Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/l5wLjIjXWRZ_KLLADANlYyjPIv0.roa
File: l5wLjIjXWRZ_KLLADANlYyjPIv0.roa (raw, json)
Hash identifier: 1lqRp26N4T5cOIjlVSW2D9Cl4zwT2Ag93NKOMpX6XGg=
Subject key identifier: 97:9C:0B:8C:88:D7:59:16:7F:28:B2:C0:0C:03:65:63:28:CF:22:FD
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01951AE6698383C9A3CE491064C6DAC3FC87
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/l5wLjIjXWRZ_KLLADANlYyjPIv0.roa
Signing time: Tue 18 Feb 2025 21:11:02 +0000
ROA not before: Tue 18 Feb 2025 21:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53856
IP address blocks: 94.131.64.0/22 maxlen: 24
94.131.72.0/21 maxlen: 24
95.164.24.0/22 maxlen: 22
95.164.28.0/22 maxlen: 22
95.164.78.0/23 maxlen: 24
95.164.96.0/21 maxlen: 21
95.164.104.0/21 maxlen: 21
95.164.168.0/23 maxlen: 24
95.164.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:e6:69:83:83:c9:a3:ce:49:10:64:c6:da:c3:fc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Feb 18 21:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=979c0b8c88d759167f28b2c00c03656328cf22fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:f2:26:1e:c5:9f:7b:26:e2:6a:82:3e:43:
78:cc:72:68:44:ac:3e:82:19:30:4b:24:d9:c5:f9:
03:81:d6:10:7a:2e:70:11:8a:d0:69:e6:b1:04:7f:
ab:9f:d4:6d:c1:de:60:88:a6:73:03:8b:e6:a6:fc:
17:85:f2:26:97:f7:e3:1c:97:8b:47:f3:49:b1:86:
ec:b6:d0:68:43:e3:67:ca:51:f0:13:f9:48:88:a3:
6b:f9:e6:c3:bf:bf:9c:61:06:79:f1:c4:16:2e:0d:
29:1d:5c:ac:ef:3b:ae:e1:64:69:55:8e:74:2c:42:
04:6b:3e:b9:37:2a:43:31:ad:bc:21:c6:61:68:04:
dd:ae:79:ca:24:19:7b:68:e7:36:ea:b9:ec:58:e2:
6a:ec:d2:ff:0b:24:1f:f0:71:50:cb:f4:33:bd:42:
5d:86:d0:17:8d:05:f7:ab:d2:b9:90:1e:fc:b8:69:
b6:53:14:ed:90:a3:28:5b:3b:29:e5:c0:9c:54:77:
5f:ce:d3:d4:52:60:7f:7b:54:52:7b:61:9a:e3:43:
1d:b3:86:95:75:2e:cf:5b:bc:95:ab:de:6c:b7:68:
ca:fc:39:ee:3a:0b:a1:dd:8b:3f:3d:79:c8:b3:24:
70:fc:90:dd:da:63:f2:21:38:64:17:1a:d7:8f:73:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9C:0B:8C:88:D7:59:16:7F:28:B2:C0:0C:03:65:63:28:CF:22:FD
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/l5wLjIjXWRZ_KLLADANlYyjPIv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.64.0/22
94.131.72.0/21
95.164.24.0/21
95.164.78.0/23
95.164.96.0/20
95.164.168.0/23
95.164.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:2a:cd:a7:4c:47:7d:03:3d:79:91:55:ba:f6:a7:39:af:be:
bc:db:da:3d:7f:3c:7d:d0:ff:03:2d:03:00:b6:4f:e7:6a:75:
7f:8b:0a:48:07:b8:ac:d4:9c:05:6a:b9:3d:8b:01:20:32:05:
dc:6a:f5:c9:4c:bf:c1:f7:c4:3e:8f:1e:c5:e5:b2:5c:a8:35:
47:65:8f:f7:eb:3e:6d:fa:6e:8b:ef:49:17:14:25:e1:33:7c:
45:81:8e:78:2a:bb:f5:be:ca:77:73:b1:0d:73:d8:f7:94:6c:
76:78:3c:79:f0:70:a2:72:96:83:91:59:8a:26:cb:4d:1f:8e:
a4:84:4a:10:da:f5:57:4b:9c:57:54:f3:67:02:33:46:d4:e1:
5d:1a:54:c6:44:00:6e:47:92:89:07:42:a9:4b:d7:4f:f4:9d:
08:92:2e:bf:85:76:6c:01:95:63:8e:db:64:09:6b:9f:2e:b2:
c2:a6:88:8c:48:b9:d1:17:43:5d:de:6e:47:28:c9:f9:d5:60:
63:4e:bc:14:fd:17:27:ba:a4:e4:90:a3:93:67:58:54:ad:6d:
e7:26:0c:ce:01:17:10:9c:f4:12:d8:84:aa:35:18:96:ba:c2:
57:3a:ab:3f:37:45:60:ed:6c:2d:bb:cf:a8:3b:04:4c:8e:6b:
b6:6e:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:41 2025 by rpki-client