Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa
File: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (raw, json)
Hash identifier: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=
Subject key identifier: 28:AA:11:81:7C:CB:57:15:FC:33:48:1E:F8:FC:C4:6B:EE:ED:26:7F
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 019425FD5480F2C89899626E329E1FA69ED3
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa
Signing time: Thu 02 Jan 2025 07:49:06 +0000
ROA not before: Thu 02 Jan 2025 07:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60767
IP address blocks: 45.95.204.0/24 maxlen: 24
2a0e:3940:1000::/36 maxlen: 44
2a0e:3940:2000::/36 maxlen: 44
2a0e:3940:d000::/36 maxlen: 36
2a0e:3940:f000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:54:80:f2:c8:98:99:62:6e:32:9e:1f:a6:9e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28aa11817ccb5715fc33481ef8fcc46beeed267f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:2e:4d:92:56:6d:38:fc:e5:7a:e8:e0:b0:
96:73:28:ea:f5:44:d1:49:25:e0:25:fa:94:56:79:
1a:19:38:ec:2a:06:4f:9f:a2:b1:85:bd:0c:ed:86:
5c:e0:4b:a4:f3:e3:75:f2:f8:e7:c7:79:4c:51:50:
a6:fb:c3:de:eb:94:50:65:9c:79:ae:19:78:23:9a:
db:44:c8:9a:24:e0:a0:52:1f:16:19:06:54:86:64:
fa:12:e9:36:4c:8e:15:25:0c:f5:f3:06:de:e9:73:
89:4a:ad:32:65:e2:2b:69:a6:5a:f6:31:f1:db:28:
80:ea:3f:54:36:8d:71:2a:d8:5d:c5:79:82:87:a1:
57:f4:0e:69:fd:40:3e:21:0f:38:4a:93:46:a8:4e:
a8:f4:7e:34:7b:0d:b0:9f:11:f2:01:df:5e:35:f0:
0a:25:3c:1c:b9:d0:ac:09:46:74:7f:58:4a:1a:29:
d9:f8:de:94:0d:41:9d:40:88:34:0f:bf:9c:a1:9b:
38:98:f8:cc:38:b9:fb:07:71:2d:3e:c1:7b:92:c7:
c6:48:d0:d8:d2:7d:4e:06:e6:a5:55:53:b0:c0:21:
30:68:d2:c0:04:5f:5e:70:65:be:e8:a1:10:79:c7:
8a:73:69:3a:8a:2e:a8:86:d8:71:f5:cd:2d:9d:e8:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AA:11:81:7C:CB:57:15:FC:33:48:1E:F8:FC:C4:6B:EE:ED:26:7F
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.204.0/24
IPv6:
2a0e:3940:1000::-2a0e:3940:2fff:ffff:ffff:ffff:ffff:ffff
2a0e:3940:d000::/36
2a0e:3940:f000::/36
Signature Algorithm: sha256WithRSAEncryption
55:7b:de:9b:9f:1b:5a:1e:10:d9:32:99:92:5a:e2:89:3a:09:
e0:60:bb:c2:f1:8f:4e:23:91:fa:60:41:3a:3e:c7:70:26:f0:
e2:54:0d:f1:f0:9a:68:74:94:35:03:dd:14:fd:97:41:a2:ed:
1c:a4:9e:e6:ac:3a:ba:f1:d4:28:a8:42:b7:de:de:8b:64:da:
c2:3c:33:09:24:e5:55:9c:5e:c2:47:09:c8:b5:ff:a3:45:8a:
3d:6b:5b:cd:0d:6b:af:a7:f5:c5:33:19:9d:d1:dd:7d:db:9d:
c4:4e:e9:eb:88:35:0e:65:bc:1d:e0:ab:84:45:47:67:84:e2:
7f:92:52:82:72:94:f2:8a:f6:6b:81:e9:75:34:08:32:7e:57:
f5:0e:16:30:e7:31:4d:50:d5:1f:c6:ae:a7:20:50:1e:e3:61:
73:c6:4e:35:07:76:64:75:d0:41:29:a2:52:07:11:f1:33:cb:
0b:42:f6:4e:07:0c:93:09:34:87:94:ae:ba:f7:fd:73:9b:46:
59:9a:41:6c:21:ff:be:13:7b:e2:8c:60:13:12:36:af:83:10:
e5:b4:aa:c9:9d:1b:20:62:84:7d:a4:2e:4d:04:0c:c9:6c:c6:
ca:95:28:f4:02:ea:df:2b:cc:ee:d9:3f:ff:b5:3f:ab:a5:06:
37:b0:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:52:21 2025 by rpki-client