Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/XQnA4fzSokv349YJHCcSPvW1wpY.roa
File: XQnA4fzSokv349YJHCcSPvW1wpY.roa (raw, json)
Hash identifier: 1T4l/3zq9SIbzqOCRSx+UROHUX/iz06EO7SpCd6NyJk=
Subject key identifier: 5D:09:C0:E1:FC:D2:A2:4B:F7:E3:D6:09:1C:27:12:3E:F5:B5:C2:96
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 0195656E444717D04BCF63DEAEC8AABF1E98
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/XQnA4fzSokv349YJHCcSPvW1wpY.roa
Signing time: Wed 05 Mar 2025 08:31:19 +0000
ROA not before: Wed 05 Mar 2025 08:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63025
IP address blocks: 45.95.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:6e:44:47:17:d0:4b:cf:63:de:ae:c8:aa:bf:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Mar 5 08:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d09c0e1fcd2a24bf7e3d6091c27123ef5b5c296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:ec:ed:5f:3f:15:2d:3f:b5:ae:8d:d9:6b:
fe:0b:a8:82:b6:a2:b4:71:a5:f5:49:02:95:b8:1a:
b8:f4:5e:fa:f6:89:18:bc:6c:0d:fd:cb:b8:de:c8:
11:2b:03:4d:20:a6:2d:f7:57:b6:a8:3b:99:63:b9:
cd:8c:f0:d8:45:7b:d7:6d:7c:99:7a:f1:e9:c4:05:
0f:fe:4c:50:45:a4:80:85:3a:07:0b:ed:f3:3b:1f:
b8:83:c5:bc:8a:f2:e6:f3:f6:58:ab:58:23:e1:c5:
0c:1b:c8:52:c4:0f:dd:3e:8e:37:0a:8c:27:b8:ad:
c2:04:56:af:82:03:01:f5:46:cd:b3:d8:0b:c2:aa:
6a:e2:a2:27:91:d3:9f:5f:aa:42:4a:4c:5e:eb:53:
c3:c2:44:0f:18:ad:ab:c2:eb:b1:f0:7b:95:28:50:
d2:00:c5:cc:a6:b5:dc:a5:86:75:9b:17:a8:74:52:
bc:59:7d:76:6d:05:44:55:d6:7d:7a:d0:54:5f:90:
92:c9:75:c9:2b:90:72:8c:d4:ad:b0:6b:52:7d:88:
95:73:b7:43:7f:51:8f:aa:73:d5:bd:88:93:c1:3d:
32:fe:35:84:56:ed:d5:a8:85:4b:10:f2:8b:fe:a1:
6a:86:39:7a:1a:4f:49:7d:28:95:cf:42:33:d3:7c:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:C0:E1:FC:D2:A2:4B:F7:E3:D6:09:1C:27:12:3E:F5:B5:C2:96
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/XQnA4fzSokv349YJHCcSPvW1wpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
11:76:1e:35:e4:6f:c6:9a:f5:cf:49:22:b5:6d:e5:37:f5:cf:
72:17:66:3f:b9:62:1f:2f:de:86:5a:31:42:8a:d0:c3:d3:87:
df:c4:a2:e7:5a:d0:37:ab:19:c1:d1:eb:05:d2:57:d4:af:64:
1f:01:d8:11:97:64:ad:a6:53:26:96:b2:b3:c4:f5:88:df:29:
bf:21:ef:0a:0c:73:14:05:28:88:1b:1a:34:a4:4d:61:b0:75:
4b:f5:26:39:bf:ac:99:de:5e:93:46:43:e9:b4:03:3d:50:41:
a8:c7:11:c3:e4:2b:c6:a5:04:a8:7e:68:13:c2:ff:da:cd:30:
1b:93:68:15:a6:79:78:5e:8c:64:47:ef:31:03:e2:90:8b:10:
25:44:59:5e:a0:b7:bd:16:5d:bb:73:d6:a7:d6:81:e4:fd:fe:
14:33:dc:6e:65:cc:1c:4d:bd:34:b0:d2:5e:06:68:f2:a5:29:
d4:80:92:c5:5a:6b:46:fa:b8:7e:4f:66:f7:3d:fe:a1:25:d5:
cc:46:22:a5:56:95:58:f6:35:16:50:44:c6:72:a5:4b:9c:82:
14:b4:7e:a8:07:e1:f2:2c:76:f5:85:d1:93:e5:b4:ef:38:15:
1f:4a:ca:b2:77:cc:64:26:0b:2a:5f:6a:0a:23:42:13:9e:8b:
63:18:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:21 2025 by rpki-client