Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/dpN42c2lIuDRDiqWtfVl52-O2pY.roa
File: dpN42c2lIuDRDiqWtfVl52-O2pY.roa (raw, json)
Hash identifier: zEli7D1tJLVjxYyHZylWXFUvxyav65R/D9hKDbB1ak0=
Subject key identifier: 76:93:78:D9:CD:A5:22:E0:D1:0E:2A:96:B5:F5:65:E7:6F:8E:DA:96
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0194388EEF6E12C11224FED6329E9A57C1BF
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/dpN42c2lIuDRDiqWtfVl52-O2pY.roa
Signing time: Sun 05 Jan 2025 22:21:19 +0000
ROA not before: Sun 05 Jan 2025 22:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 95.164.77.0/24 maxlen: 24
95.164.78.0/24 maxlen: 24
95.164.79.0/24 maxlen: 24
95.164.160.0/24 maxlen: 24
95.164.161.0/24 maxlen: 24
95.164.162.0/24 maxlen: 24
95.164.163.0/24 maxlen: 24
95.164.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:8e:ef:6e:12:c1:12:24:fe:d6:32:9e:9a:57:c1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 5 22:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769378d9cda522e0d10e2a96b5f565e76f8eda96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:6b:42:31:23:9b:90:e7:52:09:b2:15:c0:
e9:f3:1d:0a:f6:6c:c8:4f:4e:1d:a6:5d:a6:5a:71:
84:df:d4:32:29:b9:30:84:73:4d:27:d4:f2:fc:33:
6d:d0:00:4f:e2:16:1d:c6:b2:05:cf:03:72:9b:8a:
f6:ae:1c:cd:78:5c:e3:eb:36:67:cd:33:ac:d6:e8:
e8:c6:72:25:de:52:8a:cc:b8:a1:6a:06:48:d9:57:
01:97:e7:fa:80:59:d9:e6:44:16:c1:2e:16:1d:6d:
fd:65:68:82:6b:00:66:78:21:1c:d7:eb:a4:e6:bb:
aa:73:4e:52:68:d6:32:a6:11:d0:ac:5b:03:c3:47:
31:ce:d5:b0:73:cf:bb:32:be:69:8c:8d:2f:46:de:
f4:9d:e5:53:35:cb:4f:8a:56:f9:b2:c7:bf:1a:bd:
cc:cb:9a:cf:2a:00:85:70:44:af:82:d4:39:55:62:
09:bc:f3:15:e1:df:09:f5:3d:e2:5d:0a:7e:0d:6c:
c0:00:98:8d:16:18:0c:c6:2e:28:73:c8:0c:d5:31:
db:e5:d0:c3:b4:2e:91:f2:00:7d:32:97:30:a9:f0:
a1:d0:c9:d4:7d:0d:2b:0a:8d:1e:7a:34:da:14:c6:
64:3b:0f:29:27:8e:ce:d3:78:83:d5:7f:69:c9:92:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:78:D9:CD:A5:22:E0:D1:0E:2A:96:B5:F5:65:E7:6F:8E:DA:96
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/dpN42c2lIuDRDiqWtfVl52-O2pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.77.0-95.164.79.255
95.164.160.0/22
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
42:e0:91:ce:12:09:49:1e:4e:20:51:6b:e4:5a:4a:6b:10:97:
e6:50:12:4e:78:6b:20:a2:9b:76:75:33:2c:73:10:df:d1:08:
d8:53:9f:e2:7f:2b:99:7c:fc:06:7e:47:af:eb:ce:e1:66:18:
b9:15:3f:fd:da:df:58:76:af:5d:a2:3f:bf:4f:23:10:7f:9f:
d8:12:aa:75:c4:01:70:59:c7:0a:62:c4:cb:61:6d:7a:96:32:
10:e6:27:b4:4f:e7:23:2c:4d:c4:d8:18:47:47:a3:9a:79:71:
22:23:f6:b1:a0:fc:37:3e:10:24:15:33:3d:22:13:ac:86:07:
4b:79:51:fe:1c:84:f6:4f:7d:ef:07:4a:06:9c:1f:5c:cc:23:
c7:23:4c:10:f3:01:e7:2a:4e:18:45:5b:07:ca:04:67:38:c5:
2d:e2:ad:fa:3d:98:cd:29:20:8a:93:64:16:41:fd:e9:b1:83:
53:ba:81:16:0a:2d:a9:32:74:b8:64:ee:c5:d2:8c:e7:58:56:
78:6d:af:9a:45:5a:35:11:1a:2d:80:06:b4:a4:ac:f7:6a:b0:
43:67:06:cd:b3:db:c8:dd:ae:c6:14:c4:38:ed:6a:24:9c:25:
b4:6b:da:7b:cd:4d:7a:fc:21:61:3f:a6:1c:da:1b:0e:c3:c1:
59:cb:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:05:19 2025 by rpki-client