Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa
File: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (raw, json)
Hash identifier: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=
Subject key identifier: 27:0B:4B:71:3B:B9:61:57:E3:FE:FE:84:62:60:64:54:42:4E:09:29
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B20BCEA559BC56D4072D0F4F0DC808
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 95.181.160.0/24 maxlen: 24
95.181.162.0/24 maxlen: 24
95.181.167.0/24 maxlen: 24
95.181.173.0/24 maxlen: 24
95.181.174.0/24 maxlen: 24
95.181.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0b:ce:a5:59:bc:56:d4:07:2d:0f:4f:0d:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=270b4b713bb96157e3fefe8462606454424e0929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:8f:64:56:b4:5f:e4:c1:e3:40:b2:3e:4c:
78:f6:bb:1c:d0:63:56:b0:34:9b:74:91:16:43:51:
10:7b:65:f6:ed:79:74:8e:c9:57:aa:85:51:bd:c5:
cd:13:bf:79:67:b1:8f:94:30:d2:6c:27:0b:56:c8:
44:c2:d1:2a:5c:6c:61:91:73:48:39:0b:c5:1d:84:
51:8c:8c:c0:a7:c2:8f:9a:19:36:3f:38:11:b7:1b:
cf:e5:b0:59:c2:eb:a9:99:f1:4d:69:57:0f:52:2e:
37:e5:b6:7c:6b:7e:3f:4d:fd:95:a5:49:21:37:c3:
34:50:cd:68:7c:69:99:98:c5:69:66:20:84:84:0c:
3d:c7:d5:71:51:db:ea:88:8b:59:4c:cb:02:7b:59:
ef:44:5b:da:4a:aa:65:84:de:87:e4:09:b2:42:10:
9b:a0:fa:c1:7b:b5:d0:75:6d:3f:c2:1f:52:40:f5:
f1:85:f6:a6:f0:04:d2:f5:6e:06:be:8b:80:db:c1:
a5:61:43:87:a2:a0:60:07:4c:b9:51:af:d0:ce:3e:
18:b1:75:77:e9:cd:4f:d8:d5:16:a7:5f:09:46:a9:
b8:ab:3a:5d:91:e5:0c:02:ac:3d:e7:39:55:8f:3a:
64:39:f2:f4:9b:c5:07:13:86:4e:4f:cf:d3:5d:55:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0B:4B:71:3B:B9:61:57:E3:FE:FE:84:62:60:64:54:42:4E:09:29
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.160.0/24
95.181.162.0/24
95.181.167.0/24
95.181.173.0-95.181.175.255
Signature Algorithm: sha256WithRSAEncryption
3c:64:ea:7a:56:35:6b:f3:b9:92:c1:bc:ab:e7:78:3c:cc:c1:
57:cf:cc:23:ee:a3:94:04:c2:2e:2d:2c:e5:05:6b:f5:c2:c6:
33:90:ce:16:c1:6b:9e:d1:f7:f2:d8:ae:05:ef:07:0b:9b:72:
19:eb:ed:f2:70:a3:4d:d5:aa:80:c5:5e:82:41:7d:bd:e9:f3:
2b:2f:d2:19:bb:f0:0a:1f:d8:8c:aa:e0:5e:7b:d7:52:c5:40:
ad:ed:40:3e:c7:b5:e7:02:ba:ff:c9:24:c7:85:1d:57:72:56:
d0:f6:12:14:9b:27:ad:fd:b2:7e:0a:3f:05:9a:4a:dc:d9:4d:
ce:ec:81:61:ec:7d:e1:eb:ad:b7:0b:1b:4f:bf:65:36:5e:c9:
fb:1d:71:0f:6a:76:77:81:49:86:0f:c0:12:66:82:28:cd:fe:
41:aa:6a:7d:36:87:fc:6b:f2:45:a3:69:e5:fa:13:80:ca:a6:
1f:87:ca:3c:9e:73:42:f9:91:b5:ff:b1:13:07:1f:eb:cc:02:
bd:0a:af:4f:c0:d2:88:ce:50:2f:e5:47:f7:97:81:52:2d:43:
6d:c0:9a:1b:15:0f:f6:f4:5a:f3:72:28:22:e8:4d:02:fa:02:
4d:eb:17:53:d8:1d:e8:ce:1a:e9:08:c1:1a:c4:14:83:d3:c7:
82:a4:ac:11
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQhsgvOpVm8VtQHLQ9PDcgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1
YTNjMjAwHhcNMjUwMTAxMTE0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzBiNGI3MTNiYjk2MTU3ZTNmZWZlODQ2MjYwNjQ1NDQyNGUwOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2PZFa0X+TB40CyPkx49rsc0GNW
sDSbdJEWQ1EQe2X27Xl0jslXqoVRvcXNE795Z7GPlDDSbCcLVshEwtEqXGxhkXNI
OQvFHYRRjIzAp8KPmhk2PzgRtxvP5bBZwuupmfFNaVcPUi435bZ8a34/Tf2VpUkh
N8M0UM1ofGmZmMVpZiCEhAw9x9VxUdvqiItZTMsCe1nvRFvaSqplhN6H5AmyQhCb
oPrBe7XQdW0/wh9SQPXxhfam8ATS9W4GvouA28GlYUOHoqBgB0y5Ua/Qzj4YsXV3
6c1P2NUWp18JRqm4qzpdkeUMAqw95zlVjzpkOfL0m8UHE4ZOT8/TXVWylwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCcLS3E7uWFX4/7+hGJgZFRCTgkpMB8GA1UdIwQY
MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvSnd0TGNUdTVZVmZqX3Y2RVltQmtWRUpPQ1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAX7WgAwQA
X7WiAwQAX7WnMAwDBABfta0DBARftaAwDQYJKoZIhvcNAQELBQADggEBADxk6npW
NWvzuZLBvKvneDzMwVfPzCPuo5QEwi4tLOUFa/XCxjOQzhbBa57R9/LYrgXvBwub
chnr7fJwo03VqoDFXoJBfb3p8ysv0hm78Aof2Iyq4F5711LFQK3tQD7HtecCuv/J
JMeFHVdyVtD2EhSbJ639sn4KPwWaStzZTc7sgWHsfeHrrbcLG0+/ZTZeyfsdcQ9q
dneBSYYPwBJmgijN/kGqan02h/xr8kWjaeX6E4DKph+Hyjyec0L5kbX/sRMHH+vM
Ar0Kr0/A0ojOUC/lR/eXgVItQ23AmhsVD/b0WvNyKCLoTQL6Ak3rF1PYHejOGukI
wRrEFIPTx4KkrBE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:12 2025 by rpki-client