Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1MTGyamPxvEd5s8LNd3GExRqpV4.roa
File: 1MTGyamPxvEd5s8LNd3GExRqpV4.roa (raw, json)
Hash identifier: byF7rGJB5jLMqYCRkcXbgHRJ9GQhpHj1C/BB9rUWWoc=
Subject key identifier: D4:C4:C6:C9:A9:8F:C6:F1:1D:E6:CF:0B:35:DD:C6:13:14:6A:A5:5E
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA06DE9ECE2E24F06536C822315B99
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1MTGyamPxvEd5s8LNd3GExRqpV4.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 95.215.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:06:de:9e:ce:2e:24:f0:65:36:c8:22:31:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c4c6c9a98fc6f11de6cf0b35ddc613146aa55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:98:a0:c7:b6:68:04:14:b7:bb:1c:8f:a4:
b7:dd:5d:c5:45:b8:d5:24:9a:55:b3:98:30:cf:cf:
09:bf:b6:07:84:50:55:2c:d7:c7:aa:1d:46:13:54:
95:38:84:08:a9:bc:80:83:03:04:05:8a:05:f6:c8:
41:a7:da:62:ab:c6:6a:3e:19:0a:b6:ab:d4:6d:f4:
0c:c0:43:08:7a:a9:6a:21:f1:79:a6:83:fa:24:58:
17:a2:36:33:b0:ba:df:9b:8d:ec:80:b3:48:08:16:
6d:22:b6:f7:6c:f9:23:8b:9c:bd:bf:de:b1:32:ea:
fa:68:6a:62:84:41:39:af:48:9e:50:ea:86:44:fa:
20:d8:2e:61:06:41:05:e8:e6:ba:87:44:0a:fd:71:
54:32:32:ce:5d:08:9a:25:69:7d:82:65:70:b2:b3:
94:ed:35:9f:52:2b:7b:de:1a:5d:22:ed:d0:60:11:
16:81:49:5c:64:42:9d:53:d0:23:fc:5c:e2:9b:a6:
a4:a2:26:34:5a:40:7b:5e:37:07:6e:a2:13:02:2f:
9c:22:c4:22:eb:63:38:0c:2b:1b:27:98:88:05:9b:
f8:1f:91:c7:ab:ed:09:82:6e:54:01:04:24:fb:ca:
92:96:bf:bc:d4:5d:c6:47:7f:bc:a5:37:07:ce:44:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C4:C6:C9:A9:8F:C6:F1:1D:E6:CF:0B:35:DD:C6:13:14:6A:A5:5E
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1MTGyamPxvEd5s8LNd3GExRqpV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.108.0/24
Signature Algorithm: sha256WithRSAEncryption
51:92:e5:6c:9f:d7:04:c5:1a:e8:87:e2:81:1b:25:77:2f:86:
a1:ba:fe:a3:71:19:87:90:c1:ec:8a:69:49:86:a3:e7:31:cd:
f7:69:48:cf:b7:3a:c5:6d:57:64:bd:2c:cd:66:5c:df:30:54:
59:e6:8b:3c:13:23:eb:a6:5e:2a:e4:d9:af:42:2c:00:5a:af:
c8:71:43:e9:28:ae:79:8f:18:67:83:f3:60:8f:96:8a:8f:45:
0d:53:a7:0a:a6:a1:66:85:22:69:a7:aa:ff:e8:20:6b:d4:e2:
64:b8:61:d5:c1:41:7b:37:70:da:cf:9a:84:74:b7:2d:9a:9c:
e8:60:6a:31:42:7b:f1:67:5f:51:c8:d6:f2:42:c6:c0:35:33:
88:32:f1:a9:80:f0:02:6b:4c:90:8b:eb:09:5b:64:82:93:2c:
fb:50:14:09:e1:55:c0:a8:60:86:1c:95:4e:b1:e3:45:ff:a6:
fb:18:41:86:f2:6e:f0:d4:14:75:c6:06:a0:d9:87:ee:6f:f6:
02:af:9d:c1:e5:c5:25:b7:12:d8:d9:99:d9:7d:1c:9c:c2:cc:
71:f0:89:93:c4:86:9a:07:b0:a6:8c:0d:a1:26:56:58:36:06:
6a:13:29:d2:d6:83:6d:0c:8b:ae:84:3d:56:41:91:90:b2:da:
57:d3:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:46 2025 by rpki-client