Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa
File: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (raw, json)
Hash identifier: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=
Subject key identifier: 97:19:6B:27:AC:D4:81:64:E3:3C:95:4F:6A:04:3C:FD:B8:A4:7F:76
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 019426D8BF9BFFDF18EC1BE0C8F387762C58
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa
Signing time: Thu 02 Jan 2025 11:48:46 +0000
ROA not before: Thu 02 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 95.214.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:bf:9b:ff:df:18:ec:1b:e0:c8:f3:87:76:2c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: Jan 2 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97196b27acd48164e33c954f6a043cfdb8a47f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:87:11:4f:ac:7a:c4:bc:f0:b6:29:37:67:
0e:bb:cf:fb:f4:2a:3c:d2:36:d7:cf:3e:e2:02:e4:
bb:9f:a8:c2:c7:99:4d:a2:6e:a5:28:32:9b:6e:05:
c2:0d:8a:84:3e:66:8c:20:48:48:22:c4:92:ab:79:
99:a6:b8:01:3f:65:e5:47:70:29:fc:0c:7b:9c:fd:
a7:23:13:b4:2d:6c:0b:20:df:26:6d:f9:f6:f6:c7:
b6:47:e9:11:21:68:b3:71:31:9f:00:88:e0:c0:1f:
f7:91:e6:dc:b3:b9:c7:93:2e:56:3b:b4:92:9f:8d:
0e:ad:23:bb:19:3f:8a:e2:8d:8f:25:b5:9a:e5:2b:
9c:12:25:7e:6c:48:48:cc:77:d3:21:73:c3:1b:2b:
a3:a4:9d:ad:c8:bb:84:90:af:60:5c:ec:7e:61:e9:
48:89:9c:07:06:97:47:7b:6c:ff:ec:8d:47:b1:50:
d5:27:3a:01:a8:ed:c1:2d:67:0a:cb:38:8e:83:e3:
56:fa:b5:2f:96:87:a1:2c:07:68:d0:c8:b1:94:d9:
2e:fe:03:a9:e1:35:0c:2f:9d:88:55:bb:5f:0b:ab:
9e:e1:04:fc:af:6e:24:5a:6f:ec:e8:32:3b:a3:47:
91:65:14:4b:f6:c6:b8:53:27:1a:bd:05:c1:21:80:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:6B:27:AC:D4:81:64:E3:3C:95:4F:6A:04:3C:FD:B8:A4:7F:76
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.96.0/22
Signature Algorithm: sha256WithRSAEncryption
76:73:dd:38:9f:2d:8a:0c:c3:2e:3b:80:7f:84:09:67:e5:7b:
4c:33:f4:13:9e:55:e9:70:73:2d:ab:4b:f2:dd:72:d2:1f:2c:
26:d8:ba:e4:99:24:c9:be:98:74:c9:4e:cb:11:42:55:09:32:
48:92:9e:78:c1:10:a1:bd:86:ad:7f:02:fa:ea:5c:c1:eb:6c:
f0:63:76:e6:33:c1:0b:46:a3:b1:23:ba:73:22:46:0f:0b:bc:
13:35:a1:1f:aa:87:21:71:cf:fe:33:71:23:12:7c:06:c5:3a:
24:12:df:d0:a1:17:21:10:43:8e:d4:00:10:9c:65:9d:1d:c5:
fe:87:73:c3:4e:b1:7c:1e:19:59:bc:8d:7f:51:2e:f2:3c:6c:
35:66:9a:4a:ff:7c:f1:ae:f7:d2:5c:8b:66:5e:ce:f6:a1:ea:
99:d6:be:c7:d1:ba:bf:f6:eb:a7:a1:c1:68:e5:4a:8a:d0:b5:
17:bf:b5:01:0d:71:94:0b:c2:65:3d:9a:02:4f:c1:dc:99:f3:
24:02:34:4b:8b:bd:9d:d5:41:6a:58:12:a9:67:5e:06:4f:2d:
4b:ec:d6:0a:db:6b:bc:6e:bb:f9:5e:5a:1c:1d:4e:3e:9c:0e:
a3:bc:13:d4:39:cb:24:da:cd:d0:d8:94:88:52:45:14:d2:9c:
30:e0:e2:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2L+b/98Y7BvgyPOHdixYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWVjZmE3MWVmZWY5YmIxYmZlN2IyZTQwMjE1Y2RhNWIy
MzFlNWQwHhcNMjUwMTAyMTE0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzE5NmIyN2FjZDQ4MTY0ZTMzYzk1NGY2YTA0M2NmZGI4YTQ3Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZmHEU+sesS88LYpN2cOu8/79Co8
0jbXzz7iAuS7n6jCx5lNom6lKDKbbgXCDYqEPmaMIEhIIsSSq3mZprgBP2XlR3Ap
/Ax7nP2nIxO0LWwLIN8mbfn29se2R+kRIWizcTGfAIjgwB/3kebcs7nHky5WO7SS
n40OrSO7GT+K4o2PJbWa5SucEiV+bEhIzHfTIXPDGyujpJ2tyLuEkK9gXOx+YelI
iZwHBpdHe2z/7I1HsVDVJzoBqO3BLWcKyziOg+NW+rUvloehLAdo0MixlNku/gOp
4TUML52IVbtfC6ue4QT8r24kWm/s6DI7o0eRZRRL9sa4UycavQXBIYAt5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcZayes1IFk4zyVT2oEPP24pH92MB8GA1UdIwQY
MBaAFBuez6ce/vm7G/57LkAhXNpbIx5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQt
ZjEwZDI2ZTNjM2RmLzEvbHhscko2elVnV1RqUEpWUGFnUThfYmlrZjNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQtZjEwZDI2ZTNjM2Rm
LzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9ZgMA0G
CSqGSIb3DQEBCwUAA4IBAQB2c904ny2KDMMuO4B/hAln5XtMM/QTnlXpcHMtq0vy
3XLSHywm2LrkmSTJvph0yU7LEUJVCTJIkp54wRChvYatfwL66lzB62zwY3bmM8EL
RqOxI7pzIkYPC7wTNaEfqochcc/+M3EjEnwGxTokEt/QoRchEEOO1AAQnGWdHcX+
h3PDTrF8HhlZvI1/US7yPGw1ZppK/3zxrvfSXItmXs72oeqZ1r7H0bq/9uunocFo
5UqK0LUXv7UBDXGUC8JlPZoCT8HcmfMkAjRLi72d1UFqWBKpZ14GTy1L7NYK22u8
brv5XlocHU4+nA6jvBPUOcsk2s3Q2JSIUkUU0pww4OJx
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:46 2025 by rpki-client