Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/WNAfVktzCh-XkfS8vtyy2T-YFD4.roa
File: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (raw, json)
Hash identifier: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=
Subject key identifier: 58:D0:1F:56:4B:73:0A:1F:97:91:F4:BC:BE:DC:B2:D9:3F:98:14:3E
Certificate issuer: /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial: 0194258F81506E8CB367E86AE8AAABEF31E4
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/WNAfVktzCh-XkfS8vtyy2T-YFD4.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49055
IP address blocks: 95.215.208.0/22 maxlen: 22
95.215.208.0/23 maxlen: 23
95.215.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:81:50:6e:8c:b3:67:e8:6a:e8:aa:ab:ef:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58d01f564b730a1f9791f4bcbedcb2d93f98143e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:e6:21:69:81:f9:95:3d:d6:ea:8c:89:d6:
0f:b9:6e:bd:bd:8f:cc:36:68:9e:45:45:02:65:20:
22:0b:3c:1f:80:8a:e3:a1:6d:1a:18:11:06:9a:b9:
93:ae:d4:2a:72:63:b9:90:90:64:69:17:13:52:a8:
7d:46:bd:85:fa:45:22:b1:de:5d:b7:d3:f3:6b:14:
e2:56:36:13:bc:4f:32:08:9b:94:67:e0:5e:b6:69:
da:98:97:c8:66:51:d2:06:5b:be:dc:f4:2e:4d:c2:
c7:60:24:76:99:3a:cc:f1:89:9f:e2:5f:91:59:46:
d3:70:6a:84:81:c7:e2:e2:01:f3:fe:cd:5d:3d:e5:
36:38:96:02:47:03:fc:a9:bb:30:e7:6c:63:2d:1b:
be:df:24:d1:3a:af:60:65:dd:4d:c3:1d:2f:ea:7c:
5b:5d:4f:24:2d:98:96:3a:d2:c6:69:82:6d:b1:56:
ed:f4:07:41:c0:0b:45:e6:d1:9a:da:63:c3:97:79:
97:74:bf:63:97:c6:0c:7f:66:9c:e4:b9:a1:30:64:
3a:25:8b:bb:37:5a:dc:9c:40:95:51:a3:0e:99:90:
e8:27:18:8b:62:4f:3e:18:f6:99:fc:6e:9a:66:c2:
40:68:c6:3c:da:8f:f2:d3:87:7c:8f:53:af:45:90:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:1F:56:4B:73:0A:1F:97:91:F4:BC:BE:DC:B2:D9:3F:98:14:3E
X509v3 Authority Key Identifier:
keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/WNAfVktzCh-XkfS8vtyy2T-YFD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.208.0/22
Signature Algorithm: sha256WithRSAEncryption
07:47:29:22:8d:64:82:5a:66:db:de:74:54:55:c5:e9:8f:18:
82:70:7e:f9:bf:4f:85:fc:ea:2d:c3:b9:3e:08:35:ac:7c:15:
e9:8d:fe:88:59:a1:27:57:c9:06:52:c2:de:4c:04:2f:bc:3e:
ac:ce:06:b7:5f:89:5f:44:55:4c:fb:a8:0c:53:53:65:70:51:
d6:7e:20:83:65:cc:0d:88:84:16:cc:e9:44:09:66:3d:b1:66:
08:16:af:4a:4e:7d:b1:fb:f3:c6:d3:22:c7:41:e8:2f:27:28:
18:04:42:4d:80:81:a5:da:a7:93:30:31:b4:fa:cb:cd:6a:3c:
f1:dc:7b:8d:80:5c:b1:17:29:85:a2:cd:2a:55:b9:21:0f:d5:
24:19:54:18:53:b8:9f:e9:60:37:67:ca:df:6b:ae:b1:81:dc:
27:1d:e0:31:f3:9a:62:38:24:e0:f9:84:15:62:cc:9d:f3:55:
38:9a:90:40:01:72:70:70:df:dc:88:e1:f9:78:ca:fc:d4:03:
90:47:5b:c4:2c:4c:dd:49:ff:1f:a3:be:11:3a:4a:69:ff:52:
16:50:45:91:26:4d:c1:52:bb:c2:c2:ab:b3:9e:d8:00:8e:7b:
d9:75:b2:96:c0:97:48:79:93:e5:af:de:5e:4b:28:cd:3b:cf:
85:94:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:00:31 2025 by rpki-client