Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/4iaJi_OBKAE3o8h175iBu_IZyfI.roa
File: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (raw, json)
Hash identifier: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=
Subject key identifier: E2:26:89:8B:F3:81:28:01:37:A3:C8:75:EF:98:81:BB:F2:19:C9:F2
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B22F4BE2C512D491785204424E63BF
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/4iaJi_OBKAE3o8h175iBu_IZyfI.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61996
IP address blocks: 95.169.214.0/24 maxlen: 24
95.169.215.0/24 maxlen: 24
95.169.216.0/24 maxlen: 24
95.169.217.0/24 maxlen: 24
95.169.220.0/24 maxlen: 24
95.169.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2f:4b:e2:c5:12:d4:91:78:52:04:42:4e:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e226898bf381280137a3c875ef9881bbf219c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:71:3e:94:0a:fd:e5:40:1a:5d:9b:0e:0d:
1d:81:c4:b3:09:53:0b:98:4b:09:d7:06:e4:07:5e:
93:d8:df:1a:4e:ec:7b:c0:2d:ff:1f:a7:20:2e:fc:
f9:28:76:f2:4a:4c:ef:0a:48:2a:af:a4:47:e3:77:
63:9f:23:cf:13:3f:92:76:1a:c4:89:e3:d7:28:cd:
aa:96:52:82:e3:06:13:0a:be:f0:5d:90:aa:3c:3b:
74:10:f5:c4:b0:74:86:96:56:78:f0:7a:92:3b:1c:
74:23:16:45:7c:41:8f:7f:1e:a9:1e:1e:b7:a8:36:
ea:2a:2f:85:fb:c7:34:17:af:35:68:88:f8:ec:f5:
a8:af:91:4a:dd:2c:bd:a4:de:b7:a1:44:bb:9b:d1:
1a:79:67:bd:ad:5d:84:a5:6e:f1:a3:b3:c2:f0:f1:
90:87:4e:e1:bc:2b:92:88:00:6c:95:b8:62:35:be:
74:85:20:fa:57:fc:ff:94:ce:de:76:c0:88:d5:22:
ae:4d:99:04:24:91:a7:2e:f7:2d:24:1e:e1:44:59:
24:59:bf:a9:76:38:82:f0:6e:b5:6a:f6:eb:e8:b2:
7b:39:51:22:89:67:68:53:9b:ea:fa:04:d7:0d:af:
3a:2e:e7:7a:ac:c7:4d:6c:d6:19:2b:c2:c4:6e:ee:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:89:8B:F3:81:28:01:37:A3:C8:75:EF:98:81:BB:F2:19:C9:F2
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/4iaJi_OBKAE3o8h175iBu_IZyfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.214.0-95.169.217.255
95.169.220.0/24
95.169.223.0/24
Signature Algorithm: sha256WithRSAEncryption
16:80:3c:45:f0:b3:f6:54:78:6b:ba:14:5b:02:fa:d7:7e:23:
c3:24:b0:d9:81:a5:d6:39:87:5a:6a:07:79:09:3e:8e:69:47:
01:25:a2:62:e4:96:2b:ea:99:2c:e0:97:f0:63:04:69:77:f2:
3b:1e:84:47:80:d6:c3:b8:a6:78:91:cf:e8:b6:ca:31:4a:be:
3b:2b:e8:f4:b2:9a:7a:1c:86:50:ec:6c:49:e6:87:28:18:39:
23:65:ec:47:92:b8:ff:9d:5d:aa:b9:a4:76:76:65:5d:8b:81:
ec:cf:3f:b5:c0:64:95:09:23:4d:ab:7a:3a:58:0d:40:fc:c6:
ac:a6:84:3b:f0:fd:b0:41:b6:d6:26:54:ce:6f:67:42:62:2f:
cb:65:0a:f1:a7:12:7f:39:77:5a:aa:93:b0:e4:68:57:3a:f4:
cc:6b:03:b9:ea:1e:c7:ac:d4:3c:e7:80:60:78:27:23:0b:9e:
59:fe:90:1d:63:ee:22:d7:ff:ca:95:69:79:b7:83:de:d9:3a:
16:fe:75:0d:ae:d7:cc:51:4f:4f:d9:1c:6a:83:65:03:c9:11:
08:c7:aa:d4:b2:4c:7f:2a:78:bd:d7:8a:ae:f3:1f:df:f2:df:
13:9d:86:33:81:45:a5:b2:a0:9d:7c:a8:e7:5a:61:49:3a:6c:
6a:d9:a2:f0
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQhsi9L4sUS1JF4UgRCTmO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjUwMTAxMTE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjI2ODk4YmYzODEyODAxMzdhM2M4NzVlZjk4ODFiYmYyMTljOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBhxPpQK/eVAGl2bDg0dgcSzCVML
mEsJ1wbkB16T2N8aTux7wC3/H6cgLvz5KHbySkzvCkgqr6RH43djnyPPEz+SdhrE
iePXKM2qllKC4wYTCr7wXZCqPDt0EPXEsHSGllZ48HqSOxx0IxZFfEGPfx6pHh63
qDbqKi+F+8c0F681aIj47PWor5FK3Sy9pN63oUS7m9EaeWe9rV2EpW7xo7PC8PGQ
h07hvCuSiABslbhiNb50hSD6V/z/lM7edsCI1SKuTZkEJJGnLvctJB7hRFkkWb+p
djiC8G61avbr6LJ7OVEiiWdoU5vq+gTXDa86Lud6rMdNbNYZK8LEbu58HQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOImiYvzgSgBN6PIde+YgbvyGcnyMB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEvNGlhSmlfT0JLQUUzbzhoMTc1aUJ1X0laeWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFfqdYD
BAFfqdgDBABfqdwDBABfqd8wDQYJKoZIhvcNAQELBQADggEBABaAPEXws/ZUeGu6
FFsC+td+I8MksNmBpdY5h1pqB3kJPo5pRwElomLklivqmSzgl/BjBGl38jsehEeA
1sO4pniRz+i2yjFKvjsr6PSymnochlDsbEnmhygYOSNl7EeSuP+dXaq5pHZ2ZV2L
gezPP7XAZJUJI02rejpYDUD8xqymhDvw/bBBttYmVM5vZ0JiL8tlCvGnEn85d1qq
k7DkaFc69MxrA7nqHses1DzngGB4JyMLnln+kB1j7iLX/8qVaXm3g97ZOhb+dQ2u
18xRT0/ZHGqDZQPJEQjHqtSyTH8qeL3Xiq7zH9/y3xOdhjOBRaWyoJ18qOdaYUk6
bGrZovA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:47 2025 by rpki-client