Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YSySrOeEP5EjVz3I5E_MlWEf8Xc.roa
File: YSySrOeEP5EjVz3I5E_MlWEf8Xc.roa (raw, json)
Hash identifier: /3mWnLQgqOnd/HvAmco34c0k80+BtKLbLiTWUjPOszw=
Subject key identifier: 61:2C:92:AC:E7:84:3F:91:23:57:3D:C8:E4:4F:CC:95:61:1F:F1:77
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0194B29A07F84610F00263D52A2BA6AD939D
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YSySrOeEP5EjVz3I5E_MlWEf8Xc.roa
Signing time: Wed 29 Jan 2025 15:07:06 +0000
ROA not before: Wed 29 Jan 2025 15:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212860
IP address blocks: 95.182.117.0/24 maxlen: 24
95.182.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:9a:07:f8:46:10:f0:02:63:d5:2a:2b:a6:ad:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 29 15:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=612c92ace7843f9123573dc8e44fcc95611ff177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:2d:1d:8c:3c:21:2f:2d:3e:22:d7:2a:91:
20:c2:2f:e2:81:ab:97:8b:c6:1d:c7:02:f1:04:24:
46:a0:21:cf:b2:71:8e:f9:a5:98:97:93:1b:55:94:
ea:6b:71:bd:06:d0:b6:81:d0:7d:90:3d:30:35:5b:
35:85:0d:9c:5c:10:8c:20:20:42:54:58:de:bb:2e:
ff:45:bc:f1:d6:fd:34:74:21:d0:3e:b4:50:4d:47:
cf:0b:60:b9:b3:b1:0c:2a:ce:a2:f3:c9:97:f1:d6:
aa:a8:bd:ff:de:76:ce:a6:e8:60:98:04:88:49:b3:
c9:25:d4:51:84:e5:2a:f0:24:21:e9:8c:e8:63:83:
c5:ee:ed:20:c3:f9:3d:35:27:f8:a0:72:c7:ad:15:
95:1d:39:8a:83:ac:6e:01:87:8a:7d:6f:1e:e5:f2:
4c:af:69:c1:1e:f9:c7:d7:5e:23:15:61:fe:af:50:
d9:ad:29:e7:39:21:31:08:b4:c8:bc:d4:35:40:2a:
bf:26:fa:eb:48:f9:72:ca:55:eb:80:ba:80:1b:7d:
ae:9f:66:6f:da:c3:d0:45:44:5e:f2:6b:2e:d8:87:
df:aa:44:a2:f9:e1:ca:02:cc:c6:53:f6:63:8a:9c:
23:02:36:00:7d:d1:7b:a8:b4:3a:fb:02:f2:3a:ea:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2C:92:AC:E7:84:3F:91:23:57:3D:C8:E4:4F:CC:95:61:1F:F1:77
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YSySrOeEP5EjVz3I5E_MlWEf8Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.117.0-95.182.119.255
Signature Algorithm: sha256WithRSAEncryption
5f:07:1a:d7:c2:30:3e:e0:38:dd:5c:d5:ae:c2:db:39:c2:2a:
d2:98:82:e7:70:2c:71:27:d0:32:d6:c3:4a:6b:16:55:ce:ae:
bd:24:1c:f4:0b:b8:67:0b:02:fe:19:d8:60:18:3e:df:f4:42:
3f:fb:26:77:bf:75:f6:d1:1c:21:0c:60:20:d4:9c:e0:bd:49:
7e:b3:87:cc:d3:3f:33:60:f0:1d:93:74:8f:65:7e:23:da:ad:
b0:8e:50:d1:33:b2:46:e1:2e:cb:1d:b1:a6:f1:f5:45:11:c3:
63:3b:b2:57:a1:71:59:19:05:78:82:56:44:f9:fc:d1:25:0a:
90:07:f2:5f:4d:40:8c:ba:1e:6f:38:b9:9b:ed:1d:3f:f9:43:
6f:1d:55:48:b1:64:b8:7c:18:06:c0:08:21:6c:bd:57:59:48:
5b:86:00:d5:69:2e:23:92:59:59:97:16:d8:29:81:e9:7f:00:
d9:02:71:6d:c0:e3:f6:99:ef:b5:c7:ad:81:b0:31:2a:05:8f:
3a:34:34:b1:70:89:cc:b3:e4:8a:64:5a:96:82:e1:10:22:2c:
57:62:54:42:bb:68:f1:72:ee:a8:80:e1:46:20:97:38:f3:70:
54:d0:a7:25:ed:6a:96:b0:16:e4:46:4e:85:7a:90:e2:00:04:
8e:74:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:50 2025 by rpki-client