Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/4N5uvrjuNShBNQqLwhxizj6hANA.roa
File: 4N5uvrjuNShBNQqLwhxizj6hANA.roa (raw, json)
Hash identifier: BFvgUFid4pNJNh+Ye7fkewmppaTZod7uXDSv4LNR8OI=
Subject key identifier: E0:DE:6E:BE:B8:EE:35:28:41:35:0A:8B:C2:1C:62:CE:3E:A1:00:D0
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0194A49AA8C5FFD2FC88F374FD18CDFF6D39
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/4N5uvrjuNShBNQqLwhxizj6hANA.roa
Signing time: Sun 26 Jan 2025 21:53:06 +0000
ROA not before: Sun 26 Jan 2025 21:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 95.164.53.0/24 maxlen: 24
95.164.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a4:9a:a8:c5:ff:d2:fc:88:f3:74:fd:18:cd:ff:6d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 26 21:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0de6ebeb8ee352841350a8bc21c62ce3ea100d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:4d:aa:3d:42:c7:07:0c:89:94:11:a2:9c:
b4:b6:c4:fd:a0:9c:67:e6:80:1e:bc:c4:74:28:88:
ca:16:ef:fa:f4:99:68:c9:2b:58:f4:a6:9e:17:d2:
91:fd:8b:90:2d:1b:fe:3c:77:4b:b8:90:25:5c:6a:
65:4f:f8:e1:2c:6d:87:fd:39:fd:3a:39:2b:a6:39:
f6:72:f2:b3:39:f4:d2:3a:15:03:d5:3c:88:89:c2:
8b:67:df:6e:e4:7a:fe:4d:56:fb:6e:16:9b:2b:8b:
52:1f:a8:55:cc:0c:e5:27:63:cb:17:bc:7f:4a:41:
3a:d9:23:a4:94:ec:63:1f:60:a2:6d:a5:ab:c1:06:
91:17:71:eb:fd:66:ce:25:a9:b2:e6:57:05:ed:1c:
44:80:53:ab:1f:b6:dc:b9:a2:2f:fa:7b:3e:76:09:
1c:df:02:eb:a3:94:93:02:2b:a6:d4:f5:3b:28:a0:
39:63:5c:3f:58:9f:cc:95:3f:dc:da:bc:2f:d7:2f:
2a:94:99:4c:bc:d8:62:8f:c0:c8:35:48:6e:cb:c7:
fc:c9:73:17:31:ac:92:cf:a9:17:ac:f6:0e:2f:10:
bb:39:0a:9e:65:bb:4f:56:2d:6f:be:79:1b:96:ba:
20:ef:67:6a:6c:5c:90:95:e8:0c:e1:f1:78:c0:b0:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:6E:BE:B8:EE:35:28:41:35:0A:8B:C2:1C:62:CE:3E:A1:00:D0
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/4N5uvrjuNShBNQqLwhxizj6hANA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.53.0/24
95.164.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f7:15:59:83:f2:a3:f4:74:1d:b2:6c:22:7a:18:c8:f8:e9:
1e:26:bf:03:f0:a1:a3:d3:f0:d0:e9:25:17:f9:fc:1c:97:63:
43:df:cd:fc:67:1a:9c:d3:9d:59:90:5f:20:b4:e4:50:73:70:
fa:e4:5b:e9:cd:7c:fa:e5:32:b7:95:79:f9:05:d4:08:66:dc:
5b:bb:d5:ac:27:50:f8:bc:4c:92:a0:3b:bd:e3:a9:45:a3:67:
5c:7a:cc:0e:4a:ca:45:60:a4:ee:64:fb:f3:5b:4a:86:42:6a:
24:1a:29:ef:11:dd:8b:8d:e6:88:be:53:6c:62:a7:72:9d:dc:
02:9a:73:99:71:3e:30:91:ed:3e:6f:54:9a:bb:42:64:01:09:
e6:f1:7b:9e:ac:57:02:f2:ae:49:fe:85:fb:88:63:81:e5:b9:
82:94:70:be:84:72:b7:86:dd:ab:d8:28:86:4c:ba:5c:d7:5d:
b5:a1:18:1d:c6:de:46:d9:27:9f:e1:d6:b4:3f:2a:3e:e4:1b:
b9:cf:f4:5f:e4:93:d9:29:d6:d7:c0:da:5b:62:f6:5c:4e:24:
db:ab:63:28:43:aa:d5:bd:0f:d0:c5:8b:5a:dd:eb:ed:79:24:
16:34:75:4a:96:87:29:ec:11:1c:24:86:21:50:a7:13:99:09:
29:52:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:37 2025 by rpki-client