Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/J-sGliNsLS_ixUn-PTZXmHDWIgA.roa
File: J-sGliNsLS_ixUn-PTZXmHDWIgA.roa (raw, json)
Hash identifier: /8g6qPXdm4GDCl1zErthotcen7ABxC0zhSUnenimtXs=
Subject key identifier: 27:EB:06:96:23:6C:2D:2F:E2:C5:49:FE:3D:36:57:98:70:D6:22:00
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487ED8A87A0673C70CDD96E28C3DB8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/J-sGliNsLS_ixUn-PTZXmHDWIgA.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29066
IP address blocks: 45.95.172.0/22 maxlen: 22
45.95.172.0/24 maxlen: 24
45.95.173.0/24 maxlen: 24
45.95.174.0/24 maxlen: 24
45.95.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7e:d8:a8:7a:06:73:c7:0c:dd:96:e2:8c:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27eb0696236c2d2fe2c549fe3d36579870d62200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:0f:c5:46:99:5a:74:c3:92:12:2c:8f:f8:
66:ea:29:84:d1:27:26:fe:7a:e5:e4:02:f9:dc:f8:
79:2a:00:55:55:dc:dd:3f:77:9a:9c:32:c4:88:aa:
6c:2d:a3:56:f1:c8:f7:4b:06:2a:19:46:11:cb:04:
ce:4b:e2:62:62:9a:79:9c:df:9c:34:77:c3:0f:64:
0c:e5:bd:2d:bf:a9:44:5c:20:ce:18:f8:9c:2c:67:
c2:7c:08:73:12:f2:71:78:81:4e:16:b5:e4:c2:05:
cd:60:50:20:25:3b:73:7f:a3:1c:94:c3:99:52:32:
87:04:95:2f:53:1e:f0:b1:bf:60:fa:49:1f:4c:ba:
06:71:c0:66:20:c6:22:f5:86:f8:15:d0:c2:5c:51:
fc:00:b6:88:4e:ed:f2:67:64:de:16:25:e8:12:f7:
d0:75:a8:9d:93:8f:bc:4b:66:4f:ad:4c:48:b8:c3:
1f:76:78:07:09:96:ca:d9:ac:ad:9f:d0:58:16:1e:
ad:c8:17:55:d4:1f:cc:27:b1:e2:2a:6a:51:3f:60:
da:c6:1d:64:4b:a2:27:69:74:6b:69:5b:3e:63:a7:
9d:84:5d:eb:ae:34:82:ba:0a:ff:39:34:79:f3:44:
6e:e7:e4:b1:c6:66:da:73:04:ba:29:71:c9:ac:39:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EB:06:96:23:6C:2D:2F:E2:C5:49:FE:3D:36:57:98:70:D6:22:00
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/J-sGliNsLS_ixUn-PTZXmHDWIgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.172.0/22
Signature Algorithm: sha256WithRSAEncryption
65:f9:c3:06:bd:da:95:52:1a:e2:aa:9a:38:65:cc:cd:51:2d:
be:c6:94:f3:80:c1:57:e0:cd:0c:31:aa:06:1c:2f:fa:1c:0a:
45:75:c7:da:c6:bd:9e:b7:f0:43:19:2e:26:e9:64:a7:78:c2:
de:ba:28:ff:55:0b:4d:80:a0:9d:d9:d3:f9:03:51:5a:c5:3f:
a2:7b:6b:39:42:22:83:f2:91:6f:dd:cf:6c:8e:7f:95:af:ae:
70:01:14:91:0b:43:a9:a4:fe:0a:d5:7e:c8:25:0c:ab:26:9a:
3b:5a:c6:e0:76:3f:e6:d3:5f:d3:7a:58:01:21:99:c1:31:a2:
a0:b1:fd:da:d1:47:c0:c6:46:d3:1f:5d:7e:d7:42:32:49:7f:
74:2b:71:cd:42:47:67:f7:7c:ee:7a:a4:e5:b9:b3:7a:73:15:
78:11:b8:d8:69:c4:5f:d5:8f:1b:a1:6c:b9:b3:9a:24:ad:8d:
c7:65:e2:39:ae:53:74:14:8d:c8:3e:d1:e5:85:30:1e:31:ab:
eb:6f:4e:86:8b:21:b8:66:66:70:1e:00:07:9f:2a:d8:da:84:
14:4d:79:ef:71:37:91:d4:73:da:69:fe:a1:7f:11:51:79:a8:
af:91:1a:ea:9a:10:0d:12:9b:5c:b2:b4:dc:7b:02:ca:ac:38:
ff:01:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:43 2025 by rpki-client