Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa
File: VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa (raw, json)
Hash identifier: UBuFnXhpXMmhVnBct5Az+Ev2H/iUBQnvBw+Z0vvL/Iw=
Subject key identifier: 55:4A:B8:99:9D:D1:F4:24:81:8B:0B:C9:F0:DE:E7:99:3D:60:1F:1D
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 019421441164971E6E4C01AB429243389D0E
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57391
IP address blocks: 95.81.82.0/24 maxlen: 24
95.81.83.0/24 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.87.0/24 maxlen: 24
95.81.89.0/24 maxlen: 24
95.81.95.0/24 maxlen: 24
95.81.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:64:97:1e:6e:4c:01:ab:42:92:43:38:9d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554ab8999dd1f424818b0bc9f0dee7993d601f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:b4:c3:1e:20:44:10:5e:87:48:6d:62:34:
a4:f9:ad:7a:08:e3:07:58:0a:45:19:4d:67:0e:d7:
c8:86:20:0c:de:0f:a7:ce:db:38:ff:66:c0:17:72:
02:fd:20:3f:e2:33:d6:f3:a6:51:58:1d:0c:e1:0c:
54:17:2a:67:0e:77:72:f6:21:a2:08:e7:93:30:32:
6c:dc:1e:fc:49:c4:8d:af:dc:55:57:9f:59:03:25:
f0:3c:35:10:4f:a8:e3:0c:d3:e8:a7:de:dc:c8:b3:
93:9e:f7:09:ee:a0:e6:e2:2e:b8:2b:00:20:39:be:
6d:97:f5:3a:4a:69:04:51:61:99:63:0a:e6:9b:f1:
d7:d6:65:c9:56:8a:76:d6:36:c8:ab:b9:d9:4b:81:
bb:5d:7a:3a:47:09:8a:72:19:0d:e9:b7:8a:59:06:
eb:32:ef:a2:d5:ae:3a:fd:18:3d:f1:6d:df:c8:f8:
3e:6e:50:f7:49:fb:5b:26:08:f8:9c:22:d6:03:fe:
90:50:63:11:ae:03:3a:b7:5d:0d:18:d7:fe:84:4e:
4d:91:f3:d7:ad:96:71:64:c6:be:2c:75:bd:b9:6e:
d1:c2:a2:11:81:05:fb:c4:42:69:98:2a:21:3a:fb:
97:d1:13:38:bc:03:ec:49:b1:7a:f2:ee:14:e7:84:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:B8:99:9D:D1:F4:24:81:8B:0B:C9:F0:DE:E7:99:3D:60:1F:1D
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.82.0/23
95.81.86.0/23
95.81.89.0/24
95.81.95.0/24
95.81.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:cf:c1:f9:c3:b7:fd:f7:bf:c9:2f:48:88:e0:a1:31:c9:92:
e3:3a:8a:0a:ab:6f:cf:4a:aa:1a:0e:57:9b:8c:18:4b:68:b5:
cb:bb:ff:19:9e:10:0a:0b:30:54:82:cb:66:de:ab:93:e0:75:
08:75:6a:74:fe:f3:ae:fe:2b:47:eb:5e:41:f2:66:32:0a:9f:
eb:a2:99:ad:1f:95:3c:59:74:91:71:53:42:4b:d2:4b:43:e0:
c6:03:eb:24:2e:ef:b4:53:6b:20:9d:4c:27:49:07:f4:63:34:
7f:6a:9b:f8:e2:33:c9:72:72:0e:c2:15:51:ae:97:63:61:ff:
85:43:a3:3c:b9:d0:8f:8d:af:c2:2d:d5:9c:db:26:d8:3d:ff:
ed:6c:6f:74:f7:41:65:1d:59:48:c7:13:aa:69:06:e4:ee:28:
d6:ca:2d:c2:48:f6:ec:00:eb:ae:c3:91:d9:e7:11:c4:88:92:
53:52:c3:87:a7:5b:82:4a:23:c4:22:e7:e5:d4:bf:e1:f0:df:
f7:28:17:97:bd:e2:41:24:18:1e:90:99:01:54:96:d9:28:18:
d1:bf:a5:ed:d6:ab:c0:31:4a:40:92:f1:f0:24:75:d0:83:dc:
43:c1:18:3d:8a:d0:9f:60:ad:8f:ba:c1:16:40:09:f2:ed:55:
87:c0:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:09:46 2025 by rpki-client