Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/cHqq_9_YuaQcxu0tzdeGYPuOiwM.roa
File: cHqq_9_YuaQcxu0tzdeGYPuOiwM.roa (raw, json)
Hash identifier: F91lkMjHM2MU3H0uvqnVgrzr+1+4K7615bhINsQQ35o=
Subject key identifier: 70:7A:AA:FF:DF:D8:B9:A4:1C:C6:ED:2D:CD:D7:86:60:FB:8E:8B:03
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 018BC9917E443EF2B49FCB6C94CB4AA1B69C
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/cHqq_9_YuaQcxu0tzdeGYPuOiwM.roa
Signing time: Mon 13 Nov 2023 16:43:57 +0000
ROA not before: Mon 13 Nov 2023 16:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49725
IP address blocks: 95.143.144.0/20 maxlen: 20
2a00:1da8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:91:7e:44:3e:f2:b4:9f:cb:6c:94:cb:4a:a1:b6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Nov 13 16:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=707aaaffdfd8b9a41cc6ed2dcdd78660fb8e8b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c1:26:76:69:df:81:2a:45:3a:c4:78:ea:4f:
bd:f4:54:9f:4a:d0:fd:6c:7c:4c:b0:a0:ed:34:f6:
fc:b2:ff:7b:e4:6a:2e:5e:f5:1b:57:25:f2:77:64:
c2:e3:4e:28:bd:bd:73:f7:17:d2:12:a2:c1:8c:fd:
6c:ae:88:81:4c:61:8e:49:e2:a8:e4:8e:43:73:7f:
1e:ee:94:50:f3:4a:7a:07:8e:42:25:25:aa:d6:4b:
b2:9b:89:b2:55:9b:73:90:b5:64:8b:6f:77:58:fe:
fe:b8:99:38:d6:a2:5a:ca:b6:e8:65:f5:8a:c4:6e:
a9:fc:6d:f6:2a:fe:1a:bc:d6:b6:fd:c7:37:66:98:
98:49:10:0d:72:dc:66:8a:de:89:e5:b9:f4:13:fb:
cc:df:77:a8:d3:e1:58:bd:3c:d0:73:54:4f:cd:00:
f2:54:7c:a3:fc:49:d5:4d:6c:f6:5c:c3:01:8d:c5:
72:ea:91:b1:48:8c:95:94:ff:d1:26:22:87:d9:33:
0e:a4:0b:c7:31:85:8f:ba:e6:a5:b2:7f:3c:c6:6c:
ae:99:20:e9:81:a2:5c:b8:30:1e:10:d4:ed:04:a1:
ba:7b:70:4e:5e:ce:52:19:00:07:f7:e8:94:c3:d6:
8f:bc:03:68:6a:da:39:e6:f0:d4:3d:9c:9d:4d:6d:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:AA:FF:DF:D8:B9:A4:1C:C6:ED:2D:CD:D7:86:60:FB:8E:8B:03
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/cHqq_9_YuaQcxu0tzdeGYPuOiwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.143.144.0/20
IPv6:
2a00:1da8::/32
Signature Algorithm: sha256WithRSAEncryption
16:46:2c:5d:68:ac:28:38:ca:d1:c1:09:bd:12:c8:b5:15:9f:
da:96:81:d5:29:b8:54:bc:16:77:48:e0:80:3c:61:c0:8d:7c:
3f:74:9e:cd:86:7d:37:c0:51:70:45:cf:3c:d9:90:e9:af:f4:
1d:67:6c:95:3e:cc:a0:31:e7:17:13:68:c7:22:7a:94:41:1c:
1a:57:5b:2a:3d:d3:90:5c:e7:bf:8d:61:24:66:32:28:1f:82:
14:84:23:9a:da:62:ff:70:9d:ec:cd:ea:7e:b4:ef:ee:95:9b:
60:b3:b9:44:5d:60:95:76:41:7d:c4:cf:7c:22:de:78:f6:34:
42:e9:7e:7b:80:7d:23:02:5e:26:38:5c:6a:53:fa:2d:8c:9e:
5e:45:eb:e8:14:37:92:62:00:5b:d7:e6:5f:63:28:8e:69:a0:
92:65:43:aa:79:c1:5c:f4:5d:8b:df:a7:1a:b3:83:13:2a:44:
da:93:0b:de:8f:34:a5:65:34:f0:61:6a:39:65:f7:a6:de:10:
e8:1c:7a:17:e5:13:be:59:61:6f:f6:ac:ba:e0:47:c6:55:a9:
48:9e:a6:02:93:39:4b:c0:9c:cf:9f:e7:f9:05:16:d5:61:49:
60:a0:78:52:f1:82:ca:75:69:ec:b2:d6:97:f5:07:24:32:91:
3a:88:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:05 2025 by rpki-client