Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/i8zpMrOMz8snLQN9FKEhSLa6Dek.roa
File: i8zpMrOMz8snLQN9FKEhSLa6Dek.roa (raw, json)
Hash identifier: hP+7I/F057LbBFihJtlbBp/U7yMfUrH2YAnq4y792cs=
Subject key identifier: 8B:CC:E9:32:B3:8C:CF:CB:27:2D:03:7D:14:A1:21:48:B6:BA:0D:E9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194ABE73F7B0DE8E85E076DE46CDFBC4714
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/i8zpMrOMz8snLQN9FKEhSLa6Dek.roa
Signing time: Tue 28 Jan 2025 07:54:06 +0000
ROA not before: Tue 28 Jan 2025 07:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134143
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:e7:3f:7b:0d:e8:e8:5e:07:6d:e4:6c:df:bc:47:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 28 07:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bcce932b38ccfcb272d037d14a12148b6ba0de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:bc:b3:82:19:1a:4f:01:fa:53:b6:79:7a:
c7:b7:18:fb:d1:f1:dd:7d:34:65:c5:e9:b9:a5:59:
96:a2:74:30:b9:c0:26:42:fb:9b:8a:ea:4f:cf:41:
86:d0:6d:25:52:3b:82:a8:ae:7a:f6:1d:af:74:2b:
0d:a8:d8:f3:e4:7d:6b:65:87:81:89:51:1e:35:b6:
06:20:d4:7a:a3:e6:e8:d3:62:1e:b0:a1:c9:e7:23:
ce:e6:74:a9:e4:9e:21:50:fa:da:fa:a1:13:30:49:
63:08:73:f2:fc:ca:6c:c6:21:d6:ed:16:15:85:c9:
2f:9b:cc:33:9a:a2:71:8c:1b:76:10:c6:1b:8c:cc:
a5:67:75:0d:0e:cf:58:ac:ca:25:f4:fa:c9:f2:1e:
cd:de:d6:4b:09:44:f5:ec:62:6e:48:66:23:2c:c7:
ee:48:53:1c:a8:c2:3c:d2:9e:c3:ec:54:77:cf:11:
6d:71:8c:2b:6e:33:5d:00:19:9f:fe:14:d7:63:b6:
96:91:a4:43:79:96:97:ab:a7:3c:dd:3c:bc:43:d4:
92:df:56:53:d0:10:df:db:8f:6d:c2:e7:da:e5:8b:
bd:39:62:de:cf:15:ac:5e:20:50:d2:5b:c7:41:06:
9f:82:91:f6:82:43:a0:dc:01:2b:4a:70:a7:ba:1c:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:E9:32:B3:8C:CF:CB:27:2D:03:7D:14:A1:21:48:B6:BA:0D:E9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/i8zpMrOMz8snLQN9FKEhSLa6Dek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/21
95.82.32.0/21
Signature Algorithm: sha256WithRSAEncryption
d7:17:f1:f5:7a:b5:89:ff:c4:14:09:19:72:e3:d8:13:d5:ec:
fe:70:45:c4:14:1b:35:a0:57:c0:7a:01:51:93:13:ad:e2:22:
fb:72:0a:b1:d0:16:f6:99:f4:1b:ef:8f:4b:ea:f3:b4:ff:7e:
25:1c:61:1d:c9:ed:e7:4b:3d:1d:4f:af:62:54:ac:fb:23:e9:
04:49:af:b6:8b:2c:37:9e:cd:73:4a:c0:ef:79:46:ee:6f:59:
ca:27:61:73:d9:eb:b0:00:94:33:02:2b:3d:a1:94:79:e4:7f:
10:cd:47:1f:b0:e5:0b:f1:32:1c:90:d7:e9:8d:f1:43:69:20:
4d:82:f9:6c:46:40:3c:f4:32:46:f7:d3:86:fa:05:b8:f2:54:
86:15:9c:d1:13:9f:2c:53:18:b2:d4:b2:11:08:f4:c2:5a:64:
9d:bf:c0:4e:eb:86:91:b5:2e:07:92:bc:85:aa:f6:01:6c:2f:
25:b0:bc:c1:97:01:8e:ce:47:98:30:4f:2f:c0:87:30:e7:ea:
1b:81:6e:12:32:be:1a:d6:95:c1:cd:65:f9:14:95:11:79:32:
8c:48:1f:7f:45:dc:3e:23:cb:ae:10:67:82:31:ef:c0:7e:7b:
f1:2f:c2:54:04:a9:f2:a4:69:51:f6:28:34:9d:0d:11:6d:97:
d6:cf:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:01:04 2025 by rpki-client