Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/IMJc_IgDOyjQIVRGXwFPa3XQm2M.roa
File: IMJc_IgDOyjQIVRGXwFPa3XQm2M.roa (raw, json)
Hash identifier: gtNlqZIOMsKQoGq4VytRDOybUyepKB3Uun0iYQW7tuE=
Subject key identifier: 20:C2:5C:FC:88:03:3B:28:D0:21:54:46:5F:01:4F:6B:75:D0:9B:63
Certificate issuer: /CN=aef634ac5e0b5a204c841068137583661a186581
Certificate serial: 012906EF
Authority key identifier: AE:F6:34:AC:5E:0B:5A:20:4C:84:10:68:13:75:83:66:1A:18:65:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvY0rF4LWiBMhBBoE3WDZhoYZYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/IMJc_IgDOyjQIVRGXwFPa3XQm2M.roa
Signing time: Sat 01 Jan 2022 12:55:45 +0000
ROA not before: Sat 01 Jan 2022 12:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201211
IP address blocks: 95.130.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19465967 (0x12906ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef634ac5e0b5a204c841068137583661a186581
Validity
Not Before: Jan 1 12:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20c25cfc88033b28d02154465f014f6b75d09b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:eb:dc:75:55:1e:b1:75:50:dd:54:8e:ee:
7e:16:14:66:fe:ba:fb:cd:75:72:43:49:fb:e0:e3:
4f:ef:cc:06:f8:9b:62:f4:b1:99:87:49:7d:63:64:
66:56:d6:dd:06:b8:f4:6a:83:d8:d2:23:c9:05:0e:
2f:84:1f:27:56:5d:0b:b7:c1:18:4d:3a:44:95:c6:
44:90:04:ae:cd:2b:01:87:0f:a6:1a:7f:75:cf:00:
79:8c:09:74:1f:64:37:d3:5c:73:42:c9:f9:27:ec:
0d:db:27:b7:1d:40:e5:d4:d6:f2:63:fb:8b:5b:dd:
16:56:1f:fd:3f:a6:29:22:c3:96:ca:aa:f1:07:a2:
cd:2a:e7:10:f4:9a:62:f7:e8:de:f9:a7:1c:2b:f1:
1e:5d:1d:de:38:f3:90:0d:eb:5a:91:8f:94:7f:85:
3a:be:5f:14:3c:bc:76:87:52:fd:eb:44:21:d3:a6:
59:7d:07:55:df:25:cb:ca:83:73:61:28:e4:81:01:
69:3c:0f:9d:ee:97:a4:be:44:e8:62:3a:63:61:b4:
31:13:8b:64:2e:ad:6b:dc:5a:7e:4d:13:a0:d7:df:
f6:08:da:b2:46:57:99:f2:d5:db:42:57:12:cd:a9:
d5:7f:5c:42:55:db:3e:b6:2b:74:79:d3:80:d1:92:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C2:5C:FC:88:03:3B:28:D0:21:54:46:5F:01:4F:6B:75:D0:9B:63
X509v3 Authority Key Identifier:
keyid:AE:F6:34:AC:5E:0B:5A:20:4C:84:10:68:13:75:83:66:1A:18:65:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvY0rF4LWiBMhBBoE3WDZhoYZYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/IMJc_IgDOyjQIVRGXwFPa3XQm2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/rvY0rF4LWiBMhBBoE3WDZhoYZYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:13:af:68:c6:7c:a1:8a:1a:83:2b:06:01:74:d5:b5:32:c3:
a4:61:36:cb:90:2c:e4:39:9c:cf:6a:22:a0:34:08:50:65:df:
ec:2e:0b:ff:92:ff:9d:24:d9:15:a2:c6:32:19:99:ae:c6:cb:
4e:b4:e6:1d:2a:85:93:1b:89:42:68:18:2f:9e:26:76:91:f6:
d8:1e:3e:1e:5f:c1:2f:fc:dd:6d:02:2a:02:b0:f5:29:7a:9d:
6a:3b:3e:1c:a1:cd:09:15:d4:be:1e:a8:3b:e4:5b:c0:81:08:
eb:fe:ea:ed:8a:09:2b:93:6c:dc:b6:d9:4a:f7:0e:e3:58:9f:
28:ab:05:a4:ce:2a:b8:13:a6:f1:38:29:25:31:53:20:68:0a:
69:b6:35:21:2e:c1:ba:d2:7b:c3:2e:b5:fe:66:fa:af:1a:77:
7a:c3:55:07:57:aa:69:63:f7:57:01:c3:19:c8:82:4f:ba:b5:
f3:01:fb:9f:52:38:0a:6c:c5:b8:20:2c:60:7e:ba:a8:11:6f:
44:12:bb:43:b7:4a:57:dc:c0:ed:f3:0c:af:13:b0:23:a0:83:
b5:6f:52:21:01:1a:95:c9:4e:bd:bb:1c:3f:e5:ff:54:87:db:
5b:f1:49:7c:97:1b:15:b6:fd:89:5f:96:8d:a1:c9:3b:b2:9b:
e4:05:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:06:16 2025 by rpki-client