Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/JMRiqmtTwU851Z4KNRCnaHqyNnI.roa
File: JMRiqmtTwU851Z4KNRCnaHqyNnI.roa (raw, json)
Hash identifier: BGsTqMatG4nYY4lxrSbOOHfLU0fqm0JVVfL2eISXhbY=
Subject key identifier: 24:C4:62:AA:6B:53:C1:4F:39:D5:9E:0A:35:10:A7:68:7A:B2:36:72
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 0194CC49588D2F30C65DEA2E3D9B27C88759
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/JMRiqmtTwU851Z4KNRCnaHqyNnI.roa
Signing time: Mon 03 Feb 2025 14:49:06 +0000
ROA not before: Mon 03 Feb 2025 14:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1680
IP address blocks: 95.175.60.0/24 maxlen: 24
95.175.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:49:58:8d:2f:30:c6:5d:ea:2e:3d:9b:27:c8:87:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Feb 3 14:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24c462aa6b53c14f39d59e0a3510a7687ab23672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:75:e5:78:9a:a9:ab:68:92:7e:1f:48:07:
35:a6:69:57:96:99:23:a2:ee:40:c4:3d:66:67:27:
4b:81:2d:00:44:fb:9f:ee:e4:d2:c1:1d:bc:e3:6e:
27:01:c7:c9:46:5c:c2:55:a7:c6:ae:1e:65:60:12:
0c:2e:14:93:1c:74:96:be:dd:45:20:dc:46:76:c9:
e0:9e:b8:c5:33:40:a9:80:2f:1b:77:1c:52:ff:12:
c7:ec:3d:da:0d:14:70:a8:62:36:af:f5:ca:f0:73:
c2:56:52:31:4b:9a:0e:8f:01:91:62:ab:38:3a:ab:
42:b1:8f:40:21:59:fb:21:4b:0c:1a:bb:90:e6:d9:
7f:56:f1:e7:e3:f1:f0:1b:62:7c:74:90:62:89:7b:
b1:8c:f9:4e:3e:9a:10:8c:96:e0:43:53:09:b5:d1:
60:78:8f:a1:17:5a:7a:89:8b:22:06:87:5c:4d:43:
ea:0d:32:5b:af:9e:34:3c:8e:79:1e:0b:5a:3f:08:
62:64:4b:6c:bd:7e:55:b0:49:d0:c1:41:c0:32:95:
5b:7e:f8:d2:9b:c0:a9:cf:f2:76:94:7e:52:b6:14:
13:af:3d:9a:a2:0c:35:71:2c:14:3b:44:db:50:5a:
13:8f:8c:ec:e3:8e:8f:b2:4b:9b:2b:1c:f3:0c:13:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:62:AA:6B:53:C1:4F:39:D5:9E:0A:35:10:A7:68:7A:B2:36:72
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/JMRiqmtTwU851Z4KNRCnaHqyNnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.175.60.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d9:0f:23:5a:fa:ff:06:5f:4a:18:58:48:8c:95:18:3c:11:
b2:a3:de:24:ce:15:2b:2e:22:3b:c6:56:bf:c2:c2:32:60:63:
72:fe:e9:22:11:5c:43:71:d9:88:01:0b:71:b0:83:23:39:7a:
fc:c6:29:bb:fb:67:f6:ef:23:14:58:c5:50:32:15:b7:03:90:
18:09:27:61:a2:96:9c:06:78:59:3e:7a:da:22:d3:ff:4c:ac:
43:64:ca:df:fa:75:b4:c2:f8:52:b3:3e:36:f6:0e:6c:b5:20:
78:14:3b:b8:4f:b6:a2:18:0c:78:d8:18:95:7c:ab:a2:a7:98:
d8:c8:42:e3:ca:d1:4a:0c:18:01:be:5b:cf:5e:a2:a4:68:41:
bf:b5:89:f9:4b:a7:d1:b6:77:51:57:ca:b7:a3:a2:7a:56:8d:
3b:7d:04:b9:2c:62:81:bb:d7:7e:04:bd:28:7a:d6:25:49:89:
9d:70:15:77:50:01:a7:1f:8b:62:ab:b4:f9:b6:ad:ac:0e:70:
5b:1d:15:1c:85:8d:e3:77:c8:1f:08:4a:97:b9:1a:2a:f4:56:
0c:a6:7f:ef:ab:34:66:0b:00:0e:f0:0b:0b:36:13:f4:7e:af:
43:43:5d:e7:e0:e6:11:1d:5b:c1:1d:f3:07:20:a0:3f:9b:3c:
6c:6c:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:30 2025 by rpki-client