Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/9d7-oiu-mBjw4z1zBB1dh7CSH94.roa
File: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (raw, json)
Hash identifier: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=
Subject key identifier: F5:DE:FE:A2:2B:BE:98:18:F0:E3:3D:73:04:1D:5D:87:B0:92:1F:DE
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B20B8407213372A25BD400A3AD856D
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/9d7-oiu-mBjw4z1zBB1dh7CSH94.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208626
IP address blocks: 95.181.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0b:84:07:21:33:72:a2:5b:d4:00:a3:ad:85:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5defea22bbe9818f0e33d73041d5d87b0921fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:4d:ea:70:62:27:19:e2:d1:33:39:47:98:
cc:1f:88:79:e3:92:52:e1:91:72:6d:ad:be:2f:b2:
15:01:f7:3a:a8:ee:cc:44:fb:9e:8d:61:79:50:03:
c3:49:5f:bf:76:7d:83:3d:9a:90:a3:82:39:e1:21:
62:b0:9e:d0:b3:6d:df:ce:a8:ec:1a:63:a9:42:54:
1c:da:84:cd:3e:ff:88:6f:d7:c8:26:c5:b5:0d:b3:
46:c2:31:47:94:dc:bc:55:15:8e:47:24:56:3f:97:
fb:f8:8b:2f:87:3b:e6:a4:ac:4e:1d:e9:8b:f2:80:
1d:b2:8a:95:b3:c3:4a:33:50:ef:0e:d9:67:14:fd:
2a:d4:99:03:d7:b0:89:3e:47:56:d1:39:05:cd:49:
b1:37:32:58:fe:b9:19:a5:cf:b3:c0:77:42:d5:3c:
ba:f6:70:32:f6:5f:f7:f8:85:d3:01:93:82:5a:7f:
8b:44:14:69:33:02:0e:78:ca:cc:e7:33:2d:74:81:
ae:e0:71:67:0d:f4:06:f5:e8:99:9a:f1:5f:93:39:
66:b9:e8:c1:ca:21:0f:45:0d:3b:af:dc:55:ba:ec:
5a:14:c2:57:b9:18:26:0d:31:c5:93:4e:d8:0d:22:
7a:cc:64:c8:a3:bc:5b:7c:42:58:bf:a1:6c:07:ea:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DE:FE:A2:2B:BE:98:18:F0:E3:3D:73:04:1D:5D:87:B0:92:1F:DE
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/9d7-oiu-mBjw4z1zBB1dh7CSH94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e0:71:80:72:35:19:eb:c6:a4:a5:0c:8a:97:f6:8e:c1:d4:
6b:2f:e5:4c:b7:40:fa:cc:77:ec:58:ff:46:07:6c:45:77:86:
4d:6a:8b:bd:79:ef:cc:0d:64:54:19:13:7d:07:ce:76:53:77:
8f:a6:e6:4f:7f:a7:cf:b6:94:d9:e3:46:a9:45:81:67:4c:f9:
09:9a:72:98:d1:a3:99:db:8a:b5:90:3a:9f:b4:c2:f6:95:32:
81:14:6e:2d:72:c1:62:34:dd:c3:05:07:df:5f:ee:05:a7:ec:
90:7a:5a:74:70:df:1b:23:dc:61:2b:d5:25:b6:95:e7:72:7a:
6e:3d:1b:a1:4d:84:63:4c:b7:78:c0:52:fb:65:2e:f8:d7:69:
a8:ec:2a:58:11:b2:d5:21:5e:09:08:f6:f1:a7:32:23:ec:52:
c4:01:f0:40:bf:67:e3:43:b0:f4:a3:d0:c6:85:ea:0b:eb:ac:
bc:90:cd:93:1b:1a:81:60:4d:84:8c:2b:11:41:ca:38:74:84:
b9:7e:c1:af:e3:33:f4:6d:c0:74:a9:23:71:28:4a:86:b5:07:
54:c7:95:b1:ba:23:84:2e:14:14:9b:3b:af:0f:d9:4d:69:11:
c1:4c:1d:2d:68:3b:a9:69:2a:63:bf:c8:d5:c2:51:b6:ee:ee:
5c:d3:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:09 2025 by rpki-client