Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa
File: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (raw, json)
Hash identifier: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=
Subject key identifier: 9B:2C:87:83:E1:19:EE:83:EF:2D:53:2D:D0:63:08:35:4D:52:F5:2B
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 019425FC2D3ED3D85C181C216D3A6CC63D42
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa
Signing time: Thu 02 Jan 2025 07:47:51 +0000
ROA not before: Thu 02 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215706
IP address blocks: 95.131.203.0/24 maxlen: 24
195.234.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2d:3e:d3:d8:5c:18:1c:21:6d:3a:6c:c6:3d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Jan 2 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b2c8783e119ee83ef2d532dd06308354d52f52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:e5:27:d5:59:6b:29:54:64:24:e4:7c:0c:
c3:c1:20:9a:03:bc:3d:e5:fc:05:62:e4:cb:a8:58:
64:fc:d2:2f:3a:b5:f7:d1:bf:14:33:03:4d:62:97:
49:e0:a1:c6:b6:20:82:8e:2e:db:7c:46:21:5c:cf:
6c:72:26:bd:74:0c:5a:e7:9f:b8:fc:15:9f:76:32:
ae:b8:c9:58:9e:76:c8:4b:ee:e3:d2:9a:36:08:8b:
58:7e:38:fd:ac:a0:3e:27:10:72:05:83:c2:4d:eb:
ae:85:ad:d5:16:84:db:eb:2a:6c:1c:b5:f0:b7:7c:
31:6a:7e:f2:ec:d8:41:19:73:8a:c2:f6:8c:c7:c2:
a6:50:3c:17:e8:9d:94:89:c4:83:4f:77:6b:93:68:
e8:85:41:e1:62:2b:7a:7b:6f:c7:e2:56:a1:84:f6:
b3:17:ca:22:dc:da:f8:20:3d:ae:bf:91:06:c8:e6:
cf:98:01:f5:80:e4:dd:2f:ec:32:ad:ca:8a:31:db:
e9:c1:01:b7:69:b4:4f:02:ee:67:bb:2b:71:ea:06:
18:46:36:3e:fa:6e:92:4d:b2:47:6a:f0:8c:37:a9:
79:ad:87:05:25:31:53:af:9b:11:19:c3:4f:30:86:
18:0f:36:ef:9d:06:15:68:e2:50:36:f9:89:38:b7:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2C:87:83:E1:19:EE:83:EF:2D:53:2D:D0:63:08:35:4D:52:F5:2B
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.203.0/24
195.234.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7e:16:10:14:22:4d:33:a7:89:c0:26:eb:2d:3d:32:ab:6b:
15:69:ce:a6:0d:1a:5d:b2:d0:7c:33:95:44:1e:d7:06:8f:79:
2e:c0:51:4f:e3:cd:37:e5:b4:53:d0:d6:0a:9b:85:10:8d:5c:
9d:44:b8:e9:50:e5:0c:bc:53:94:53:c3:08:81:1c:02:7a:69:
b2:83:04:06:8a:ac:64:39:7d:c9:65:c6:2e:f5:26:3a:e5:6f:
ec:a7:ac:ac:57:8d:78:00:71:fe:4d:7d:85:b2:44:02:b4:09:
a7:73:45:a0:b8:05:82:12:22:90:5a:06:8c:7a:70:99:4a:b5:
cd:b7:3a:28:c0:3c:99:af:01:b2:c9:77:50:9c:a9:54:49:a9:
de:ac:a8:bc:13:a8:7d:d2:02:f2:15:3c:ce:4b:07:b9:0c:35:
b1:b6:7f:3c:dd:9e:71:d5:cc:d4:ef:8d:f7:96:f4:43:8e:b6:
a6:b2:73:94:ea:74:55:d6:be:43:37:ab:9e:ee:e3:e0:25:85:
d5:a8:fa:5b:5a:bc:1d:54:b3:c1:5b:7c:61:38:01:79:ef:c0:
60:52:7f:9c:89:e2:e1:f0:c7:58:8a:b2:f5:a4:18:83:4e:9a:
5f:f2:b3:14:c2:10:9e:ab:fe:15:6b:08:7a:5c:e1:25:40:96:
45:25:b3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:15 2025 by rpki-client