Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa
File: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (raw, json)
Hash identifier: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=
Subject key identifier: 92:72:C8:A5:A5:8D:EB:02:77:47:1B:84:93:14:40:1C:A8:96:14:F6
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0194FF8438764EE54E66323B4481B699878D
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa
Signing time: Thu 13 Feb 2025 13:34:02 +0000
ROA not before: Thu 13 Feb 2025 13:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49011
IP address blocks: 95.174.160.0/19 maxlen: 19
178.19.0.0/20 maxlen: 20
2a00:cc80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:84:38:76:4e:e5:4e:66:32:3b:44:81:b6:99:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 13:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9272c8a5a58deb0277471b849314401ca89614f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:9f:18:e3:3c:f6:c8:36:e0:16:f3:42:ef:
67:59:58:7b:4f:a1:44:75:49:81:29:ae:f7:09:87:
7f:1e:e8:79:68:3c:36:77:d3:b1:b1:5a:49:3a:ae:
38:d9:72:a1:4d:82:e2:68:b3:ca:3f:40:58:ea:a4:
79:54:a5:6b:70:db:24:79:1e:9b:f2:16:5f:30:96:
6d:4e:1a:34:7c:c3:6a:f2:48:e3:ac:1e:66:73:a5:
9d:9f:e3:29:98:24:e9:3b:62:00:65:b8:4a:12:74:
32:bb:46:17:30:0e:08:85:6a:86:4b:3b:81:85:f7:
cb:c1:86:7e:24:06:02:03:94:7f:70:ec:f1:d4:31:
6b:58:7c:ce:24:5e:43:de:8f:11:ef:e0:3a:82:52:
9b:96:83:d2:24:75:b3:94:e0:20:ba:63:8c:20:fe:
78:13:fa:2d:45:9d:0f:80:04:af:3d:85:58:8b:46:
95:ed:43:d9:f2:b2:c2:23:b4:12:70:9b:d6:b7:19:
62:c2:4d:be:92:23:2d:95:79:5c:52:1d:07:b9:3c:
53:1c:a9:e7:77:e6:e6:ce:1d:c9:55:1e:43:28:30:
e9:da:d1:1a:1d:5a:07:36:21:d9:c7:ea:f1:da:27:
75:d3:3b:b6:47:99:08:bc:80:e5:36:f7:5b:bf:dc:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:C8:A5:A5:8D:EB:02:77:47:1B:84:93:14:40:1C:A8:96:14:F6
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.160.0/19
178.19.0.0/20
IPv6:
2a00:cc80::/32
Signature Algorithm: sha256WithRSAEncryption
03:ef:e3:c8:32:5a:8d:de:09:e6:e7:f3:8e:57:69:d8:e0:3d:
f3:31:dc:72:cc:60:ad:57:88:d2:5f:83:62:34:c5:f0:82:67:
43:da:17:19:a6:9f:eb:f9:b4:77:cf:9e:4c:c7:7f:ee:41:f7:
33:e1:08:12:e7:05:fd:a4:a4:b0:ea:49:6f:b0:e9:d3:01:dc:
47:c6:b9:57:b5:01:14:95:50:0c:f6:4b:f3:b4:5e:c5:66:42:
71:e1:f4:40:48:44:f7:b6:2c:20:78:23:a0:1b:70:0d:77:6d:
df:b0:6b:a8:01:6a:21:4f:53:40:aa:4f:e8:a7:9b:6e:98:da:
9f:9b:e5:f2:2a:46:a1:56:4d:f8:0d:e5:3a:c3:a9:24:26:ea:
72:de:99:36:c4:86:7e:56:f4:20:6a:ac:91:14:a5:2a:15:2b:
88:1f:36:3b:dd:15:4e:a4:99:29:ef:b2:fa:6e:43:3c:4c:5c:
e3:48:d7:3e:6e:a4:c7:b6:41:c8:f5:c0:00:4d:84:99:34:b2:
ad:af:15:06:cb:3c:d8:4f:b2:a1:f9:f0:bf:13:ef:3a:88:4b:
68:9a:f4:94:ca:35:7e:a9:fa:07:e0:26:4e:1c:ad:9e:05:14:
cd:f8:1f:22:e2:98:94:31:94:12:5b:06:50:10:6a:c4:09:dc:
8f:fa:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:50 2025 by rpki-client