Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa
File: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (raw, json)
Hash identifier: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=
Subject key identifier: 79:01:96:7D:3B:BD:6E:AA:79:8B:0C:EF:5B:00:2E:34:34:38:37:72
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 01942068265EEC74F036BDB08CFA285DECC0
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8561
IP address blocks: 185.95.96.0/23 maxlen: 24
185.95.98.0/23 maxlen: 24
2a00:1c3e:96::/47 maxlen: 48
2a00:1c3e:98::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:26:5e:ec:74:f0:36:bd:b0:8c:fa:28:5d:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7901967d3bbd6eaa798b0cef5b002e3434383772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:4d:99:98:38:c7:5b:cb:e1:74:95:08:2e:
37:ef:f3:ee:16:c5:51:8e:d0:74:db:3e:99:32:40:
e1:e4:6d:7b:14:8f:1c:59:32:a8:09:d5:f8:2d:6e:
13:4d:94:99:3c:44:f4:d6:3b:06:83:98:30:3a:a2:
b6:25:75:3b:b5:d2:d6:7e:d1:a0:07:8d:ac:d1:99:
28:1c:56:c9:c2:78:d6:37:6d:a6:bb:d6:e0:81:12:
55:74:e6:4c:f8:c8:19:33:d2:95:db:48:c1:03:91:
10:a4:46:a4:56:7b:ec:70:1f:17:d6:f8:26:77:74:
9c:38:e3:8a:eb:60:a3:22:f8:8e:ee:a0:fe:46:d9:
dd:80:88:2c:7a:8a:7f:ef:f6:79:5c:14:11:e6:15:
96:28:31:5a:26:92:e1:8e:df:f4:2c:db:ed:bb:b8:
8a:f9:d0:43:c8:29:81:6e:cc:73:c7:79:2b:2b:48:
7b:6b:77:8d:10:41:6e:d6:e6:72:3d:8c:1e:d3:a4:
c4:11:09:4d:d0:9d:b8:c4:73:3d:82:a9:b6:d2:3c:
1c:c7:24:73:3e:79:e2:5b:83:b4:19:66:65:28:85:
4d:84:69:f2:2d:b7:84:c5:fa:b9:22:6e:3c:56:35:
8f:8c:48:d8:cc:9d:b4:bf:43:38:83:52:5c:3d:34:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:96:7D:3B:BD:6E:AA:79:8B:0C:EF:5B:00:2E:34:34:38:37:72
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.96.0/22
IPv6:
2a00:1c3e:96::-2a00:1c3e:99:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:cf:3a:04:a1:8b:85:48:08:da:29:38:48:60:54:17:d1:0c:
e3:2b:8e:d7:6b:33:32:52:49:5b:c9:17:49:69:91:75:4e:80:
5c:ea:c4:3d:42:f8:e8:23:ee:1d:89:7f:63:c4:08:bb:bb:53:
04:c5:82:e2:bc:1a:6e:db:fb:7d:7c:70:ef:b4:c5:b4:d3:bc:
c3:e1:f2:d0:6e:91:57:56:28:8f:44:30:f0:8a:a7:0e:af:db:
99:73:96:c2:e8:90:d0:39:ac:ca:c4:af:ec:76:a9:b7:2c:11:
3d:e1:89:f6:e6:7b:45:9c:0c:ec:22:50:18:0c:28:42:47:e1:
9d:14:85:a8:e1:08:1b:c0:7e:9d:41:38:02:68:75:14:f1:e3:
5d:1e:5a:38:eb:d2:15:37:52:5b:f2:94:11:a0:71:7c:f1:81:
b2:2c:1c:98:fd:3f:3e:2c:df:fa:09:ce:36:89:a5:8d:27:78:
e0:e8:05:ed:f8:b0:c1:5e:9e:43:6d:f6:b0:61:cc:06:e9:08:
51:8c:cb:92:a1:63:39:f3:d2:9d:ef:0b:92:95:a8:4a:65:14:
01:b8:75:f1:75:a0:27:4f:02:56:6d:d8:32:4b:f8:7a:db:3a:
7c:24:cc:5d:00:fa:f0:d0:5f:1b:ff:5c:a7:9e:12:8a:ee:77:
18:18:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:49:22 2025 by rpki-client