Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V7qE3EU89_qUfSjrALfRH_2CImA.roa
File: V7qE3EU89_qUfSjrALfRH_2CImA.roa (raw, json)
Hash identifier: G4Y4e+bBSp1sa7YbP+2WoULxjlU0KjFcjWlllbHoDQE=
Subject key identifier: 57:BA:84:DC:45:3C:F7:FA:94:7D:28:EB:00:B7:D1:1F:FD:82:22:60
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FE604CC1D92C857713FBBCF83D65
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V7qE3EU89_qUfSjrALfRH_2CImA.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43991
IP address blocks: 95.215.57.0/24 maxlen: 24
193.19.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fe:60:4c:c1:d9:2c:85:77:13:fb:bc:f8:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ba84dc453cf7fa947d28eb00b7d11ffd822260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:ef:03:ee:11:af:21:c2:9f:05:ab:dc:b4:
ec:a4:b1:39:10:12:1b:cc:fc:8e:48:9f:a9:9d:f0:
8f:b8:36:db:ed:09:69:42:50:9d:ad:e7:58:84:7c:
8b:0f:5a:14:d8:f4:1f:27:42:c6:ae:57:11:0b:25:
c8:d5:55:b2:ed:4c:92:a4:e0:d6:c8:9b:b4:97:b3:
e2:46:f6:61:37:7d:7c:2b:51:6a:6d:fe:c2:21:20:
a6:b0:9a:2e:5c:cf:a7:a8:1c:2d:3d:ab:cc:3f:48:
f5:0f:a4:c5:0b:3e:66:40:a7:c2:ef:7a:5c:4c:de:
39:27:8c:9c:5e:f6:ac:0d:65:92:7c:93:07:7c:a3:
2a:b3:22:c6:cc:ac:13:ea:c6:cf:81:ab:5d:01:03:
b6:eb:8d:2f:29:a7:b7:03:ae:32:c1:cb:25:62:92:
a6:c7:94:ad:86:fe:f8:b7:e1:9c:2b:52:be:56:f8:
27:b7:75:03:ba:e2:60:9a:1d:98:6f:5e:cf:80:00:
e2:8d:e8:92:f6:09:db:78:be:e8:52:18:ab:f6:63:
5a:05:ae:84:62:29:b0:fa:40:5b:41:ed:24:54:3c:
b2:f9:b5:99:41:5f:4c:c8:5f:ec:86:7b:b0:1f:30:
92:c5:29:24:b3:84:13:56:aa:e1:19:ad:9e:1c:f7:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BA:84:DC:45:3C:F7:FA:94:7D:28:EB:00:B7:D1:1F:FD:82:22:60
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V7qE3EU89_qUfSjrALfRH_2CImA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.57.0/24
193.19.190.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ec:32:48:c2:dd:2a:0b:96:bd:f0:16:a1:05:62:57:33:3e:
0b:b3:53:fc:e5:5c:ab:7b:e6:5e:e5:5a:ad:ae:e6:66:5f:6e:
c2:71:05:7c:c7:f3:d4:d9:d3:01:64:61:9c:7f:3e:f9:eb:d3:
92:d9:16:3b:d3:2f:a3:8a:9e:8f:3a:a8:33:ea:02:d2:09:f2:
d3:fe:62:74:c0:8f:9f:15:47:4d:78:92:03:3f:7a:a9:29:8a:
3b:7b:a3:89:8a:81:ed:fe:c5:50:0d:53:80:b7:e3:c1:bb:7d:
38:a4:23:9d:a3:e3:df:f2:76:72:58:aa:80:39:94:65:9d:fe:
8c:26:75:2f:ca:c1:bc:65:b4:14:51:40:81:01:6f:05:e5:b1:
41:b3:e9:97:c3:36:11:ce:cd:38:14:59:e4:13:f0:22:d0:32:
04:3e:d2:6f:29:e4:33:61:0c:7f:52:bb:63:33:f4:a5:d9:75:
b8:72:d8:f6:e5:1b:b0:53:ed:ad:68:36:aa:5d:b8:b9:63:c2:
f7:55:a3:ba:58:77:70:1f:99:9f:4a:da:3e:b1:84:fd:09:6f:
c2:ef:07:a2:22:f0:89:00:05:2b:e9:de:3a:57:e6:3d:19:4d:
0b:35:7b:a1:1a:d2:fc:98:3b:98:5c:ad:a8:6a:74:3c:ee:f9:
b7:b1:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:33 2025 by rpki-client