Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/WFthx4wJ8PFH5uXb06xQAWE94to.roa
File: WFthx4wJ8PFH5uXb06xQAWE94to.roa (raw, json)
Hash identifier: weW05xxe5iTYc76WEbNPiz8eVjpAfX/Utd0iUxg6wto=
Subject key identifier: 58:5B:61:C7:8C:09:F0:F1:47:E6:E5:DB:D3:AC:50:01:61:3D:E2:DA
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01942067DCB3094D4379CF526749E3B5F71C
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/WFthx4wJ8PFH5uXb06xQAWE94to.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 95.214.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dc:b3:09:4d:43:79:cf:52:67:49:e3:b5:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=585b61c78c09f0f147e6e5dbd3ac5001613de2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:11:b2:50:13:ce:25:bc:2e:ce:73:1c:b9:
54:a6:d4:05:29:fb:66:f0:bd:c0:ac:96:e7:87:81:
0c:91:21:bf:ab:b3:9e:26:83:5e:07:dd:49:0c:d8:
b5:02:24:8b:87:25:1f:74:ab:18:82:4f:dd:67:ac:
85:39:11:b8:e7:d3:b5:90:2a:00:2b:a0:6e:b1:64:
eb:12:e7:73:24:c8:98:28:ac:e9:7f:e6:6b:89:78:
d0:a5:55:aa:4a:cf:15:3d:8d:2f:00:64:21:fc:3c:
81:cb:b1:20:00:9a:f9:9b:2f:f7:ce:79:73:bd:cd:
55:4d:1d:e4:b3:68:eb:d5:25:87:22:f2:13:73:89:
0b:7b:4b:e6:9c:d8:ef:2e:5b:c9:30:f1:f1:2f:f8:
9f:0a:5a:01:e3:79:fe:0f:9a:4c:31:92:06:a1:de:
1d:5e:1b:16:09:fc:b8:06:77:97:6e:ee:ee:9c:7e:
cd:ca:a0:a5:40:17:13:d9:ae:5b:99:a9:55:07:94:
d3:e5:14:0b:88:bf:40:12:94:5f:2c:15:1f:a3:c0:
36:2c:9f:75:82:48:5f:94:f8:47:38:2b:f9:e6:33:
25:b9:83:37:40:31:3e:a9:41:7b:05:f3:ed:dd:58:
c8:29:74:88:51:ff:3b:c5:40:51:3e:93:df:91:ed:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5B:61:C7:8C:09:F0:F1:47:E6:E5:DB:D3:AC:50:01:61:3D:E2:DA
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/WFthx4wJ8PFH5uXb06xQAWE94to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.175.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1c:33:97:f2:42:7b:14:96:34:fb:2b:9c:81:d8:d9:e9:ba:
30:13:1f:d9:d5:ea:bc:89:ea:b2:31:29:8f:50:ae:94:d7:6d:
81:cb:78:39:5b:a9:de:85:a9:ce:87:2e:72:d0:65:c4:ef:e2:
22:62:c2:ab:c5:8d:56:f2:8e:85:1d:6e:cd:8a:88:a8:44:d5:
1c:80:16:25:f8:12:ed:75:d5:7c:e2:65:9d:10:19:31:f3:a5:
b5:7d:ca:c3:6b:e4:82:c4:ab:7e:d6:ec:0b:7f:36:03:6f:9a:
20:30:02:c8:38:ce:7f:22:46:c8:d8:68:65:6e:71:fe:78:84:
32:ad:d4:61:54:4d:72:64:e9:c9:62:7b:66:dc:5b:15:98:12:
42:0f:d6:0f:d8:a9:7e:20:c0:d4:a7:4c:7c:c3:01:84:a7:8c:
20:4b:fb:67:87:7e:c4:74:43:17:e8:9f:70:f3:8e:ad:82:e0:
40:55:e2:f5:da:28:b0:eb:c8:c4:f2:1d:0d:7d:d7:74:c8:38:
3e:5e:b5:ca:d5:6c:80:b2:dd:18:f3:dc:09:6e:02:91:de:bf:
ff:83:88:69:ba:f8:f8:b6:60:56:0c:ea:8a:3b:eb:45:c7:21:
ef:ee:a4:01:d1:2a:e7:10:fb:23:f2:6f:ed:1b:b2:c0:1b:7a:
d3:f0:27:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:03:40 2025 by rpki-client