Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/whs35ID0KPXfUpdhga1ahUCczwU.roa
File: whs35ID0KPXfUpdhga1ahUCczwU.roa (raw, json)
Hash identifier: 1eB1x5PLL7iEHMoofVrqivua/I3xM8JZwdQv8T/FlFM=
Subject key identifier: C2:1B:37:E4:80:F4:28:F5:DF:52:97:61:81:AD:5A:85:40:9C:CF:05
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0194424581AEEACA5D88AAADD344376FF5BE
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/whs35ID0KPXfUpdhga1ahUCczwU.roa
Signing time: Tue 07 Jan 2025 19:37:18 +0000
ROA not before: Tue 07 Jan 2025 19:37:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:45:81:ae:ea:ca:5d:88:aa:ad:d3:44:37:6f:f5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 7 19:37:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c21b37e480f428f5df52976181ad5a85409ccf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:23:7e:b9:73:64:f9:c0:fb:1e:64:77:e4:
90:a8:e9:82:09:79:44:0a:a9:24:87:7e:3d:d0:61:
22:2c:d5:d0:56:81:79:26:8c:ba:60:d8:6f:74:c0:
03:a5:f7:3d:8e:01:a0:10:2f:69:c0:c9:1a:68:48:
cd:ef:39:41:53:d8:e3:27:78:17:53:7d:0e:11:13:
e5:ff:2c:db:74:70:5a:75:4b:90:a9:51:6c:bc:a1:
08:d9:22:e0:09:c3:b5:25:98:57:fe:ee:ff:5b:50:
e6:be:fc:0a:0f:37:7d:28:ce:be:4e:b6:cf:38:fd:
02:e6:8f:30:e5:94:f7:ad:98:1b:0a:18:83:11:d4:
49:bc:3f:02:cc:d9:62:55:30:e0:1a:d9:0a:d3:7d:
32:cb:13:77:d2:30:07:02:09:5a:9a:ed:fd:89:b9:
29:3f:24:dd:2b:c2:84:01:69:1c:8d:3c:9c:11:24:
0f:1e:d5:de:63:59:d4:15:a3:12:83:3a:6e:47:d6:
dc:eb:03:19:b5:80:85:5b:cd:c9:80:94:43:96:5d:
39:2d:87:73:72:1f:d9:e0:0a:40:52:e8:77:b7:31:
f0:5b:0f:b7:3a:b6:9f:d5:ff:15:47:dc:10:97:a2:
fa:79:cd:c8:3c:a0:f0:09:6b:2a:7f:83:8a:74:58:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:37:E4:80:F4:28:F5:DF:52:97:61:81:AD:5A:85:40:9C:CF:05
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/whs35ID0KPXfUpdhga1ahUCczwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a3:7c:de:33:7a:94:90:1f:3e:03:98:8e:fa:b9:74:19:ab:
54:af:86:b0:52:ea:1f:e5:dc:9d:97:c8:bf:c8:b2:4b:a3:95:
3e:92:8a:e4:8f:b1:3b:8a:c7:72:db:07:e0:61:17:44:eb:d1:
7e:ad:38:7e:35:86:6c:fa:6e:86:2e:2c:12:1b:6d:b0:73:8b:
a1:69:4f:fb:3f:87:2f:13:01:3e:2e:76:ce:09:1a:1d:43:5c:
d1:30:25:25:6a:49:b0:f5:f4:16:78:2c:fd:8a:72:bf:64:dd:
9f:e4:1e:c8:df:bc:17:96:14:6c:e9:74:40:1a:79:98:0b:5f:
39:b2:e8:9a:d8:a0:08:20:62:da:28:c7:6b:0e:7d:d5:40:17:
73:37:97:95:50:0e:92:ff:5d:b4:5c:ad:6a:75:d4:e6:cf:df:
58:c4:96:b8:f7:28:22:e4:d1:3c:8e:00:24:c3:ca:5e:3e:1e:
49:b1:ca:1a:82:03:19:79:d7:25:07:c3:1e:e8:29:98:c0:57:
ee:9c:45:a8:40:d6:d0:d7:a6:cd:0a:10:d1:d5:77:d9:eb:1a:
06:37:b5:6e:b3:6e:f1:82:54:9e:d4:89:fe:79:40:2d:62:0a:
09:3a:6f:34:84:7b:e5:ea:30:c3:83:77:db:ad:eb:81:47:05:
92:5a:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:51:03 2025 by rpki-client