Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/5KKpk9qEveM_ucLAOYR8lDjQsvs.roa
File: 5KKpk9qEveM_ucLAOYR8lDjQsvs.roa (raw, json)
Hash identifier: FsEABHDgSk6DaTySsepeca9yMLpdy1J0E11YMBOaZ9k=
Subject key identifier: E4:A2:A9:93:DA:84:BD:E3:3F:B9:C2:C0:39:84:7C:94:38:D0:B2:FB
Certificate issuer: /CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Certificate serial: 019425FC74E744A651A4AECE8CF7380EE401
Authority key identifier: 35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/5KKpk9qEveM_ucLAOYR8lDjQsvs.roa
Signing time: Thu 02 Jan 2025 07:48:09 +0000
ROA not before: Thu 02 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211175
IP address blocks: 185.95.67.0/24 maxlen: 24
2a0d:68c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:74:e7:44:a6:51:a4:ae:ce:8c:f7:38:0e:e4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Validity
Not Before: Jan 2 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4a2a993da84bde33fb9c2c039847c9438d0b2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:fe:97:71:65:dc:a9:4a:b8:9f:fc:1d:9a:
08:3e:06:05:02:42:a8:81:c8:68:1d:0b:be:fa:b5:
c6:9a:f7:dc:bc:fe:d3:7e:45:bd:4e:ca:57:12:36:
c0:a8:fa:6a:80:6b:6b:86:91:4a:7f:87:25:d1:dd:
c7:c9:9b:cf:5d:ba:9d:64:a3:90:cb:41:a3:63:82:
59:34:5d:ea:25:d4:6d:e9:a1:d6:8e:49:9d:3d:65:
51:1a:e0:a0:63:d0:51:6f:8c:80:76:49:91:57:4e:
c4:43:b6:10:17:19:9b:a8:bc:98:c7:b0:24:dc:1a:
fd:34:56:c5:e2:54:fc:cb:ca:7f:bb:c4:f7:59:ad:
fa:b8:81:2a:1e:39:e9:9d:db:a4:b4:c1:a1:ef:47:
4e:ee:7c:9e:be:0c:37:e3:2e:48:94:c3:d3:94:4d:
2a:a3:c8:08:b2:98:d6:45:20:54:64:10:c6:ff:26:
02:f2:a8:d0:33:55:92:76:94:80:f9:8e:b8:0a:cf:
01:17:7c:ba:72:3a:34:f1:39:0f:52:d3:65:4d:ab:
9e:67:a4:a1:ec:36:b1:81:c9:f9:f5:cb:50:49:10:
aa:3b:9f:57:dd:cc:0e:21:f5:92:14:8f:c0:5f:e2:
b0:2b:f6:d5:7e:62:30:d8:4c:bb:35:a8:d0:20:8a:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A2:A9:93:DA:84:BD:E3:3F:B9:C2:C0:39:84:7C:94:38:D0:B2:FB
X509v3 Authority Key Identifier:
keyid:35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/5KKpk9qEveM_ucLAOYR8lDjQsvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.67.0/24
IPv6:
2a0d:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:34:72:b9:dd:38:f4:ec:5e:31:ae:90:f7:56:c6:70:72:05:
61:1c:df:a8:c6:6a:cd:b7:af:a2:6c:84:e3:40:74:49:3d:8e:
95:19:d7:e6:9e:62:cc:d6:22:67:a5:f6:54:be:81:70:11:dd:
8d:72:1b:d1:89:49:b0:7a:5d:3b:c7:e6:db:24:c3:47:66:39:
f7:e4:78:bb:1a:25:bd:33:32:14:e3:93:b0:b7:58:fd:fe:ff:
fa:57:1f:78:db:14:7c:cb:8b:61:48:60:59:79:8f:a4:34:c0:
3a:55:2d:10:73:c2:4c:68:52:7d:2e:20:09:e0:de:ec:20:61:
49:4d:39:e6:40:db:86:d9:4f:44:e7:f0:53:4c:1f:dd:0f:d9:
fd:f9:4c:69:b9:5a:2d:d4:76:94:68:22:24:9f:93:04:31:88:
2a:81:10:55:da:93:22:20:43:cb:47:c6:03:4e:d9:6b:84:c0:
f9:97:1b:9f:a4:87:ec:ea:a6:29:4f:40:b5:7d:ab:74:f2:ce:
97:9b:2c:1f:6d:3c:ce:04:1a:d1:03:29:68:47:73:7c:ad:74:
a5:e4:4b:34:ba:fc:6a:a1:b5:6e:ed:64:4c:7f:b9:b3:1e:97:
fb:f4:b2:55:80:94:95:e2:0e:36:1d:8c:f2:5d:79:87:2f:65:
95:db:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:52 2025 by rpki-client