Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/scpx1tsDeDfxUzO1xx1MvIOWYyI.roa
File: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (raw, json)
Hash identifier: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=
Subject key identifier: B1:CA:71:D6:DB:03:78:37:F1:53:33:B5:C7:1D:4C:BC:83:96:63:22
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019421446FD4DCB347080D9BE40E50DF055E
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/scpx1tsDeDfxUzO1xx1MvIOWYyI.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196681
IP address blocks: 95.215.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6f:d4:dc:b3:47:08:0d:9b:e4:0e:50:df:05:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1ca71d6db037837f15333b5c71d4cbc83966322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:2e:8a:70:84:ca:ec:ea:e8:76:0e:8f:26:
e1:a5:a5:84:a8:2b:24:d0:9e:b3:2f:a7:90:bd:99:
f0:97:46:4b:12:70:1c:fa:3e:f6:3b:13:57:b1:69:
9a:52:83:fa:cc:17:f4:86:4c:8c:6b:bc:da:69:0f:
e6:ef:0b:e0:de:7e:04:e6:90:9f:ea:f3:99:03:c1:
cd:f3:f2:d0:7a:e4:0b:52:b0:c9:d9:50:ab:01:52:
94:4d:05:b9:19:ab:fe:11:91:b3:e8:61:08:d5:ac:
62:c9:ae:45:9a:30:61:3f:fb:e2:d9:59:67:b5:c0:
42:02:0e:0d:93:c4:0a:83:01:e7:87:85:1e:a3:78:
41:7d:6a:1a:f9:c3:06:58:2c:ea:7f:10:8a:f2:c1:
e3:55:64:70:85:7f:72:c4:52:aa:22:4f:0d:41:0b:
12:bc:61:a6:38:2a:c4:aa:f9:9f:56:e0:61:cf:11:
98:2b:e3:bb:cb:96:14:c5:f9:57:b4:74:0d:ea:0d:
1c:de:53:a7:90:91:4a:7b:7b:64:52:0a:ab:49:a9:
13:7e:6b:f4:d1:ea:f4:bd:4e:cb:96:e0:a2:51:f2:
43:c5:f8:a4:bd:55:51:83:62:95:0c:fa:6f:4e:97:
b8:d3:a6:4c:e2:21:3f:79:47:a7:ab:e1:fb:74:6f:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CA:71:D6:DB:03:78:37:F1:53:33:B5:C7:1D:4C:BC:83:96:63:22
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/scpx1tsDeDfxUzO1xx1MvIOWYyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.192.0/21
Signature Algorithm: sha256WithRSAEncryption
24:08:c7:d9:a9:e9:58:2c:42:cf:17:f1:c5:ae:dc:c7:77:51:
63:0f:d2:92:55:f7:66:a7:ac:7b:f4:ba:d1:8b:c7:c4:06:a8:
e4:b5:08:3c:c2:49:9a:f5:5c:a9:c2:e5:d7:bc:76:fe:24:d0:
e4:85:d5:59:2b:50:2c:ce:90:f4:ea:dd:f7:32:13:b1:b1:c2:
07:3f:8c:87:d5:d8:7e:57:79:01:3b:bb:1f:06:16:6e:8b:fa:
a2:6d:5b:2f:33:3e:9c:00:bc:34:6f:7d:0c:ae:dc:0f:4f:5a:
db:78:f0:7d:1f:5c:6f:e2:00:eb:3b:42:03:ca:fa:f1:e5:fa:
1f:1a:42:82:85:7e:f1:c0:23:f8:1e:09:90:d3:6b:5a:a2:a1:
19:3a:56:69:1c:df:d0:ab:8b:bf:9c:e6:22:1e:d4:ee:cd:49:
12:6d:8d:97:fa:ea:14:b2:07:76:9f:bb:b9:bb:1f:bf:3b:76:
ef:b1:f8:73:d3:63:7f:96:1e:02:67:0e:55:94:a7:7f:09:af:
46:39:66:79:55:72:f4:ac:b6:7f:3c:26:2b:0a:9d:db:5a:11:
74:7c:39:c8:18:1a:9e:ce:bb:d9:1f:c9:c6:9b:48:5d:ff:8e:
d5:f0:58:19:b4:5a:37:f7:48:82:1a:a4:35:a3:4b:3e:b4:45:
14:89:99:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRG/U3LNHCA2b5A5Q3wVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjI5M2QwMzk5MTYwNzg4YjMxZTQzODc2MGRjM2JkMWVk
ODgyZWIwHhcNMjUwMTAxMDk0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWNhNzFkNmRiMDM3ODM3ZjE1MzMzYjVjNzFkNGNiYzgzOTY2MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9IuinCEyuzq6HYOjybhpaWEqCsk
0J6zL6eQvZnwl0ZLEnAc+j72OxNXsWmaUoP6zBf0hkyMa7zaaQ/m7wvg3n4E5pCf
6vOZA8HN8/LQeuQLUrDJ2VCrAVKUTQW5Gav+EZGz6GEI1axiya5FmjBhP/vi2Vln
tcBCAg4Nk8QKgwHnh4Ueo3hBfWoa+cMGWCzqfxCK8sHjVWRwhX9yxFKqIk8NQQsS
vGGmOCrEqvmfVuBhzxGYK+O7y5YUxflXtHQN6g0c3lOnkJFKe3tkUgqrSakTfmv0
0er0vU7LluCiUfJDxfikvVVRg2KVDPpvTpe406ZM4iE/eUenq+H7dG+6swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHKcdbbA3g38VMztccdTLyDlmMiMB8GA1UdIwQY
MBaAFDMik9A5kWB4izHkOHYNw70e2ILrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEt
MjIyZmUzNDgyNjhhLzEvc2NweDF0c0RlRGZ4VXpPMXh4MU12SU9XWXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEtMjIyZmUzNDgyNjhh
LzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX9fAMA0G
CSqGSIb3DQEBCwUAA4IBAQAkCMfZqelYLELPF/HFrtzHd1FjD9KSVfdmp6x79LrR
i8fEBqjktQg8wkma9VypwuXXvHb+JNDkhdVZK1AszpD06t33MhOxscIHP4yH1dh+
V3kBO7sfBhZui/qibVsvMz6cALw0b30MrtwPT1rbePB9H1xv4gDrO0IDyvrx5fof
GkKChX7xwCP4HgmQ02taoqEZOlZpHN/Qq4u/nOYiHtTuzUkSbY2X+uoUsgd2n7u5
ux+/O3bvsfhz02N/lh4CZw5VlKd/Ca9GOWZ5VXL0rLZ/PCYrCp3bWhF0fDnIGBqe
zrvZH8nGm0hd/47V8FgZtFo390iCGqQ1o0s+tEUUiZkc
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:42 2025 by rpki-client