Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/qQRcQNcowo3kCSFmxOhnd54Y8jY.roa
File: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (raw, json)
Hash identifier: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=
Subject key identifier: A9:04:5C:40:D7:28:C2:8D:E4:09:21:66:C4:E8:67:77:9E:18:F2:36
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 0194206830BBE52DA10C61DA1EDFFD32DEE2
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/qQRcQNcowo3kCSFmxOhnd54Y8jY.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43019
IP address blocks: 95.214.212.0/24 maxlen: 24
95.214.213.0/24 maxlen: 24
95.214.214.0/24 maxlen: 24
95.214.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:30:bb:e5:2d:a1:0c:61:da:1e:df:fd:32:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9045c40d728c28de4092166c4e867779e18f236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:87:60:18:41:85:e0:be:f8:e1:f6:1e:e9:
f3:0f:2a:51:8f:d2:83:b5:84:6f:a8:16:87:78:ea:
61:8a:b0:46:fc:d1:6a:43:41:81:29:76:7b:1f:5f:
0d:69:5b:36:5b:0f:ce:ad:07:1c:0e:94:37:f8:ae:
54:5a:f6:3a:4e:90:19:4d:f0:14:01:79:f9:75:8e:
bf:93:1e:29:b0:4d:3e:b6:c1:7c:e3:58:65:0c:be:
b1:c4:f1:93:da:cd:a7:df:6f:5f:9a:79:ec:c9:f1:
46:3f:50:2e:98:ee:5e:26:c2:13:e7:01:b1:bb:55:
71:8f:24:d4:19:c4:e5:fd:9b:df:ca:51:64:06:32:
ae:11:7b:91:f3:cb:37:3d:65:8c:3b:18:81:be:49:
ef:96:14:b0:f4:af:e2:83:55:a5:9c:3b:b5:38:1b:
4c:65:46:de:ac:9e:f1:09:d1:77:8f:e0:75:75:33:
72:42:0b:05:04:90:e6:a4:ea:76:57:46:59:ec:0f:
8c:a5:f3:33:6c:f7:c8:4d:25:79:0b:1b:df:e5:67:
50:67:81:cc:a3:f5:40:15:06:1d:ca:9b:22:4b:4a:
71:e7:85:85:7d:f2:f1:a2:b7:9e:a2:fd:f9:ab:56:
48:ce:e0:08:b7:31:09:63:ad:a9:c9:9c:65:c2:83:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:5C:40:D7:28:C2:8D:E4:09:21:66:C4:E8:67:77:9E:18:F2:36
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/qQRcQNcowo3kCSFmxOhnd54Y8jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:4e:8b:9a:ef:f2:fa:5b:62:b3:e8:49:69:ab:21:cb:3f:11:
69:9f:03:09:79:ab:55:1c:3c:46:5e:84:db:c9:5b:d0:d7:ce:
14:4d:5d:d5:46:df:c4:a7:fe:d7:c2:5a:11:18:7b:65:e8:c9:
4f:29:d2:e0:47:29:91:4d:82:0f:5d:b2:4a:ad:1b:2b:e9:0e:
d6:7e:c0:b0:e0:e1:11:c3:09:42:d9:8e:c7:54:c9:dc:0c:04:
81:20:d7:23:af:f7:fa:0b:92:a3:76:4c:1b:fa:2f:88:31:21:
cf:90:7c:ed:07:dc:87:db:4d:9a:88:c7:b1:f7:77:65:96:f0:
e1:41:1b:48:59:95:74:3b:a0:0a:3c:70:ad:8a:9d:03:ed:b8:
f4:14:47:ab:88:5d:16:aa:e2:5c:f6:8d:de:fd:3d:93:6c:8e:
03:b2:b0:78:5f:1b:e8:28:2a:a5:ae:f7:91:4b:45:56:3b:20:
d9:96:6e:97:d6:f6:ce:1b:d8:fe:17:27:f2:88:f0:1c:52:0d:
29:38:0f:ab:ee:69:e0:8c:6a:f6:21:57:9a:32:22:a4:9b:95:
35:b6:63:e7:5e:23:c2:8c:1c:3c:0c:cc:1a:32:7d:ee:fa:68:
b5:f2:87:41:c2:57:82:6a:d2:5d:52:aa:5e:d6:06:e0:0c:92:
6b:d1:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:38:06 2025 by rpki-client