Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oeRV6KWGZNf_T2iTY54HbSokP_U.roa
File: oeRV6KWGZNf_T2iTY54HbSokP_U.roa (raw, json)
Hash identifier: XcUal8H94olUbg8UyiEbjAEoOzmVKHfRcvdq1oNxRqE=
Subject key identifier: A1:E4:55:E8:A5:86:64:D7:FF:4F:68:93:63:9E:07:6D:2A:24:3F:F5
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01947E8F48FC0825224D2D6CCD1B2F757304
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oeRV6KWGZNf_T2iTY54HbSokP_U.roa
Signing time: Sun 19 Jan 2025 12:35:06 +0000
ROA not before: Sun 19 Jan 2025 12:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48780
IP address blocks: 95.182.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:8f:48:fc:08:25:22:4d:2d:6c:cd:1b:2f:75:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 19 12:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1e455e8a58664d7ff4f6893639e076d2a243ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:c7:94:6a:81:88:15:01:9d:cb:7e:9a:51:
2b:70:86:14:98:ef:d2:05:34:0e:74:cb:4a:c6:1f:
96:85:d6:c6:16:b2:26:a9:ac:2c:90:d2:e3:20:a1:
31:63:07:96:31:1d:a7:f7:92:96:bc:32:b3:63:a3:
8b:13:7c:ff:df:8f:cc:8a:a2:95:4b:c4:f1:5d:fa:
29:e4:c3:3f:92:22:77:a3:f4:72:d1:4a:bf:0b:96:
2d:23:e0:74:a7:1b:c0:e3:00:cd:77:da:56:22:46:
b4:54:24:f3:fe:1c:9d:dd:ee:6d:4a:16:b6:ff:79:
b9:82:be:4e:84:09:7a:55:78:48:b4:27:00:ad:22:
d0:b3:a5:d7:1e:20:d3:e1:7c:97:38:1f:f6:c8:a1:
a0:1b:57:1f:dc:fa:df:3c:2b:42:1d:02:5b:71:3e:
bf:f9:05:b8:b5:c9:1f:ed:9b:80:6a:2c:57:52:52:
19:ee:d7:de:ee:d9:04:98:8a:3c:17:6d:d6:c7:2d:
bb:66:24:44:f3:b4:28:cd:68:75:3d:9d:f3:2b:40:
93:0b:a0:06:33:2e:a2:b6:d5:e7:d7:50:2f:1e:4e:
29:36:bb:2b:3a:45:2f:7e:95:ba:91:62:c4:92:70:
37:e8:b0:47:5b:c0:d7:4c:13:19:89:93:8d:1d:1f:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:55:E8:A5:86:64:D7:FF:4F:68:93:63:9E:07:6D:2A:24:3F:F5
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oeRV6KWGZNf_T2iTY54HbSokP_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.112.0/23
Signature Algorithm: sha256WithRSAEncryption
94:40:48:8e:04:67:9c:55:bd:69:59:d6:9a:3d:7f:c6:f6:15:
90:3b:70:24:56:f1:be:f8:05:1c:de:d1:9c:a0:bc:dc:45:92:
2d:55:9e:cf:d7:68:9e:88:7a:e5:15:3e:26:0b:63:e6:a7:d3:
cc:b8:df:58:21:a6:59:ef:34:bc:a3:b7:a1:75:22:d5:83:e3:
5e:5c:1b:aa:de:36:0c:c5:9b:70:2b:db:e0:6a:d2:78:91:48:
e2:e5:40:81:d3:02:47:19:f5:bf:5d:9f:da:57:3a:99:d7:03:
9a:93:6f:15:d9:01:8c:44:5b:b0:c8:71:73:12:e9:2d:1d:61:
cc:4b:92:59:6d:19:f5:16:02:0f:73:74:66:51:05:d7:c3:da:
93:8b:f0:e5:57:f5:77:98:04:62:f2:30:53:d1:a1:cb:a7:ff:
c9:d4:d6:c8:ae:13:c1:85:e2:fa:4b:8b:b5:c8:26:55:87:bf:
15:91:a3:f7:94:40:ea:8e:3f:10:cc:34:60:3a:89:8e:24:9d:
2a:fb:07:12:14:e2:f8:c7:b7:c7:e3:f4:c4:b4:10:80:8f:0e:
e1:47:01:34:b9:5d:aa:1d:8c:a6:0f:fc:b1:7b:fb:09:4c:ac:
c0:ce:86:51:24:84:11:bc:28:b4:10:b6:38:28:ad:19:49:33:
4d:a8:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:40 2025 by rpki-client