Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/lfAsEG7dwa2bDq3Gxk3rYHiZF-8.roa
File: lfAsEG7dwa2bDq3Gxk3rYHiZF-8.roa (raw, json)
Hash identifier: Fsr2ietaYzD+D2gM8cVYuYumoLwV09zfnx8XK2Ip89Y=
Subject key identifier: 95:F0:2C:10:6E:DD:C1:AD:9B:0E:AD:C6:C6:4D:EB:60:78:99:17:EF
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018993585741B23EB08A842E35A28169C350
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/lfAsEG7dwa2bDq3Gxk3rYHiZF-8.roa
Signing time: Wed 26 Jul 2023 17:56:27 +0000
ROA not before: Wed 26 Jul 2023 17:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398436
IP address blocks: 95.164.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:58:57:41:b2:3e:b0:8a:84:2e:35:a2:81:69:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 26 17:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95f02c106eddc1ad9b0eadc6c64deb60789917ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:aa:59:05:51:97:e0:a7:55:19:8b:36:cd:
46:ae:8e:a5:be:ac:36:85:bd:25:21:79:f7:95:13:
dd:58:07:f0:92:99:05:ee:f5:46:1d:dc:91:b8:34:
5b:7f:d7:26:a2:3d:67:57:64:e2:8f:31:86:a7:ea:
2d:8d:e6:5f:8a:a1:4d:5e:58:78:7a:1f:f0:39:e0:
2e:c4:56:c8:c7:bd:55:5c:f9:7d:29:09:66:57:c9:
67:ac:d3:69:b2:01:2d:75:f6:11:61:99:e0:36:64:
80:37:1c:4f:d2:8b:d8:91:42:98:a4:42:56:8a:2d:
8a:2c:eb:0c:a3:8f:22:4b:ac:45:f8:62:52:9d:f1:
d2:96:62:18:22:67:c7:fa:42:e8:c9:e8:9b:d6:0d:
03:df:dd:ae:3e:f2:21:82:1a:10:62:39:33:72:08:
53:b1:47:20:1a:c7:65:87:21:19:7c:33:8e:71:85:
d7:65:e8:e5:e3:08:d1:d0:f3:f3:dd:92:28:3a:cc:
a2:92:94:31:21:0e:8d:44:1e:30:a6:e0:5d:5a:c6:
8e:eb:da:26:d7:31:14:d7:89:b3:ae:01:b9:fa:fe:
bf:18:79:e2:d2:4e:49:55:0d:07:3b:4e:56:cf:20:
29:ba:b9:ad:d3:c2:0c:f0:64:8b:ea:59:7b:9c:45:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:2C:10:6E:DD:C1:AD:9B:0E:AD:C6:C6:4D:EB:60:78:99:17:EF
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/lfAsEG7dwa2bDq3Gxk3rYHiZF-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.236.0/22
Signature Algorithm: sha256WithRSAEncryption
06:d2:83:9d:fe:64:8a:8b:53:08:cf:72:b0:f8:fe:3a:1b:29:
37:ea:00:88:30:37:16:bd:42:89:99:f2:56:71:18:1a:4e:32:
9e:1e:54:ea:cb:97:8b:4d:10:0a:9b:a6:06:62:9a:50:9a:90:
d6:70:9c:af:03:60:06:df:d9:38:09:02:cb:5e:75:f1:12:c8:
c2:ff:1b:d4:92:d1:17:14:c8:85:16:1d:03:3f:09:c4:53:12:
d8:8e:5a:72:9f:9a:ca:8b:42:f0:4c:e0:3a:6f:9e:c4:1c:fe:
78:2d:78:ee:4c:02:73:0b:ed:5c:da:21:46:8d:94:a6:3d:c7:
07:87:ba:e1:0d:15:d0:f3:f9:45:2a:d0:07:7f:dd:08:b1:5f:
7a:e2:3c:4a:b4:01:8d:59:df:7c:a8:e3:34:d6:f9:b1:5e:b9:
80:e5:3f:51:79:ce:c2:c2:23:8e:d8:86:71:18:57:cb:a0:78:
95:ed:ee:fc:9f:5f:68:0d:96:0e:e2:5e:70:a8:40:b9:28:33:
ee:33:75:4d:6b:f7:c6:e6:d1:cc:44:29:71:7f:6c:15:c5:b6:
37:cd:98:d8:8f:43:43:d8:26:51:65:fa:88:af:43:11:f0:52:
17:c4:bb:f4:6f:54:99:fc:db:f6:7a:61:45:3e:c1:ee:fb:ba:
8f:39:d5:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmTWFdBsj6wioQuNaKBacNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjMwNzI2MTc1NjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWYwMmMxMDZlZGRjMWFkOWIwZWFkYzZjNjRkZWI2MDc4OTkxN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvByqWQVRl+CnVRmLNs1Gro6lvqw2
hb0lIXn3lRPdWAfwkpkF7vVGHdyRuDRbf9cmoj1nV2TijzGGp+otjeZfiqFNXlh4
eh/wOeAuxFbIx71VXPl9KQlmV8lnrNNpsgEtdfYRYZngNmSANxxP0ovYkUKYpEJW
ii2KLOsMo48iS6xF+GJSnfHSlmIYImfH+kLoyeib1g0D392uPvIhghoQYjkzcghT
sUcgGsdlhyEZfDOOcYXXZejl4wjR0PPz3ZIoOsyikpQxIQ6NRB4wpuBdWsaO69om
1zEU14mzrgG5+v6/GHni0k5JVQ0HO05WzyApurmt08IM8GSL6ll7nEVgqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXwLBBu3cGtmw6txsZN62B4mRfvMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvbGZBc0VHN2R3YTJiRHEzR3hrM3JZSGlaRi04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX6TsMA0G
CSqGSIb3DQEBCwUAA4IBAQAG0oOd/mSKi1MIz3Kw+P46Gyk36gCIMDcWvUKJmfJW
cRgaTjKeHlTqy5eLTRAKm6YGYppQmpDWcJyvA2AG39k4CQLLXnXxEsjC/xvUktEX
FMiFFh0DPwnEUxLYjlpyn5rKi0LwTOA6b57EHP54LXjuTAJzC+1c2iFGjZSmPccH
h7rhDRXQ8/lFKtAHf90IsV964jxKtAGNWd98qOM01vmxXrmA5T9Rec7CwiOO2IZx
GFfLoHiV7e78n19oDZYO4l5wqEC5KDPuM3VNa/fG5tHMRClxf2wVxbY3zZjYj0ND
2CZRZfqIr0MR8FIXxLv0b1SZ/Nv2emFFPsHu+7qPOdWO
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:40 2025 by rpki-client