Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/TxtAiu56rUJ0o4VUTYgOq1nElkw.roa
File: TxtAiu56rUJ0o4VUTYgOq1nElkw.roa (raw, json)
Hash identifier: cQrWPp1dTvSmSFEUMsEzvAuNSnZn+qLSnJF3Htj8Ccs=
Subject key identifier: 4F:1B:40:8A:EE:7A:AD:42:74:A3:85:54:4D:88:0E:AB:59:C4:96:4C
Certificate issuer: /CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Certificate serial: 0183324CAF4F6E53F96969BEEEB0B27E4B33
Authority key identifier: CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/TxtAiu56rUJ0o4VUTYgOq1nElkw.roa
Signing time: Mon 12 Sep 2022 15:23:49 +0000
ROA not before: Mon 12 Sep 2022 15:23:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50819
IP address blocks: 95.215.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:4c:af:4f:6e:53:f9:69:69:be:ee:b0:b2:7e:4b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Validity
Not Before: Sep 12 15:23:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f1b408aee7aad4274a385544d880eab59c4964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:bf:4e:f0:4f:36:61:c0:bf:e4:1a:82:b5:
5d:69:16:80:bb:29:03:f4:86:5d:18:f9:87:36:13:
d5:97:23:a3:db:1c:47:7d:b0:fb:a3:a9:f1:8e:04:
4c:7c:58:89:96:47:31:5f:4b:05:70:44:1b:b9:a6:
c8:e5:68:f3:db:4e:10:8f:d7:e9:f2:1e:e6:bb:1b:
79:13:a7:49:46:c2:3e:c0:87:ff:62:53:a3:ef:46:
ca:6a:c0:e6:18:f7:bd:8b:75:f9:fd:00:d5:6b:b1:
a1:2e:86:44:2e:c3:6a:df:ca:73:dd:9e:df:fb:77:
0e:42:9e:a6:da:95:53:6b:04:4b:79:95:24:8e:da:
03:f2:52:b6:7a:f2:03:cb:ed:dc:ce:18:0a:3c:28:
56:58:bf:d7:14:ac:af:1d:a9:e4:d7:33:0b:7a:32:
9b:00:90:0f:1a:b0:24:81:f4:4f:fb:5f:6d:d8:67:
91:ef:7d:29:1b:13:d2:ad:d3:31:df:46:b1:5a:4c:
b2:8a:3b:be:b2:f0:51:ed:6f:b1:de:09:25:28:68:
fc:38:26:da:f1:b9:c4:3f:75:56:d9:76:c1:4f:6a:
fd:df:0d:f1:2c:3a:f6:36:5b:b8:e4:30:cb:59:d4:
7c:1e:39:dd:0d:a0:8c:a3:3a:58:70:76:cd:ad:50:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:40:8A:EE:7A:AD:42:74:A3:85:54:4D:88:0E:AB:59:C4:96:4C
X509v3 Authority Key Identifier:
keyid:CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/TxtAiu56rUJ0o4VUTYgOq1nElkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d3:dc:1a:d5:b9:ba:2b:bd:17:f7:54:b4:25:f3:4c:95:f0:
fe:f7:17:cf:24:85:0d:cc:d3:72:e7:64:8b:6d:8e:18:e7:44:
26:62:a0:90:93:65:5b:83:e2:cc:45:9d:56:6e:fe:67:c9:22:
b9:26:79:c3:66:02:99:15:f7:3a:94:3f:92:85:56:9d:aa:ae:
6e:85:b9:c2:a4:41:83:2c:77:e8:e3:fd:8b:57:1c:82:4a:2b:
1c:2f:fa:32:72:f8:76:78:ca:ec:a3:a2:cc:23:1e:18:d6:42:
14:b3:e6:e3:d2:2e:08:7f:1d:67:9c:82:91:24:57:4d:d5:91:
ee:86:06:ca:55:7d:29:52:36:ab:ba:da:32:1e:36:b7:c4:d6:
e2:18:e8:a7:7d:bf:3b:1a:20:2c:89:3e:0b:d7:00:eb:9f:ad:
43:00:9e:18:98:e1:09:0a:21:0f:25:cb:7d:ad:f6:4e:16:9d:
a4:6e:9c:d3:4d:16:c3:cd:ae:dd:3e:5f:e5:44:76:ae:44:c6:
13:0b:0e:7d:5c:8b:dc:5a:b5:8f:b4:ce:14:af:fb:d3:fd:e0:
bf:aa:c4:45:97:81:4d:bc:8e:32:21:7e:42:db:b3:ab:a1:0d:
c2:fa:31:ff:d5:a0:a3:39:01:5a:c4:7e:7f:26:cf:5e:1a:22:
39:64:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:32:16 2025 by rpki-client