Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/21k07trihuOq_p0d1xoi4bxuPZA.roa
File: 21k07trihuOq_p0d1xoi4bxuPZA.roa (raw, json)
Hash identifier: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=
Subject key identifier: DB:59:34:EE:DA:E2:86:E3:AA:FE:9D:1D:D7:1A:22:E1:BC:6E:3D:90
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B230EE3BBFB4CF37C1B8F18E3D55F2
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/21k07trihuOq_p0d1xoi4bxuPZA.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198938
IP address blocks: 95.169.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:30:ee:3b:bf:b4:cf:37:c1:b8:f1:8e:3d:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db5934eedae286e3aafe9d1dd71a22e1bc6e3d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:b4:8f:90:1f:d5:b5:d1:0a:5f:96:c4:c6:
c9:19:0f:d8:81:76:7e:f8:cd:96:e3:51:43:84:46:
c3:62:8a:4e:7d:2c:3d:99:44:ae:c1:4b:bf:0f:c7:
bf:97:cf:eb:cf:0a:b5:ac:2a:88:7c:69:26:45:8b:
9b:15:6d:c9:2d:a8:11:d6:d9:96:2b:5c:de:1f:65:
ae:52:07:ad:67:ab:9a:da:db:d0:2f:2d:1c:dd:52:
02:f7:e7:4f:cd:e6:9d:af:19:ab:7a:5b:cc:44:a9:
96:4c:21:6d:18:2a:09:e7:44:0c:4a:62:1e:73:66:
0e:21:0e:71:37:bd:7c:6f:6d:c2:3d:64:d0:22:d8:
4e:c2:01:89:3e:32:d1:14:6f:eb:c1:80:7e:fd:e1:
02:b4:49:a5:7d:6a:75:82:61:e8:ef:47:55:7d:9b:
8c:2e:6d:a1:3d:d2:fe:11:6f:6a:ac:1c:61:7d:02:
d3:c5:ba:a0:89:29:f5:5c:f3:50:8e:cb:39:d2:ef:
2f:8d:41:29:96:6e:10:64:00:3c:52:e5:cb:fc:a2:
db:f0:51:3d:31:79:6d:14:94:74:b7:0b:81:d9:d1:
c1:6f:ea:43:03:cc:12:c9:69:71:57:44:f2:41:4f:
15:8f:fe:19:38:07:4c:ca:23:8d:0a:eb:85:7b:47:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:59:34:EE:DA:E2:86:E3:AA:FE:9D:1D:D7:1A:22:E1:BC:6E:3D:90
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/21k07trihuOq_p0d1xoi4bxuPZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.193.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a9:f9:86:75:03:de:c4:68:58:d0:e3:39:56:a6:2d:6d:cb:
f7:74:11:4d:88:24:27:2e:69:52:0a:7f:26:b0:4a:70:ba:c2:
fa:67:52:3b:8d:f8:36:f9:7d:e9:2d:1f:e9:f8:dd:9c:c2:1c:
04:59:6a:0b:e8:20:13:b4:45:98:05:8b:ed:39:9c:71:03:ca:
a1:db:16:8e:7b:cf:1a:76:45:ed:9d:62:d9:18:5d:09:e9:ce:
fe:18:c3:5b:85:bb:f1:cb:e2:5a:e6:37:fd:ca:94:07:c7:b0:
7c:5a:f7:5c:6d:7f:49:c6:38:d2:62:f5:27:ae:ee:f3:9f:95:
02:6e:3b:35:80:15:71:16:73:14:ed:e0:9a:cd:6c:6e:91:a8:
97:37:7f:1d:d0:ac:3d:ed:93:10:82:08:6f:48:0d:66:a6:a0:
6f:b9:b2:c5:2b:0b:cf:58:04:7d:e6:89:34:4e:ba:e3:b4:32:
6d:3d:50:41:27:8e:8e:ca:fa:ad:04:74:51:27:5b:bd:79:6c:
73:e4:0e:92:cb:cb:62:8b:94:0c:a0:b2:44:e3:c2:db:4b:17:
26:39:b3:28:d0:4e:43:2f:dc:0c:c9:60:84:13:ae:8d:ac:56:
45:02:9f:53:62:8d:6d:2e:28:7a:d7:af:c6:58:84:d3:07:d4:
d1:d4:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:20 2025 by rpki-client