Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/02c0qJQBaigaXqN3maDpONIFFAc.roa
File: 02c0qJQBaigaXqN3maDpONIFFAc.roa (raw, json)
Hash identifier: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=
Subject key identifier: D3:67:34:A8:94:01:6A:28:1A:5E:A3:77:99:A0:E9:38:D2:05:14:07
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01941FFA64D1201D95747065EFED6B87F26D
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/02c0qJQBaigaXqN3maDpONIFFAc.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51740
IP address blocks: 95.170.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:d1:20:1d:95:74:70:65:ef:ed:6b:87:f2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36734a894016a281a5ea37799a0e938d2051407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:fd:c5:ca:1e:28:fe:57:27:8b:75:43:48:
5b:51:3b:98:81:bd:23:72:8d:48:15:66:5f:6b:72:
94:81:09:7a:77:ad:fc:36:3c:cb:79:d4:6b:e8:d9:
c8:8c:5f:b1:c5:0b:d1:35:01:6d:1c:21:83:27:a2:
0b:37:b0:57:1c:78:ae:43:39:d8:ed:52:06:28:5b:
30:16:10:48:09:81:39:9d:fd:0c:29:f0:5c:32:ea:
fa:00:7a:a2:37:3d:ba:7f:db:b3:11:01:59:84:97:
95:93:3a:59:4f:7d:af:24:c2:1c:f3:e7:41:c9:d4:
58:63:d6:f8:77:0a:ca:f4:bd:62:a1:4e:e3:38:88:
fa:17:95:62:3d:bf:e9:01:85:f9:ba:fb:00:12:16:
79:27:19:71:d2:e6:8b:b0:ee:dd:d2:d1:39:1c:a2:
bf:20:35:32:01:d9:e3:fc:fe:0b:69:f3:fe:2f:0e:
36:a4:6d:97:03:5e:c0:de:6b:64:8f:3b:dc:77:cf:
dd:29:07:cd:42:d1:21:a1:55:9d:2e:4d:77:fb:74:
54:bd:ac:32:5c:31:f6:c9:0a:66:2c:f4:e2:31:9d:
87:f8:47:09:54:05:e3:ee:61:83:f2:a0:b5:79:fb:
c2:24:cf:d3:35:98:d8:97:15:bc:b5:e0:2d:5b:66:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:34:A8:94:01:6A:28:1A:5E:A3:77:99:A0:E9:38:D2:05:14:07
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/02c0qJQBaigaXqN3maDpONIFFAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.104.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ae:50:6b:0e:68:f1:b9:e7:35:26:e6:58:a6:60:12:57:de:
58:82:f4:0f:15:78:c2:37:41:f6:d6:c2:6b:32:90:6b:1f:4c:
30:0c:44:f3:4b:80:94:09:40:43:b5:ef:e8:ef:5a:ce:66:02:
ac:4c:2a:83:19:38:ab:08:c8:59:de:37:b3:47:e0:bf:29:e4:
7c:69:ac:0d:82:7a:b5:56:ed:88:6d:94:5d:40:55:b1:22:0a:
1d:46:a4:63:b1:e4:4c:96:92:44:d7:f9:ca:d9:f7:76:22:dd:
60:bb:b3:72:70:d4:11:66:7f:d7:f7:b4:67:c3:97:3e:82:a1:
fd:25:71:88:f2:95:b7:61:75:2d:66:ee:1f:97:0c:35:37:5c:
85:f8:f5:0d:fd:41:9d:ff:b0:42:c9:46:5c:c1:c0:30:05:87:
bc:0d:70:22:08:9a:27:d1:3b:ea:44:e8:3b:de:69:e2:41:37:
a4:6f:6c:7c:bb:4d:c9:6e:8d:98:ed:26:e6:0c:0f:c2:46:99:
a7:4b:64:47:c3:f9:d1:ab:df:d4:e8:6d:bb:17:38:e5:72:4c:
d3:cd:22:9b:fb:ae:0b:fe:59:52:89:ee:d3:18:50:01:5a:8e:
b1:00:94:2b:ad:0e:19:c8:bc:6f:e6:ff:9c:73:2b:9d:0c:7c:
61:d7:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:18 2025 by rpki-client