Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nENuRIXAPRwlljoVVbVN6tRNaOs.roa
File: nENuRIXAPRwlljoVVbVN6tRNaOs.roa (raw, json)
Hash identifier: Zxh5bgJ2TquFeY/zYRUT5pMOM0/FFZZry3w70ve4WZ0=
Subject key identifier: 9C:43:6E:44:85:C0:3D:1C:25:96:3A:15:55:B5:4D:EA:D4:4D:68:EB
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0194388FDA2F122487CFC681F95660ADF63D
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nENuRIXAPRwlljoVVbVN6tRNaOs.roa
Signing time: Sun 05 Jan 2025 22:22:18 +0000
ROA not before: Sun 05 Jan 2025 22:22:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272825
IP address blocks: 95.164.164.0/23 maxlen: 24
95.164.166.0/24 maxlen: 24
95.164.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:8f:da:2f:12:24:87:cf:c6:81:f9:56:60:ad:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 5 22:22:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c436e4485c03d1c25963a1555b54dead44d68eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:ec:d0:15:92:80:4d:c0:d2:a9:e1:1f:db:
28:27:ab:64:e1:f0:f3:ca:99:70:f9:fc:98:4c:b3:
2c:5f:46:c8:0c:2f:27:9d:98:5e:99:6b:4d:2b:5b:
86:9f:b8:bb:a6:22:02:7f:9f:24:1f:44:50:ee:0b:
d2:db:02:3c:c4:03:16:1e:50:5e:5e:cb:eb:66:27:
82:74:a6:81:f7:eb:33:fd:11:17:05:96:16:dd:70:
33:0d:3c:96:f1:fe:f8:26:3a:b2:eb:1e:ba:e0:a0:
ef:99:4c:1b:74:aa:cd:f3:e7:d4:99:53:3a:2c:60:
a5:9d:60:bc:a4:5e:74:5a:be:e3:40:67:0d:c8:41:
3b:53:e7:2b:bc:18:24:75:93:5b:37:cb:be:4f:53:
02:6e:1e:ec:38:2c:64:55:59:fb:f9:42:cd:63:56:
85:ad:9a:cf:0e:34:69:f9:e3:d7:0c:02:d0:42:fe:
4a:0c:52:0f:aa:e7:b6:06:57:8c:ca:3e:26:1f:13:
ce:36:38:16:42:5e:03:50:ff:29:9b:15:50:c5:50:
a5:70:10:c5:4a:9e:82:94:b0:ac:7e:af:c8:d3:32:
15:be:13:9f:19:c7:33:61:08:35:88:42:e0:41:af:
8a:64:6f:7d:5d:f9:44:f2:46:91:f8:5f:ae:08:41:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:43:6E:44:85:C0:3D:1C:25:96:3A:15:55:B5:4D:EA:D4:4D:68:EB
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nENuRIXAPRwlljoVVbVN6tRNaOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:4e:df:e0:ea:40:8d:79:ba:ce:28:5f:1b:52:0e:ca:d2:ef:
10:30:3e:d2:6a:9b:83:09:ad:51:84:e4:de:2c:d2:23:59:be:
8b:31:fc:80:9d:ae:ca:39:45:17:92:f5:4c:e8:61:1f:b7:1b:
75:38:0d:d1:66:62:28:7f:92:9d:c6:cb:aa:37:54:15:3f:2f:
eb:77:6b:0e:e7:d3:8e:9e:33:88:35:20:6c:75:e9:a2:cd:f2:
f9:33:12:cd:93:45:08:d2:25:05:33:88:05:e2:b7:27:cc:d1:
9f:76:2a:00:f0:8f:30:24:97:d6:97:f6:a3:7f:9c:ff:78:c3:
4a:c2:67:a3:b2:16:3b:74:f6:0f:5c:fe:4e:93:b2:a1:4c:44:
c1:69:c5:42:bb:2a:4e:b9:7c:57:05:21:2f:2c:db:2f:d2:21:
1f:20:8f:32:3e:22:c9:c3:7e:e2:66:5b:8d:3e:65:52:2d:97:
59:64:c9:6b:a4:e3:da:b2:88:29:3c:aa:ef:30:0b:c2:00:fc:
4c:96:90:ee:8f:9f:34:ee:e0:1d:66:3c:d2:8f:e0:83:7a:de:
1f:6e:6b:c5:90:71:af:e6:02:52:95:b8:a6:14:2c:b8:3b:cf:
c9:db:84:62:ea:0d:59:a0:24:dc:a9:84:d8:44:e8:f6:5b:88:
ce:0a:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:59 2025 by rpki-client