Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/TKtYkEiGF2NNVNAEgW6PnqZq-ZI.roa
File: TKtYkEiGF2NNVNAEgW6PnqZq-ZI.roa (raw, json)
Hash identifier: obJBGOWP9K/kdlzLLatW5B9hLMovyAhw+WXAsI/EN3A=
Subject key identifier: 4C:AB:58:90:48:86:17:63:4D:54:D0:04:81:6E:8F:9E:A6:6A:F9:92
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01942067E0677F54A9F244E09A66115CBF25
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/TKtYkEiGF2NNVNAEgW6PnqZq-ZI.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216414
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e0:67:7f:54:a9:f2:44:e0:9a:66:11:5c:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cab5890488617634d54d004816e8f9ea66af992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:30:dd:f9:ec:7b:46:51:71:1e:14:c7:51:f4:
e5:10:8e:dc:b2:ea:b3:eb:ac:77:e7:af:eb:f5:83:
4a:6f:79:b3:1d:22:d9:03:35:d7:2a:ee:4c:3d:e9:
6b:64:e1:9a:54:8c:cb:75:ee:cc:b2:04:64:f7:10:
5a:5b:08:59:51:cb:e5:83:ef:d2:71:50:1f:78:10:
26:4d:0a:42:12:99:02:92:15:a0:e7:e0:bc:46:23:
b7:51:4a:ca:b3:06:92:66:f9:43:06:33:8f:e5:08:
ee:e1:91:3d:58:59:8c:2a:0d:cb:11:c3:46:ff:35:
91:08:6c:44:2e:50:c8:6e:b4:8b:e3:3f:9a:29:89:
62:50:ce:d5:9d:4f:6a:c4:ee:8b:fa:7c:93:5a:fc:
8a:36:52:43:13:3e:2c:77:8c:59:b2:86:e1:94:08:
31:14:36:ae:48:a5:c1:45:81:ee:06:9b:48:d8:72:
f9:01:63:e3:3c:12:e8:38:f4:e3:72:70:0d:d2:47:
9e:41:0b:21:79:59:9a:37:15:bb:7c:51:5e:97:47:
06:27:7f:cd:ff:12:62:fd:5c:59:aa:fe:a2:46:88:
b5:b0:03:ba:21:83:25:69:e5:58:45:4a:1b:78:ed:
02:5d:b1:2f:a4:14:e1:3c:b5:19:52:05:ef:43:c0:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:58:90:48:86:17:63:4D:54:D0:04:81:6E:8F:9E:A6:6A:F9:92
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/TKtYkEiGF2NNVNAEgW6PnqZq-ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ab:93:a4:b6:17:d7:05:a8:dc:6b:34:7a:d6:35:de:9d:ba:
e1:9e:23:08:1e:c0:99:b5:9e:87:d7:bb:89:ce:b4:28:df:26:
61:48:cd:d9:21:24:44:f7:3e:ca:1b:bb:c9:3e:3a:40:cb:96:
71:a0:b1:1c:ae:3a:e5:ff:8b:c0:86:7b:76:a2:dd:64:00:48:
bc:71:95:77:06:ce:f7:94:03:6c:b9:60:42:c8:12:c6:b0:5f:
31:a0:a2:39:bf:21:d3:a5:52:71:47:a9:9d:e6:35:6f:71:ee:
e3:ed:6e:18:e3:cf:c6:d2:e5:bb:7b:e2:6d:34:5a:46:52:d4:
b4:f9:f0:f3:b0:d4:8d:e1:fd:7b:2f:48:b5:41:97:2d:f8:6d:
92:68:c4:41:b9:f7:14:3e:20:e2:cc:2d:77:7a:23:b7:c4:86:
a8:86:3b:86:82:f6:bf:04:13:d0:5e:0c:f7:95:14:f9:cb:c8:
64:33:0d:64:05:18:15:b6:a9:92:44:14:73:9d:84:a8:01:bd:
9a:fd:62:8c:f4:41:18:02:fb:a8:60:a9:34:fc:d5:6a:26:6c:
bb:5d:5e:6e:b7:b5:28:e5:d3:01:02:60:f1:2a:e3:14:a5:c0:
b6:f0:05:8f:d0:1c:5d:c5:f4:c1:67:98:3e:fa:ba:5d:bf:76:
8a:70:15:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ+Bnf1Sp8kTgmmYRXL8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjUwMTAxMDU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2FiNTg5MDQ4ODYxNzYzNGQ1NGQwMDQ4MTZlOGY5ZWE2NmFmOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TDd+ex7RlFxHhTHUfTlEI7csuqz
66x356/r9YNKb3mzHSLZAzXXKu5MPelrZOGaVIzLde7MsgRk9xBaWwhZUcvlg+/S
cVAfeBAmTQpCEpkCkhWg5+C8RiO3UUrKswaSZvlDBjOP5Qju4ZE9WFmMKg3LEcNG
/zWRCGxELlDIbrSL4z+aKYliUM7VnU9qxO6L+nyTWvyKNlJDEz4sd4xZsobhlAgx
FDauSKXBRYHuBptI2HL5AWPjPBLoOPTjcnAN0keeQQsheVmaNxW7fFFel0cGJ3/N
/xJi/VxZqv6iRoi1sAO6IYMlaeVYRUobeO0CXbEvpBThPLUZUgXvQ8DskwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEyrWJBIhhdjTVTQBIFuj56mavmSMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvVEt0WWtFaUdGMk5OVk5BRWdXNlBucVpxLVpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9a1MA0G
CSqGSIb3DQEBCwUAA4IBAQCYq5OkthfXBajcazR61jXenbrhniMIHsCZtZ6H17uJ
zrQo3yZhSM3ZISRE9z7KG7vJPjpAy5ZxoLEcrjrl/4vAhnt2ot1kAEi8cZV3Bs73
lANsuWBCyBLGsF8xoKI5vyHTpVJxR6md5jVvce7j7W4Y48/G0uW7e+JtNFpGUtS0
+fDzsNSN4f17L0i1QZct+G2SaMRBufcUPiDizC13eiO3xIaohjuGgva/BBPQXgz3
lRT5y8hkMw1kBRgVtqmSRBRznYSoAb2a/WKM9EEYAvuoYKk0/NVqJmy7XV5ut7Uo
5dMBAmDxKuMUpcC28AWP0BxdxfTBZ5g++rpdv3aKcBWW
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:56:50 2025 by rpki-client