Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa
File: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (raw, json)
Hash identifier: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=
Subject key identifier: 48:5F:23:3E:23:0A:F7:BA:80:D3:05:0A:B1:2C:49:EA:E8:CB:39:5C
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B56FC35E952BBECD0A0A41AF849CF
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35448
IP address blocks: 95.158.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:56:fc:35:e9:52:bb:ec:d0:a0:a4:1a:f8:49:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485f233e230af7ba80d3050ab12c49eae8cb395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:a6:6f:6c:ef:df:64:8a:92:0f:06:b0:93:
ed:62:a8:1f:c5:a8:2e:6a:95:be:75:4c:86:5f:8a:
8c:de:f8:4c:3d:07:31:99:32:c0:72:89:39:8c:cb:
6f:e0:1c:3c:fc:04:d1:cf:46:4f:a3:2c:28:01:8d:
46:1a:6b:c7:32:a5:1b:5e:14:ae:f6:f4:e4:26:e3:
80:ca:ed:cd:82:86:fa:23:bc:91:6f:47:10:4d:f6:
bd:87:e3:54:57:80:66:d9:18:ed:0e:0b:93:3e:69:
51:ad:8d:28:f7:75:f0:d2:0b:03:86:d6:86:83:be:
fd:5e:7f:d2:47:db:c2:c9:62:59:15:9b:0f:f4:c5:
25:f9:4c:1f:d1:0c:b9:b6:b1:88:1b:21:8a:ca:12:
4e:37:d0:9d:65:d8:18:b2:45:d7:6a:bd:3b:94:12:
7d:0f:f2:5f:60:8f:e1:6c:5d:73:2e:95:83:b5:53:
71:25:53:df:34:a8:b0:08:48:7d:07:5d:82:c4:ea:
95:75:92:47:56:c0:dc:33:02:d2:c6:01:41:e5:08:
0e:65:dd:ef:7e:8f:a2:f2:a1:88:21:35:26:a1:9e:
10:e4:58:e1:8b:82:4f:85:cd:51:fb:23:ec:99:c9:
33:1d:af:d9:56:42:ea:98:9a:d3:d7:ec:2b:c3:0b:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5F:23:3E:23:0A:F7:BA:80:D3:05:0A:B1:2C:49:EA:E8:CB:39:5C
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d9:16:72:c5:2a:03:ad:5d:a5:ee:63:0b:03:76:ae:42:8f:
43:b5:7b:31:e3:81:51:6e:a3:29:b2:29:55:aa:ed:3d:8b:f5:
98:87:15:01:a5:4f:09:15:bc:38:a5:19:f1:8c:40:d2:d1:fc:
d1:46:4b:a2:8b:d1:53:ec:24:3e:f7:27:54:21:44:31:c9:df:
33:1c:4a:8e:40:dd:71:b5:27:1e:2c:a8:3c:19:2a:da:4c:1d:
04:d2:cf:f8:b2:fb:28:23:45:d7:33:e1:de:55:6f:b7:28:fe:
ed:13:d6:ea:74:99:9c:e6:5d:9e:a6:27:8c:21:eb:a3:5c:0e:
a5:06:70:99:81:2c:61:66:71:2e:02:39:72:f0:94:24:6d:ca:
56:4b:45:1c:4e:3f:ab:32:6b:f6:d7:69:30:8a:df:f7:76:48:
a3:d8:45:a4:c2:f7:70:af:75:12:f8:bb:bd:f4:4c:d5:5a:af:
9c:76:6b:23:17:91:6d:94:a3:fd:b1:f7:12:1e:05:b2:4b:f2:
e8:80:65:9f:3b:48:22:b7:4d:19:1f:9a:e7:cd:3d:a6:65:1a:
60:29:76:15:ae:a1:f8:ba:71:4b:87:b3:fb:22:fc:ef:c2:b4:
b6:b3:8b:cf:6a:a5:16:98:20:b1:1b:55:b7:7b:10:9e:26:b4:
53:b2:62:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma1b8NelSu+zQoKQa+EnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjUwMTAyMDk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODVmMjMzZTIzMGFmN2JhODBkMzA1MGFiMTJjNDllYWU4Y2IzOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA172mb2zv32SKkg8GsJPtYqgfxagu
apW+dUyGX4qM3vhMPQcxmTLAcok5jMtv4Bw8/ATRz0ZPoywoAY1GGmvHMqUbXhSu
9vTkJuOAyu3Ngob6I7yRb0cQTfa9h+NUV4Bm2RjtDguTPmlRrY0o93Xw0gsDhtaG
g779Xn/SR9vCyWJZFZsP9MUl+Uwf0Qy5trGIGyGKyhJON9CdZdgYskXXar07lBJ9
D/JfYI/hbF1zLpWDtVNxJVPfNKiwCEh9B12CxOqVdZJHVsDcMwLSxgFB5QgOZd3v
fo+i8qGIITUmoZ4Q5Fjhi4JPhc1R+yPsmckzHa/ZVkLqmJrT1+wrwwv0NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhfIz4jCve6gNMFCrEsSeroyzlcMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvU0Y4alBpTUs5N3FBMHdVS3NTeEo2dWpMT1Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX56QMA0G
CSqGSIb3DQEBCwUAA4IBAQBu2RZyxSoDrV2l7mMLA3auQo9DtXsx44FRbqMpsilV
qu09i/WYhxUBpU8JFbw4pRnxjEDS0fzRRkuii9FT7CQ+9ydUIUQxyd8zHEqOQN1x
tSceLKg8GSraTB0E0s/4svsoI0XXM+HeVW+3KP7tE9bqdJmc5l2epieMIeujXA6l
BnCZgSxhZnEuAjly8JQkbcpWS0UcTj+rMmv212kwit/3dkij2EWkwvdwr3US+Lu9
9EzVWq+cdmsjF5FtlKP9sfcSHgWyS/LogGWfO0git00ZH5rnzT2mZRpgKXYVrqH4
unFLh7P7IvzvwrS2s4vPaqUWmCCxG1W3exCeJrRTsmI5
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:30 2025 by rpki-client