Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa
File: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (raw, json)
Hash identifier: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=
Subject key identifier: 42:FE:AD:E3:03:FB:8F:EB:8B:B3:17:1F:4D:61:EF:D9:91:50:58:3F
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019422FC40DF8D70B1B7D4DFC43108691403
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 95.215.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:40:df:8d:70:b1:b7:d4:df:c4:31:08:69:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42feade303fb8feb8bb3171f4d61efd99150583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:10:5d:cd:82:30:e2:29:1e:02:16:d1:12:
30:0a:7d:46:76:be:b7:b0:80:74:be:3a:a6:15:19:
ee:c0:69:6a:18:d5:be:ec:2d:ca:8a:e7:45:c5:a5:
f9:b0:80:a1:93:91:4d:0a:ea:72:a6:b0:ea:6e:df:
5e:e5:ee:0f:be:1f:1c:3a:e6:7c:dd:42:fc:cd:49:
78:ed:35:85:09:85:b0:15:58:4b:b4:72:f0:f0:84:
bf:d1:a7:d4:e3:3e:0a:52:e8:bb:46:b0:e3:11:04:
e6:0e:cc:38:2b:00:e9:70:ae:71:7b:74:35:38:67:
5e:42:8f:5f:ba:fa:4e:17:95:72:37:19:29:83:bd:
53:66:89:ee:bc:70:15:56:fc:68:55:00:74:fc:57:
bf:4c:d7:aa:b3:97:0b:1f:a9:ca:9b:42:88:ad:bc:
c5:e0:7e:78:30:59:db:58:03:cd:a7:e4:0c:6f:4b:
ff:f1:8a:12:86:6a:fc:1c:cd:38:1c:8d:ec:c2:ba:
a8:e6:8b:6d:43:35:f1:ae:c0:dc:f6:88:c0:12:cb:
2b:18:db:ba:31:e3:61:74:ba:10:91:2a:8f:df:af:
ca:2f:38:e4:7e:ea:0b:5f:af:0e:92:83:0e:32:93:
bd:34:b0:e5:0e:6f:66:f7:73:4d:cb:c1:ab:b7:c2:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:AD:E3:03:FB:8F:EB:8B:B3:17:1F:4D:61:EF:D9:91:50:58:3F
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.173.0/24
Signature Algorithm: sha256WithRSAEncryption
84:48:b8:05:c8:98:2e:e6:66:dd:c2:81:d1:06:c4:9d:fe:9c:
aa:3f:51:bc:fe:d8:c8:c0:3c:2f:44:c8:78:97:7d:48:51:d1:
16:96:43:23:b6:68:5d:de:35:5b:ca:79:07:d4:f3:9a:59:fd:
a4:73:24:06:fb:a3:33:bd:18:b3:08:67:58:fb:fa:15:1c:e9:
3b:b2:7d:a0:50:11:2d:1e:d6:d7:1b:3b:f1:63:74:e3:b9:30:
a3:e6:76:2c:3b:66:f5:4c:22:46:9f:ef:71:98:fb:51:8d:a9:
a4:ef:88:c2:7d:27:4b:21:b8:63:bf:58:f3:47:b4:ee:ea:45:
f1:fc:57:b4:5f:2f:56:35:3a:f2:f2:5e:dd:7b:db:4f:da:4b:
b7:92:0b:f5:04:b6:e1:a7:6a:80:07:dc:78:50:18:f8:ac:b8:
f5:8f:57:ee:68:6f:42:c5:4e:ac:3f:0d:b9:4e:0d:ec:21:f2:
ad:17:cf:76:5f:3f:dd:48:24:f5:71:7a:e0:e7:b1:05:c0:5f:
06:e5:e4:c8:46:c4:e0:b8:de:89:1a:06:0a:d1:29:ae:d5:52:
4d:83:9f:a6:2d:12:c9:83:de:71:d4:1d:46:0a:b2:da:ec:8e:
53:19:22:6f:1a:e9:50:af:38:59:b8:a9:d9:0e:b8:86:d9:88:
86:43:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:39 2025 by rpki-client