Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/22sayLqNyf5mmpCVeQfzZdU0M-g.roa
File: 22sayLqNyf5mmpCVeQfzZdU0M-g.roa (raw, json)
Hash identifier: e7Nt6HxM+ugqjVxazGJZ+P+EJnvj8/9HUK9NFvnb4H4=
Subject key identifier: DB:6B:1A:C8:BA:8D:C9:FE:66:9A:90:95:79:07:F3:65:D5:34:33:E8
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0194CC90C2BFF691EB0911FE8CDFB796D465
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/22sayLqNyf5mmpCVeQfzZdU0M-g.roa
Signing time: Mon 03 Feb 2025 16:07:06 +0000
ROA not before: Mon 03 Feb 2025 16:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215232
IP address blocks: 95.164.52.0/24 maxlen: 24
95.164.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:90:c2:bf:f6:91:eb:09:11:fe:8c:df:b7:96:d4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Feb 3 16:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db6b1ac8ba8dc9fe669a90957907f365d53433e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:79:39:fa:96:bf:e4:62:93:96:db:4a:e1:
ab:69:b7:3b:85:e6:46:11:5e:cb:59:e8:fe:9a:bc:
4f:b8:13:cc:ed:d7:f2:87:b8:0e:11:31:37:11:f4:
2c:fb:7c:6a:47:8e:74:d3:fd:eb:42:32:30:06:f0:
60:d3:3c:f9:bf:ba:59:4a:75:79:ad:ee:fb:d2:ac:
87:d0:c7:91:00:2b:09:22:ff:8c:90:ec:e0:b4:c6:
07:80:3b:96:ef:28:38:8e:63:72:f1:db:04:bb:6a:
24:a5:d0:50:e0:1f:ae:86:bd:71:92:c5:05:40:08:
08:2a:6c:8b:4b:9c:e6:4f:a2:db:b3:c2:0c:be:22:
62:17:53:84:b3:9d:c1:c1:65:c3:49:67:38:ab:6d:
66:b2:54:80:67:fc:33:36:d6:ff:06:94:e4:6c:b8:
36:5d:d6:1c:25:b1:8e:43:a8:13:ed:bb:7e:e2:b5:
4a:e0:fa:67:13:b4:29:ed:48:8d:5e:f0:3a:e7:19:
6a:aa:e5:00:f6:ad:0d:da:6d:58:f4:12:af:2f:3e:
eb:28:e8:7b:e3:42:5c:12:ec:3c:6b:7b:dc:6c:d8:
53:65:dc:32:1f:8d:09:f0:ab:36:85:dc:f9:35:9e:
d4:58:77:e6:f4:1d:d8:0f:82:89:6e:88:88:1e:e7:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:1A:C8:BA:8D:C9:FE:66:9A:90:95:79:07:F3:65:D5:34:33:E8
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/22sayLqNyf5mmpCVeQfzZdU0M-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.52.0/24
95.164.54.0/24
Signature Algorithm: sha256WithRSAEncryption
86:98:4b:1f:d4:0b:6b:a3:0b:ec:8f:58:1b:af:c7:e8:40:42:
cc:ea:c1:26:89:e6:bc:46:6d:cd:ee:9f:eb:b9:22:6b:94:69:
20:85:79:98:6e:a5:a0:a4:c1:f5:77:f1:10:5f:e8:d6:ae:40:
81:c5:e2:14:27:43:24:4a:d8:f2:f2:e4:38:04:29:c9:97:19:
e6:21:4c:c5:70:01:c8:a9:2c:68:d0:5a:5d:c1:11:74:15:04:
e1:fa:88:14:ad:cd:17:4d:09:78:0d:ae:f6:24:ef:75:ce:db:
ea:4c:84:06:dd:dc:04:4d:7f:6d:d5:2a:0e:c9:5c:d2:5e:1b:
82:28:25:8e:a8:a8:7f:ab:e4:67:11:c2:95:a8:e4:d1:9b:e0:
90:79:22:ba:06:1f:61:04:0d:d5:68:b2:ab:7e:3b:b8:e0:45:
78:7f:71:e4:e8:28:79:d2:33:0b:b0:7b:73:e9:5d:21:e5:b5:
35:cd:8f:56:c3:8e:9e:53:95:3a:09:b2:62:80:d4:1b:f0:63:
66:c3:a5:66:dc:8f:5b:45:c7:1b:f3:3f:26:40:c0:8d:7e:0d:
36:a6:7e:e2:2b:d5:31:f6:e0:87:59:39:0e:49:5d:29:ab:06:
9f:ad:15:18:57:a7:33:e4:bb:ba:19:d3:0b:26:67:1e:de:8b:
09:e3:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:47 2025 by rpki-client