Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/RoRtMAYd4JODTDa8YURTwtOo8gU.roa
File: RoRtMAYd4JODTDa8YURTwtOo8gU.roa (raw, json)
Hash identifier: 48Zdu3GH2QzBG+ww3DpZeMUt/oQrOVe5N3F2UnzpqGQ=
Subject key identifier: 46:84:6D:30:06:1D:E0:93:83:4C:36:BC:61:44:53:C2:D3:A8:F2:05
Certificate issuer: /CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Certificate serial: 01856CCABAEF002A00CD0A05A4ED39881C8B
Authority key identifier: CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/RoRtMAYd4JODTDa8YURTwtOo8gU.roa
Signing time: Sun 01 Jan 2023 10:05:03 +0000
ROA not before: Sun 01 Jan 2023 10:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59488
IP address blocks: 95.215.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ba:ef:00:2a:00:cd:0a:05:a4:ed:39:88:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Validity
Not Before: Jan 1 10:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46846d30061de093834c36bc614453c2d3a8f205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:d1:d8:a0:72:cf:c0:11:a8:ed:96:87:96:
f9:74:d0:10:84:64:2e:a9:05:2e:2d:65:0f:9c:6e:
4d:87:e7:a9:e6:bd:e6:93:16:ed:93:03:b2:3f:b1:
ad:17:8a:65:02:74:d7:0a:03:df:47:5a:78:b9:4c:
a4:c4:de:bf:a6:c5:38:65:bb:62:cc:8a:9e:8b:79:
73:0e:60:23:74:a9:2d:83:73:75:b1:c0:85:dc:bd:
8b:c4:2e:39:91:89:52:ef:4a:1a:46:d2:f4:4d:6c:
96:20:dc:f3:30:e1:54:9f:7c:02:62:18:59:5f:25:
32:29:c4:04:db:88:6d:a4:6c:60:00:c4:f0:9e:25:
27:f9:d3:11:14:12:d7:dd:cb:0d:44:bc:11:dc:1a:
8a:45:73:02:14:9e:88:2e:19:51:0c:66:67:83:bb:
32:eb:1e:32:7b:65:17:83:dc:58:5e:31:e3:47:1c:
c5:61:7a:d5:71:dc:83:bc:f2:a9:e1:32:8e:89:c4:
5c:34:e9:c0:1a:17:52:b9:b2:c7:3d:fc:7f:48:11:
db:d8:7b:1c:f9:a3:44:02:b5:cd:eb:d9:77:e6:3e:
99:8a:16:d0:53:8a:63:a0:d6:dc:9b:1a:8c:27:6e:
5a:f1:14:e0:9d:b0:80:b2:51:55:2a:8b:98:37:17:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:6D:30:06:1D:E0:93:83:4C:36:BC:61:44:53:C2:D3:A8:F2:05
X509v3 Authority Key Identifier:
keyid:CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/RoRtMAYd4JODTDa8YURTwtOo8gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.222.0/24
Signature Algorithm: sha256WithRSAEncryption
95:26:e3:c6:a5:06:98:75:c6:7a:ee:d9:01:b5:21:7a:ba:11:
50:1d:66:b6:78:cf:b5:fb:d7:b1:ec:f4:12:54:18:7f:ee:c6:
2f:8e:99:a0:f6:bb:ac:c5:a8:14:3a:49:8b:8a:83:5c:1b:0a:
c4:dc:5f:9f:13:a6:8e:42:f0:00:4c:ce:8a:0c:20:ef:ad:8d:
b3:8f:0c:e8:5e:b8:e3:cd:3c:21:b6:86:ae:a1:52:3f:2d:a7:
aa:a8:ee:e5:fd:0c:68:3d:52:b9:8f:0b:c4:5f:c3:15:3a:ff:
53:22:69:eb:89:ee:00:8b:d0:c1:e6:e5:bf:f4:bd:b5:a2:1b:
79:fa:3b:c0:1b:0a:d3:4c:cd:bb:c4:f0:db:74:aa:7b:43:9c:
0c:ff:f2:1d:8b:11:35:b8:07:7b:d1:45:14:cc:ab:fd:fa:92:
6d:78:70:c0:92:a2:ca:70:49:1a:b8:78:0b:c8:f6:60:ad:1b:
2a:5f:15:55:da:1a:82:e3:a0:dd:02:e1:e1:b8:19:75:39:f5:
b6:1b:63:7c:ca:19:6a:be:19:88:c0:6d:c0:59:e1:39:9e:95:
14:45:4a:b6:76:b9:01:33:3d:e5:be:f3:61:d2:c3:66:99:4d:
15:1d:36:2e:01:ca:28:0b:41:20:02:5b:d4:a2:83:34:95:74:
ed:62:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:03 2025 by rpki-client