Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/f5t7TFFLJ6eVzGO3VPTFIHdhhVo.roa
File: f5t7TFFLJ6eVzGO3VPTFIHdhhVo.roa (raw, json)
Hash identifier: hVo5HmKPNOyU1ejExC2VR32sZ7GoBIzBwGmWpLsdJ2o=
Subject key identifier: 7F:9B:7B:4C:51:4B:27:A7:95:CC:63:B7:54:F4:C5:20:77:61:85:5A
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3AB419F8B0F1CCAFEC6E09EE191E3
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/f5t7TFFLJ6eVzGO3VPTFIHdhhVo.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35583
IP address blocks: 95.164.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ab:41:9f:8b:0f:1c:ca:fe:c6:e0:9e:e1:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f9b7b4c514b27a795cc63b754f4c5207761855a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:f6:3e:5c:05:45:ae:21:a3:2c:42:96:a2:
8e:8f:3b:0d:41:a7:e2:2b:89:6d:d6:f6:44:11:a9:
29:d1:98:e8:4f:39:f0:a5:1e:16:f2:8a:8b:11:29:
45:4a:f6:76:12:c1:f4:e9:21:80:e0:10:5b:87:c3:
da:06:61:ef:07:27:8f:42:42:5a:a3:aa:40:c1:46:
be:17:74:e7:89:f3:0a:55:d0:2a:0f:26:9a:27:65:
d1:b0:e6:f8:3f:7e:0c:b2:e3:b5:de:c5:cd:df:a3:
6f:38:1e:52:8d:a0:fa:35:99:4b:ce:a3:a0:62:c5:
cd:71:92:a7:07:5d:2a:37:4e:9d:b0:4d:44:ba:32:
72:3b:e4:85:16:c4:d4:c3:65:71:32:ae:8f:9e:03:
d9:1e:96:55:bb:bd:ed:35:c8:22:8f:2e:de:3d:39:
f3:94:f5:dd:d0:4f:e2:43:4a:e8:e0:79:df:74:14:
d5:da:a2:9c:8e:7b:40:1b:67:2a:71:c3:ed:00:3d:
5f:1b:92:a9:ac:95:28:75:9a:38:34:33:e7:47:b6:
38:38:bd:62:b7:2d:92:36:84:4a:28:53:e6:16:07:
ac:61:4e:90:b5:3c:34:b7:2a:cd:8c:55:b5:4d:23:
6e:52:34:c2:e3:30:d7:27:9e:75:16:13:03:40:1a:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9B:7B:4C:51:4B:27:A7:95:CC:63:B7:54:F4:C5:20:77:61:85:5A
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/f5t7TFFLJ6eVzGO3VPTFIHdhhVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0d:a6:2b:19:77:ea:46:93:4a:16:ad:0a:fc:3d:a1:da:84:
b6:d2:a1:d1:77:8a:f5:b2:cf:67:d5:bd:95:6b:04:0e:a4:e2:
13:bc:74:18:e6:4d:77:f4:0d:64:6b:d8:90:b4:ad:f9:76:f9:
74:ce:13:d5:f5:34:4e:4b:ca:73:07:6b:d9:12:f5:ee:b0:6b:
14:57:44:5d:22:a0:0a:e2:6b:fc:c0:5f:55:4f:84:57:d6:dd:
4f:ca:6e:00:e4:1b:a3:f6:c4:ad:22:30:7f:10:60:62:7f:e3:
f4:41:18:42:2d:96:c0:8c:0e:fe:c7:15:75:6f:de:4e:d9:87:
1c:20:64:18:27:a2:a7:6c:4c:87:a3:27:53:31:10:9f:a1:7c:
45:a6:b8:df:39:72:c0:a0:1c:31:40:99:02:4d:d5:82:e9:ea:
8b:26:fb:11:82:0a:be:03:f7:f1:13:a5:72:51:89:dc:27:ac:
89:f1:72:77:6c:a7:a2:38:ea:e5:fc:26:46:03:d0:b2:ee:31:
4e:c8:41:9b:f7:16:c6:36:b2:b8:c5:bc:82:47:d5:59:26:13:
5a:a1:76:22:40:17:7e:ec:8c:c0:04:1c:81:05:4c:c4:b4:2c:
41:10:26:dc:5b:ef:7c:69:13:4c:41:23:58:3c:4c:ec:86:c4:
c2:9e:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:05 2025 by rpki-client