68:
a0:e6:2c:59:39:01:d0:68:d8:1f:20:9c:39:3b:3a:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:06:D1:26:18:D5:52:58:98:29:0E:ED:BB:B8:49:61:42:80:3C
X509v3 Authority Key Identifier:
keyid:C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/0ScG0SYY1VJYmCkO7bu4SWFCgDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.140.0-188.95.142.255
Signature Algorithm: sha256WithRSAEncryption
b3:b6:f6:e4:a1:34:12:92:aa:19:27:7b:6f:d0:9e:9d:c0:00:
04:3a:4b:eb:b2:95:8b:78:05:da:77:8c:c5:d7:ea:1c:42:2c:
b9:ce:e8:4a:2e:a9:f7:a5:47:1d:d6:5a:14:98:e6:e0:09:af:
ed:dd:36:b3:2e:88:96:ab:5e:47:1c:f7:1f:a1:1a:a3:2e:fb:
9e:44:2a:46:7b:e2:b8:1c:a2:7d:91:91:53:a0:03:db:2b:e4:
bf:f5:39:0e:50:2f:23:99:13:61:a4:63:e2:d0:ba:eb:f2:7e:
4b:3b:8d:a9:36:4f:4b:21:35:18:62:e4:e8:5d:e4:f5:33:19:
9f:1f:bd:51:71:c8:8b:6a:ac:33:8c:51:15:12:a0:57:bd:10:
3a:63:a7:2b:0c:c7:44:05:35:7f:3c:45:b8:44:7c:a9:b4:ff:
b2:9f:ce:a0:ba:e7:9d:c8:51:d9:c2:a9:14:b1:c2:00:96:25:
66:f0:0c:fc:07:2d:83:a2:c7:f6:72:80:74:93:87:dc:0f:26:
9a:c8:fe:f4:ca:8c:30:4c:29:ef:12:ee:68:e0:69:40:2b:40:
5a:58:36:a6:32:6f:2e:17:46:b2:7d:1b:3c:b6:fb:ab:cc:e4:
53:b6:10:d5:40:5c:33:f7:0d:ae:8c:e3:f3:e2:4f:5d:e5:b1:
86:a2:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:04 2025 by rpki-client