Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/GGj4CLzKtaJHmFkiyo7gnspqJoE.roa
File: GGj4CLzKtaJHmFkiyo7gnspqJoE.roa (raw, json)
Hash identifier: /Ew29sv37R0usydMWR4veG0VmwdwjSo50oqv9GJyhXE=
Subject key identifier: 18:68:F8:08:BC:CA:B5:A2:47:98:59:22:CA:8E:E0:9E:CA:6A:26:81
Certificate issuer: /CN=335cd11fdbafb032534ae022abb4c8e369878a67
Certificate serial: 01824489459626A57930DF61E38B7D20CE01
Authority key identifier: 33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/GGj4CLzKtaJHmFkiyo7gnspqJoE.roa
Signing time: Thu 28 Jul 2022 11:20:23 +0000
ROA not before: Thu 28 Jul 2022 11:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 95.214.25.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:89:45:96:26:a5:79:30:df:61:e3:8b:7d:20:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335cd11fdbafb032534ae022abb4c8e369878a67
Validity
Not Before: Jul 28 11:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1868f808bccab5a247985922ca8ee09eca6a2681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:b2:80:4a:e4:07:09:e0:47:f1:8e:7a:43:
9f:03:2e:6a:12:f0:84:ba:90:f6:57:a0:64:d8:05:
25:1a:0b:a6:bc:ad:e9:c7:ff:49:35:ce:3e:89:0d:
09:09:bd:f6:8b:7c:ea:8d:8c:d8:c2:4d:e8:b5:a2:
ff:f2:ca:2c:30:6f:c6:9d:98:4d:a1:ff:b6:01:89:
86:d1:f7:66:94:a2:b7:fd:3f:c7:22:a1:61:4e:ff:
bc:6b:8e:4d:b2:d3:cb:e0:09:be:b5:87:06:61:9d:
53:aa:b0:3c:ab:8b:bc:a6:00:25:11:cd:c1:70:47:
fc:92:a0:3e:90:4e:83:da:69:b7:49:d7:16:b3:98:
a2:68:5f:fa:f7:c2:85:00:31:7c:46:fd:bb:8d:7b:
57:1a:ff:dd:89:f3:52:34:2c:ea:a9:d0:dc:36:ed:
3b:e2:08:18:28:1f:da:71:07:16:25:92:7b:3e:10:
5c:9d:25:57:d4:11:46:58:23:64:a7:da:5e:8e:a8:
a9:2d:3b:07:fb:8e:60:ed:9f:b8:92:06:b7:58:1e:
37:26:0f:6e:19:de:78:f0:85:a8:08:4f:56:cb:c7:
f9:75:0a:33:cd:84:91:71:14:33:ad:9c:65:55:5b:
83:2c:96:1c:0e:65:54:43:0e:be:1f:12:10:c3:af:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:F8:08:BC:CA:B5:A2:47:98:59:22:CA:8E:E0:9E:CA:6A:26:81
X509v3 Authority Key Identifier:
keyid:33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/GGj4CLzKtaJHmFkiyo7gnspqJoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0/24
95.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3c:3c:4e:a7:64:f5:b5:d1:b0:bf:3f:08:5f:8f:11:b0:ee:
1c:ed:6b:81:89:5f:a7:dd:36:3c:fa:cf:81:f4:27:55:24:41:
79:b4:1a:37:7c:f7:ab:68:9a:d5:84:d2:23:5e:a4:d7:45:03:
d6:88:46:b4:1d:5c:83:9c:c8:5b:1a:b9:6f:41:ad:2a:ba:71:
36:d8:e9:e0:40:f1:97:51:d5:ed:a9:f7:16:42:91:cc:90:c8:
33:37:d8:43:92:13:28:c8:55:40:71:08:e9:1b:73:e1:3c:08:
65:31:54:e6:bb:a2:c2:a6:8d:a2:6e:bf:d1:af:06:bb:b2:da:
fe:95:94:77:79:45:5b:59:ee:71:d5:42:3e:27:6a:34:d3:5c:
f2:2f:10:83:f1:7f:a3:09:2c:5c:09:b3:81:a8:03:fe:1b:85:
82:52:af:5f:32:d2:3c:e4:d8:f3:d3:37:c1:5d:e5:e6:38:d9:
4c:7d:f8:88:4f:c5:73:61:7b:a2:2d:3d:24:42:05:5d:2f:79:
22:94:2f:df:cf:9d:41:f1:dc:b4:5a:f5:9f:aa:84:cd:a3:36:
c1:e2:8e:f4:b4:8d:62:48:fd:c8:6b:76:9b:c9:e4:13:f2:90:
e7:8d:f7:19:46:c2:31:4c:6b:c2:51:31:a1:87:92:d8:37:2e:
7d:8b:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:35 2025 by rpki-client