Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/NzbV9oxNPD-MLgtaenHZkV8d0hg.roa
File: NzbV9oxNPD-MLgtaenHZkV8d0hg.roa (raw, json)
Hash identifier: H52gfUZqxZEQgGjAhxiv5zCrKXYdro72R/Lr7lGaFVM=
Subject key identifier: 37:36:D5:F6:8C:4D:3C:3F:8C:2E:0B:5A:7A:71:D9:91:5F:1D:D2:18
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42B2C2712254281709D98EDA0C687D
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/NzbV9oxNPD-MLgtaenHZkV8d0hg.roa
Signing time: Sun 01 Jan 2023 21:35:20 +0000
ROA not before: Sun 01 Jan 2023 21:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399150
IP address blocks: 95.164.224.0/22 maxlen: 24
95.164.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b2:c2:71:22:54:28:17:09:d9:8e:da:0c:68:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3736d5f68c4d3c3f8c2e0b5a7a71d9915f1dd218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:f5:68:d8:a5:6d:ba:d3:69:c5:83:d6:6f:
03:5c:7f:b0:fd:8c:1e:8d:d8:43:5d:2e:20:2b:e9:
ce:4a:05:72:4a:b7:db:0f:36:de:be:7f:28:c6:68:
8a:cb:e3:22:3a:6c:58:ed:40:42:28:38:30:e3:6b:
c9:13:fc:45:1f:22:7e:58:a1:f8:a6:2d:75:2a:a2:
0d:a8:6d:f5:54:ec:c2:d7:ed:b1:63:c3:b2:55:a4:
ad:cd:2b:7a:e6:f1:29:5d:e1:3d:f3:45:7a:51:c5:
43:d6:b9:d6:cd:bd:d6:1d:fc:82:5d:28:5f:3d:28:
5e:4d:87:81:bf:a9:67:9a:ba:df:18:d3:4d:40:b5:
01:3e:49:f2:89:c4:d7:7e:47:3f:19:af:2a:cf:06:
0f:73:9b:74:37:2d:b6:39:5e:f0:f7:c4:98:35:d9:
de:b1:6c:46:b3:05:37:19:5f:74:bc:8e:90:51:21:
73:9d:70:1e:ae:e5:a8:5f:fc:ba:60:64:85:05:57:
1e:ee:36:4d:d4:37:9e:7d:1f:6e:12:59:0a:6f:77:
c0:4d:de:47:5a:99:ce:25:89:5e:ce:6b:db:93:d7:
d2:1d:74:8e:9b:e8:14:10:bd:83:31:86:1d:3d:68:
04:e9:e6:10:0d:cf:ca:b0:66:b1:11:3d:f7:e2:f9:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:D5:F6:8C:4D:3C:3F:8C:2E:0B:5A:7A:71:D9:91:5F:1D:D2:18
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/NzbV9oxNPD-MLgtaenHZkV8d0hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.224.0/22
95.164.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:bd:39:5c:4e:19:b3:92:79:a7:11:a9:fb:ae:15:db:0b:29:
89:bb:5f:ae:94:38:9e:40:96:59:c5:23:b3:fe:d4:0f:c6:1e:
44:cc:a2:76:a0:f7:27:26:e3:c4:5d:c6:16:78:bc:a7:d5:5c:
71:c5:e1:f5:96:4c:0c:ce:b0:c4:8c:c6:e3:c3:d7:3d:ab:8d:
69:cb:b2:9b:2f:2f:21:31:c4:5e:5e:41:d7:c8:3f:eb:dd:b1:
54:7b:f7:19:92:70:58:0e:fa:de:be:00:01:55:4e:ff:1c:b1:
cb:c6:59:12:a8:97:6c:47:f6:fb:d3:28:4b:68:d9:48:89:c8:
22:31:3a:e9:63:9c:a4:55:53:45:53:a6:02:55:4e:67:52:59:
9c:3a:c3:bf:25:d0:f0:89:35:30:a7:86:f2:01:5c:cb:c0:bc:
3a:90:dd:5f:86:5c:09:1c:7b:18:33:1d:5c:1e:d1:90:e8:fa:
6e:2d:af:43:3e:60:d6:78:77:a5:e9:23:ee:22:16:c2:e8:59:
5f:26:80:f6:8a:a5:df:2f:61:e7:e2:8b:88:a8:79:93:ef:2f:
ce:55:e6:06:72:41:bd:74:18:73:3e:3d:4c:32:49:60:fa:3f:
6b:cf:b8:0d:52:c8:fc:f1:95:32:b0:1c:15:55:3c:68:d8:c1:
8a:ee:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:11 2025 by rpki-client