Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/JzV_Sn4tIzXvCFv3Nyu9_wW9lSY.roa
File: JzV_Sn4tIzXvCFv3Nyu9_wW9lSY.roa (raw, json)
Hash identifier: 8RYaQegHEGlbUBPpPODpDM4K/PYoEohyNinnrKZorsk=
Subject key identifier: 27:35:7F:4A:7E:2D:23:35:EF:08:5B:F7:37:2B:BD:FF:05:BD:95:26
Certificate issuer: /CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Certificate serial: 01941F8C4B6C05D4CB9B7F8AB7216CAA43A8
Authority key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/JzV_Sn4tIzXvCFv3Nyu9_wW9lSY.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204544
IP address blocks: 95.128.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:6c:05:d4:cb:9b:7f:8a:b7:21:6c:aa:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27357f4a7e2d2335ef085bf7372bbdff05bd9526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:72:cf:ce:ea:4e:38:b1:71:c6:06:66:a3:
44:d0:b5:91:fb:7c:3c:67:ae:87:ba:32:68:93:92:
41:d7:fd:f1:d9:72:34:22:34:2b:62:6b:d8:51:6a:
da:1c:b8:da:3b:f5:d9:e6:3a:05:d1:6f:4e:12:06:
f8:70:82:cb:f8:40:4b:3b:33:d4:77:0f:7e:67:24:
73:3d:6c:5a:01:a3:fc:55:93:77:5f:87:bb:52:9d:
92:ba:ca:af:0f:c7:2e:9b:60:2e:f6:4f:80:bf:fb:
9d:cf:f4:7a:01:17:a9:74:ae:f1:07:04:56:ef:6c:
ab:be:d4:27:27:4d:48:b6:68:ec:a5:91:7d:d7:9b:
90:5c:2a:7b:10:e0:0c:90:52:55:ad:f0:cd:c7:5a:
05:f4:27:97:3f:e1:22:9e:a6:cd:97:01:6e:68:59:
1b:89:cf:44:eb:d8:e0:ec:f7:d7:d4:81:c1:01:15:
ef:bb:3b:95:4a:fc:af:76:8b:0e:df:7f:6b:d1:53:
db:4d:ae:12:f8:e3:e8:aa:72:49:dd:c8:d8:3a:33:
89:1e:87:26:58:bc:de:76:eb:aa:70:98:b2:57:7f:
7f:99:86:cf:7c:94:b8:02:ec:25:57:1c:c7:bb:2b:
c5:6a:f5:90:96:c5:f2:04:f3:e5:99:e2:1e:9d:75:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:7F:4A:7E:2D:23:35:EF:08:5B:F7:37:2B:BD:FF:05:BD:95:26
X509v3 Authority Key Identifier:
keyid:FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/JzV_Sn4tIzXvCFv3Nyu9_wW9lSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.194.0/24
Signature Algorithm: sha256WithRSAEncryption
51:78:17:f0:62:bf:3c:d2:68:19:45:04:c3:c5:19:21:cd:b0:
2e:5c:6d:e0:85:aa:75:32:dc:f2:7f:a9:e9:79:65:34:73:fc:
4c:f6:a9:c6:66:6e:c6:d1:15:db:1e:23:a6:45:e8:cf:fc:5f:
9b:6c:e7:e8:04:3e:5e:b3:60:e9:00:48:3f:1c:ec:be:18:8e:
aa:cb:28:e5:a9:39:47:88:d6:47:c9:a8:f7:55:e6:e7:30:fa:
c3:f1:cc:e4:af:cb:b4:cf:db:44:17:b2:58:dc:51:21:70:5c:
8e:11:c3:f5:98:d7:a5:ea:04:cd:f8:d0:fb:de:db:7e:41:18:
88:cd:b7:5e:9d:eb:b3:a3:67:82:4a:04:5b:4c:9b:f7:66:ad:
42:cf:59:30:a3:5a:5e:2a:b5:4d:a6:9c:a9:eb:6e:20:02:92:
46:ce:8e:88:7d:e2:09:90:a3:fd:b2:3e:ce:d9:15:f6:f2:d1:
ad:8f:af:4d:42:c4:82:a2:7f:9c:0f:b2:8d:0d:fb:7b:89:ef:
65:28:7d:d8:40:4e:b5:df:be:2a:75:73:23:5e:8d:b5:d2:d2:
b2:d9:b4:c9:9a:6b:12:d4:40:cf:73:43:af:4f:7a:8c:de:cd:
7a:1c:74:c1:0f:fb:df:15:80:08:01:31:42:17:ff:98:53:ff:
33:f7:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:35 2025 by rpki-client