Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/qARjHzWyKUTE7F5ERh1E8TYXZVI.roa
File: qARjHzWyKUTE7F5ERh1E8TYXZVI.roa (raw, json)
Hash identifier: mlNwbOTXB5qrNVZjY8Afhn++AZlVQStLOr+lhdFzW6I=
Subject key identifier: A8:04:63:1F:35:B2:29:44:C4:EC:5E:44:46:1D:44:F1:36:17:65:52
Certificate issuer: /CN=335cd11fdbafb032534ae022abb4c8e369878a67
Certificate serial: 02810BD5
Authority key identifier: 33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/qARjHzWyKUTE7F5ERh1E8TYXZVI.roa
Signing time: Mon 07 Mar 2022 16:33:25 +0000
ROA not before: Mon 07 Mar 2022 16:33:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42011605 (0x2810bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335cd11fdbafb032534ae022abb4c8e369878a67
Validity
Not Before: Mar 7 16:33:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a804631f35b22944c4ec5e44461d44f136176552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:bf:39:8c:1c:f8:37:8a:9b:df:26:49:91:
b2:11:c1:06:80:bc:ef:fd:4a:b4:33:90:78:d4:1c:
42:83:33:6b:00:f0:19:b5:2b:bc:a1:42:03:a6:06:
fe:b4:24:59:be:1d:6a:a9:74:5c:e2:b0:cf:ce:89:
96:1b:fb:48:dd:ce:37:e9:fe:60:1f:60:9c:11:92:
17:aa:b9:44:e8:a0:dc:fe:e0:c5:dc:2d:0c:f3:d1:
ca:d4:59:99:bd:79:c1:eb:e0:fc:28:f3:77:e1:d4:
71:1f:d2:62:d4:68:bd:72:48:ba:7f:f7:7e:84:2b:
2a:02:1f:02:27:7b:3a:0f:ea:a1:47:75:31:d8:06:
b5:96:5d:da:2c:1e:99:50:b6:bd:b7:5f:ea:03:00:
19:3d:1a:1b:cd:55:88:77:77:56:d3:36:39:c3:76:
3c:e8:1a:b2:ac:a8:53:b2:36:16:42:6f:fd:00:e5:
8a:3d:74:99:c3:a3:a7:6b:a8:02:4f:59:0c:89:ad:
b8:55:b2:8b:c2:f2:1d:af:3e:41:ca:ca:ab:3b:31:
82:c0:39:47:a6:4c:bf:8d:be:2d:c8:81:c3:2d:12:
82:6b:02:5a:2e:3a:6d:51:f4:ca:c4:20:8e:45:02:
31:76:f7:01:3f:7c:19:55:e1:29:d1:32:a1:c6:81:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:63:1F:35:B2:29:44:C4:EC:5E:44:46:1D:44:F1:36:17:65:52
X509v3 Authority Key Identifier:
keyid:33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/qARjHzWyKUTE7F5ERh1E8TYXZVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:10:72:e9:64:46:d9:35:9d:ee:71:58:a3:6c:8d:8e:bf:c3:
3d:88:c6:29:4c:b4:a0:bf:b3:a8:e9:41:c7:6a:6c:8d:cc:dc:
33:0e:4f:aa:b3:b8:56:94:a9:e9:da:ea:21:91:72:77:ce:52:
60:d1:ff:41:ab:9b:32:a5:f0:18:53:11:07:f3:87:cb:e7:97:
36:c3:2f:36:a9:b4:d0:c0:10:72:aa:e0:d1:25:86:d0:55:a8:
dd:cd:e6:ec:70:66:2e:6f:6c:6a:85:25:10:b9:6f:42:58:1a:
8e:fd:c4:c7:0c:56:27:86:70:a0:32:46:4a:66:28:f3:0c:92:
51:99:02:27:c3:69:7e:0d:8d:5e:8c:aa:2b:da:21:07:9b:60:
3e:c8:2d:de:4a:e4:9d:c6:05:3a:e7:97:83:f9:0d:f3:c7:d1:
30:47:75:5a:09:d8:d1:27:2d:f6:ea:51:58:73:ee:5f:f2:68:
a0:95:49:d6:bd:1f:0c:a8:22:bb:ce:45:1f:3e:41:d7:01:e0:
6c:77:ff:72:d0:01:4b:5e:01:6b:01:f1:a2:15:b4:e6:5b:c8:
fc:41:ce:da:bf:a6:46:81:e4:59:08:6f:55:7f:06:fe:04:f9:
94:a5:de:3e:ee:04:dc:fd:e0:c0:7a:e8:3d:9c:81:7b:84:d1:
87:86:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:25 2025 by rpki-client