Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/j_HsyqIyd8VzahvbOv0bdDnQEpc.roa
File: j_HsyqIyd8VzahvbOv0bdDnQEpc.roa (raw, json)
Hash identifier: T18QOm8X8MLbWrGeCQNl0Qhxm2+f9jXfxa7HoA9Is/Q=
Subject key identifier: 8F:F1:EC:CA:A2:32:77:C5:73:6A:1B:DB:3A:FD:1B:74:39:D0:12:97
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0193E54451AB361FD8B220092A7A33133E35
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/j_HsyqIyd8VzahvbOv0bdDnQEpc.roa
Signing time: Fri 20 Dec 2024 18:11:19 +0000
ROA not before: Fri 20 Dec 2024 18:11:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213702
IP address blocks: 95.164.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e5:44:51:ab:36:1f:d8:b2:20:09:2a:7a:33:13:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 20 18:11:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ff1eccaa23277c5736a1bdb3afd1b7439d01297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:87:8a:f3:44:06:b1:b5:e9:92:27:53:3e:
56:d3:39:e4:6f:2f:b4:a4:17:ac:7a:2b:6c:ab:fd:
e2:a3:60:83:b7:16:96:41:81:b5:24:e8:10:38:99:
7a:d0:4b:f8:83:af:5e:8d:12:bd:10:ed:89:a9:f8:
31:20:53:23:4a:d8:53:5e:da:b8:4e:2c:1d:82:73:
e2:b8:b6:b9:d1:80:03:af:26:31:fd:61:6b:fc:46:
6b:82:89:d0:d8:f2:3b:4e:21:fd:cf:85:f8:23:b5:
be:e5:e7:57:1c:eb:28:37:f2:5d:b2:3d:a8:ef:22:
a4:6a:e5:75:03:c3:22:db:8a:65:5d:e4:ab:17:99:
b1:39:bb:5c:50:14:21:ef:39:c1:cd:e3:85:e6:6f:
c7:3c:1b:96:ee:56:a0:49:00:2a:c7:10:6f:15:93:
a0:04:40:94:71:f5:7e:75:1e:3f:33:b8:ef:9b:3c:
e1:64:53:d9:e0:4e:88:dc:35:4a:e4:2e:4b:5c:04:
10:be:c9:22:c8:75:9b:c4:1b:cf:62:0d:ca:fd:30:
c1:64:1a:02:99:a3:19:73:6d:e1:51:cb:2b:b9:fb:
f9:43:eb:b7:44:da:61:1f:64:bf:26:ca:f3:7e:5d:
9c:b6:08:84:30:55:8c:b3:48:70:1a:b8:d8:e5:8f:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:EC:CA:A2:32:77:C5:73:6A:1B:DB:3A:FD:1B:74:39:D0:12:97
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/j_HsyqIyd8VzahvbOv0bdDnQEpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.53.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:df:17:00:75:29:8a:45:12:a8:e8:0d:34:a0:d4:d0:fb:aa:
59:1d:95:72:65:06:80:ec:1b:20:2f:fe:c0:4a:29:20:65:04:
7e:25:7f:c9:27:b4:28:fe:c1:45:1a:a8:27:27:37:86:41:54:
a0:b6:a5:1a:ef:bf:dd:fa:16:d1:45:6a:c6:4b:98:9f:b0:84:
5c:4b:3f:18:7e:22:e7:c0:29:af:78:f8:d4:be:37:87:df:1b:
71:f9:64:0a:13:9f:73:44:1d:f6:8c:f0:c9:a7:e0:63:d6:8d:
f5:bc:c7:41:33:f9:bc:2e:a6:e1:48:d1:24:b1:23:81:b2:89:
c1:9f:3d:59:d2:55:51:56:bf:85:28:fe:73:dc:5b:13:a7:c2:
e7:08:17:25:09:fa:8e:65:e1:27:48:0c:fa:95:0e:95:43:4b:
d8:f6:80:f0:ab:54:25:aa:59:1c:b4:a4:7e:3a:2e:13:0e:cd:
16:e0:c8:c3:23:0b:ba:91:a8:29:c6:77:6f:28:1b:5c:a1:f7:
16:d6:56:e3:19:59:4f:63:d7:29:95:5a:f8:dd:22:9a:93:0a:
1d:57:71:98:fc:cc:84:ec:82:ab:58:17:56:e4:3f:86:cf:99:
05:6c:89:75:50:c1:db:2d:66:bc:af:6e:89:96:c6:f6:57:b1:
30:ac:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:15 2025 by rpki-client