Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/1-L-JDC3WGOZA5twynjFnC7YtGIo.roa
File: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (raw, json)
Hash identifier: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=
Subject key identifier: F8:BF:89:0C:2D:D6:18:E6:40:E6:DC:32:9E:31:67:0B:B6:2D:18:8A
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019421B216F096D8857CC97D186DCE3C5D34
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/1-L-JDC3WGOZA5twynjFnC7YtGIo.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39923
IP address blocks: 95.214.28.0/22 maxlen: 22
95.214.28.0/23 maxlen: 23
95.214.28.0/24 maxlen: 24
95.214.29.0/24 maxlen: 24
95.214.30.0/23 maxlen: 23
95.214.30.0/24 maxlen: 24
95.214.31.0/24 maxlen: 24
2001:67c:2d64::/48 maxlen: 48
2001:67c:2d64:cca::/64 maxlen: 64
2001:67c:2d64:ccb::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:f0:96:d8:85:7c:c9:7d:18:6d:ce:3c:5d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8bf890c2dd618e640e6dc329e31670bb62d188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:33:32:0d:08:8b:4a:be:59:8c:eb:4e:16:
55:fc:a5:31:7b:6f:2a:a3:3d:57:ad:bc:4c:a6:3c:
d0:da:7f:05:7d:65:a8:e3:8a:fe:0e:e6:ae:14:10:
5d:dd:ac:61:ce:69:2f:36:2a:96:3a:12:98:60:14:
8c:d1:52:60:26:5a:32:6f:cc:e2:70:40:92:08:5e:
8d:54:e0:64:4c:44:37:27:b6:30:d3:49:24:1d:56:
53:07:b4:27:72:d3:10:eb:91:18:ea:f5:82:f3:f7:
31:d9:6a:44:26:de:d7:64:27:c0:fe:b3:a2:39:3c:
81:23:e3:38:5e:f0:61:7d:17:11:4c:d0:48:d9:c2:
52:82:9f:60:0e:7e:80:e5:53:aa:18:dd:3a:7d:ba:
28:83:4e:8e:05:fb:7e:f7:25:3c:52:35:35:02:cb:
7f:4d:fe:1e:f4:69:1d:87:e1:b2:08:0c:e8:87:12:
2f:64:21:5c:41:10:af:81:7b:63:bd:36:a8:84:aa:
7a:0a:dc:8b:8f:d7:5f:f8:f7:30:ed:11:f1:02:63:
44:c3:41:e5:16:33:bf:11:4f:69:29:e8:32:bc:cf:
04:53:13:8d:36:a6:98:93:32:78:8a:86:99:99:34:
54:23:26:05:71:c3:5f:9f:38:ca:96:da:ae:b4:de:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:89:0C:2D:D6:18:E6:40:E6:DC:32:9E:31:67:0B:B6:2D:18:8A
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/1-L-JDC3WGOZA5twynjFnC7YtGIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.28.0/22
IPv6:
2001:67c:2d64::/48
Signature Algorithm: sha256WithRSAEncryption
96:8d:98:68:e5:ba:5a:13:41:b4:44:27:5f:b4:50:a5:96:90:
6f:ad:d8:be:a2:79:4e:e5:28:f9:35:31:59:2e:18:d6:46:28:
32:2a:61:cc:4b:65:0a:96:17:ea:a5:35:03:1b:ce:90:11:24:
34:db:90:e4:7e:17:b4:89:68:20:19:82:2a:f1:fd:d0:60:8f:
9e:94:55:bd:f9:d8:17:64:65:4f:89:cb:6f:74:b6:d7:ad:63:
f8:cf:aa:ed:8a:d0:b0:d0:84:89:bd:02:f7:e8:47:ba:13:92:
2d:ee:da:7d:f7:83:6f:41:71:54:3a:7c:df:03:3f:6d:51:a0:
5b:27:ce:21:53:f0:31:5b:4f:0c:43:73:c8:34:91:a9:44:6c:
2f:6d:04:6b:31:53:d8:7d:ce:bf:6a:8b:65:54:ba:43:94:6b:
fc:67:2e:fe:b9:06:7c:cc:3c:c2:a8:d8:50:6a:52:6f:fa:2d:
85:92:8f:76:4a:58:5d:99:47:56:17:e0:e6:ee:b8:95:aa:13:
28:f7:b2:a4:d9:db:ec:0d:41:36:50:9b:eb:0c:bc:a7:28:41:
a7:5b:c8:47:00:68:43:77:35:53:f4:cc:c5:92:75:f3:97:46:
c2:93:e4:05:3d:7a:e6:dc:78:b2:7e:5b:a2:0a:2d:d4:f6:c9:
c1:b8:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:43 2025 by rpki-client