Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/DgshKVuclPajtcWPMSGGy9cMhGA.roa
File: DgshKVuclPajtcWPMSGGy9cMhGA.roa (raw, json)
Hash identifier: A0HBCO19boyMMPxCHmv+qzReXXjA8Ul8e5MaQ49EpYM=
Subject key identifier: 0E:0B:21:29:5B:9C:94:F6:A3:B5:C5:8F:31:21:86:CB:D7:0C:84:60
Certificate issuer: /CN=335cd11fdbafb032534ae022abb4c8e369878a67
Certificate serial: 0182208F1164CC7139BB8A08FCAEFCEC5E8D
Authority key identifier: 33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/DgshKVuclPajtcWPMSGGy9cMhGA.roa
Signing time: Thu 21 Jul 2022 11:40:23 +0000
ROA not before: Thu 21 Jul 2022 11:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 95.214.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:8f:11:64:cc:71:39:bb:8a:08:fc:ae:fc:ec:5e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335cd11fdbafb032534ae022abb4c8e369878a67
Validity
Not Before: Jul 21 11:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e0b21295b9c94f6a3b5c58f312186cbd70c8460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:0e:75:c3:60:66:b8:06:1e:62:9a:49:f0:
01:d6:a7:e0:52:43:e7:b5:59:69:2b:71:fa:bb:42:
09:f3:15:44:99:0b:8e:3f:7f:a0:54:ba:71:83:5f:
be:eb:c7:84:8b:ef:e9:0b:04:56:57:c8:56:78:f4:
19:48:56:f4:f3:55:22:14:2d:97:dd:7a:c4:aa:aa:
54:8e:dd:e6:25:75:04:fd:23:df:70:ec:39:82:01:
36:2c:ca:b2:5e:0b:fb:50:23:76:4a:66:ae:a9:d1:
77:53:ce:8f:c7:85:8c:5c:18:b4:85:5f:3b:37:a7:
c5:9c:03:14:7f:92:55:f5:c0:b2:f9:0e:71:5d:67:
21:e9:9c:48:48:64:6f:31:4d:90:98:f3:0b:a3:94:
5c:90:b2:2d:c3:82:ad:d0:77:1e:5d:2e:d0:96:7d:
c1:b1:c2:93:87:b7:11:a6:3c:22:76:14:17:f2:f2:
ac:d7:f6:cd:fe:80:72:96:6a:5d:dc:5d:c9:7f:c7:
81:df:83:80:a4:66:0e:00:f1:00:db:cc:f7:97:de:
33:5d:1d:d7:fb:af:59:f4:34:58:d6:b0:35:8f:43:
46:3f:7c:f2:ab:b4:59:f5:d0:86:71:e3:58:09:5e:
f0:91:f8:f4:8d:ae:55:f1:e8:ce:0a:c5:3b:26:b1:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0B:21:29:5B:9C:94:F6:A3:B5:C5:8F:31:21:86:CB:D7:0C:84:60
X509v3 Authority Key Identifier:
keyid:33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/DgshKVuclPajtcWPMSGGy9cMhGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.24.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e6:9e:79:f5:f6:24:78:1d:46:54:66:6f:cb:56:b3:41:4c:
6a:45:06:77:7d:fa:0c:b6:65:6b:ca:21:b7:00:9a:5f:5b:72:
68:98:9e:a1:ed:3a:f0:fb:c9:a4:bb:79:c2:30:e4:27:c3:8f:
cd:df:50:45:42:2a:71:1c:e1:25:d7:69:a6:b1:e2:70:cd:e6:
00:c1:a1:c2:d6:6b:37:36:f5:c3:2a:1b:50:e7:2c:fd:3f:ed:
a8:f8:63:e9:4a:a2:6c:e3:f4:76:f1:b9:c1:a4:46:b9:e1:ac:
9e:c4:4b:af:db:e6:02:3a:f4:bc:b1:22:8d:9d:31:6b:b7:f2:
7e:c0:53:a4:ec:ba:2f:35:29:e3:cc:99:19:48:31:d1:d9:34:
80:70:f8:30:bc:4b:6b:2c:c4:b1:4a:af:a5:03:b9:34:ab:97:
c4:c7:3a:81:26:49:4f:eb:f4:2e:e2:da:74:5c:f7:d6:ad:f0:
ac:09:b2:cf:25:57:2c:4e:16:2c:df:0c:e9:79:91:f7:84:e8:
c6:39:d8:df:1a:21:9f:e4:d3:f6:22:86:36:e5:67:30:90:23:
e5:07:82:b7:b6:a7:64:ba:b2:b3:1f:b3:eb:50:20:4b:d3:89:
00:4f:cd:50:17:d0:92:cf:fb:cb:e2:67:71:ea:d6:40:0b:77:
79:58:44:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:55 2025 by rpki-client