Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa
File: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (raw, json)
Hash identifier: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=
Subject key identifier: 6A:14:C5:6F:D4:B9:7C:B1:0C:9A:8C:86:1E:23:D6:FA:F7:9F:89:A4
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01941FFA642A628BE0C8FCA49F46993FA46A
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50694
IP address blocks: 95.170.96.0/22 maxlen: 22
95.170.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:2a:62:8b:e0:c8:fc:a4:9f:46:99:3f:a4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a14c56fd4b97cb10c9a8c861e23d6faf79f89a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:5c:f2:c7:a1:97:e5:9d:e4:07:65:c4:82:
4f:5c:06:5a:bf:44:66:4a:89:5f:d7:51:a3:b0:32:
bb:f8:b6:a5:5f:ff:17:42:22:89:0a:f4:76:27:eb:
3e:4d:04:f9:5a:0d:84:2c:b5:93:82:79:06:3e:28:
6a:fb:d1:a7:72:57:4a:32:00:fe:36:70:a9:cb:1e:
90:dd:09:6f:4c:fb:83:16:c8:2e:83:5d:a9:c1:2f:
10:18:d9:f7:4c:3b:1d:45:8f:c9:83:07:44:08:6d:
3c:20:26:06:52:12:45:7f:54:6c:71:dd:dc:00:31:
b3:1d:70:f2:21:be:bb:5c:a5:ab:13:7b:1c:54:62:
cf:ff:dd:51:ca:b3:f1:4c:69:53:a6:b5:60:18:77:
54:d3:14:4e:58:94:11:d7:c0:8c:6f:22:37:4d:28:
60:38:ab:51:4a:9d:8f:ef:f8:33:67:93:44:8f:9a:
fe:a5:f1:e5:00:f5:53:ac:6d:48:f0:7c:30:82:51:
e9:5c:9c:65:9e:ce:16:be:c4:d3:87:56:ff:21:28:
9c:bf:46:14:98:f0:b8:16:14:eb:57:21:5d:26:8c:
f9:91:a2:f1:a9:89:19:21:b1:3d:e3:3c:2c:7c:de:
45:fa:28:1f:f0:45:de:35:f9:c7:24:25:00:9b:d5:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:C5:6F:D4:B9:7C:B1:0C:9A:8C:86:1E:23:D6:FA:F7:9F:89:A4
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.96.0/21
Signature Algorithm: sha256WithRSAEncryption
19:81:d1:a6:66:a9:25:dc:aa:c1:a6:89:c4:98:bf:39:72:09:
db:f6:08:fb:bc:92:78:f6:b5:ef:a4:66:4d:5c:7d:c9:f7:c5:
51:de:33:06:2f:81:cf:03:59:de:ad:3c:68:3e:e7:7a:46:63:
bb:7f:b4:72:58:47:b3:f0:33:04:9a:26:06:58:df:78:5c:10:
32:05:8a:b4:e4:5e:ba:e3:a7:ed:f0:60:e3:02:9f:48:1a:b8:
b8:91:9c:96:ac:7d:b2:83:7a:dd:17:35:f3:dc:bc:0c:d8:f1:
74:ec:0e:4c:99:a8:7a:e1:79:03:05:e9:5b:e0:f1:5c:f5:b3:
ca:f1:3d:72:fc:6a:97:49:7c:7b:80:91:f3:ca:aa:8a:a7:31:
f3:da:3e:fc:bd:f7:59:32:8f:0c:4d:c8:46:01:d5:09:d2:00:
45:45:24:a9:07:8f:85:8b:71:b5:54:c6:4b:02:54:7e:e4:de:
03:42:4a:13:66:a0:a2:85:43:5e:9a:95:16:19:ef:5a:b6:d8:
b6:f1:2a:e3:b3:24:92:25:2a:51:36:3a:e4:ba:c7:e6:ee:0b:
5b:03:a1:3c:bc:a2:ac:fe:65:44:7a:1f:4f:94:c8:fe:12:01:
cd:04:fe:c1:17:6b:de:b8:70:80:70:ea:5f:36:98:bf:52:d6:
43:36:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:53 2025 by rpki-client