Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2da833HQj3pvFIHR0SokqGXA9mA.roa
File: 2da833HQj3pvFIHR0SokqGXA9mA.roa (raw, json)
Hash identifier: voPHyYwUlpfBNboGKRf6U8Wxuegy9wY3wp/ZQPVFmzU=
Subject key identifier: D9:D6:BC:DF:71:D0:8F:7A:6F:14:81:D1:D1:2A:24:A8:65:C0:F6:60
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 019442475729714DB3C8D2920C61E4EAC337
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2da833HQj3pvFIHR0SokqGXA9mA.roa
Signing time: Tue 07 Jan 2025 19:39:19 +0000
ROA not before: Tue 07 Jan 2025 19:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 95.214.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:47:57:29:71:4d:b3:c8:d2:92:0c:61:e4:ea:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 7 19:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9d6bcdf71d08f7a6f1481d1d12a24a865c0f660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:83:e1:ee:d3:c2:a8:69:81:00:10:de:71:
e5:23:ff:54:d7:e8:6f:82:04:14:97:c2:36:71:04:
51:a4:87:01:4f:fd:5c:b3:c4:72:da:fb:b3:02:22:
ce:60:28:1b:55:97:5a:57:98:b5:4f:82:b1:7c:14:
7b:bb:bb:b2:5f:6e:ab:76:e3:8d:89:b4:8d:f8:34:
c3:2b:c1:5f:85:a5:6a:12:3b:15:a6:93:16:d0:d1:
95:09:eb:d1:90:ec:fa:2c:3d:42:7e:72:fe:c2:6e:
28:16:99:0f:af:f1:14:45:2b:09:d7:23:0e:7e:6c:
0f:04:e9:3b:a2:a9:4f:98:cb:f2:2c:ec:dc:65:8a:
d0:0b:14:a7:65:40:1d:de:9b:88:28:e0:2b:f4:47:
df:f2:c7:3a:6f:0f:37:3d:97:d9:c1:ab:49:cb:30:
2c:f9:d9:d8:ad:10:ab:90:36:bd:a3:19:86:ab:1c:
6f:ec:54:3a:fe:b2:09:7a:9f:80:46:5f:bb:24:cf:
16:7a:3e:ee:ec:9b:33:e4:03:9d:ed:8e:4a:66:33:
d5:24:ae:78:0b:60:d8:41:f9:8a:aa:27:c1:e5:e9:
e7:2c:9c:2e:c5:54:80:3c:b8:e4:ac:1c:36:12:61:
47:02:1c:72:8c:ec:85:42:79:fb:85:f0:5c:dd:aa:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:BC:DF:71:D0:8F:7A:6F:14:81:D1:D1:2A:24:A8:65:C0:F6:60
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2da833HQj3pvFIHR0SokqGXA9mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
57:39:fa:c9:b4:e9:b0:07:39:41:da:52:01:ec:05:66:f7:04:
4c:ff:64:88:ea:55:f6:7e:b2:92:11:52:61:5e:1a:4f:16:65:
b9:58:8a:c9:d1:ca:80:9c:d1:ae:0a:7f:fb:d0:94:25:eb:03:
36:83:f6:ae:6b:02:fd:d2:1f:d9:52:dd:6b:4c:0f:4f:5e:58:
27:7c:d8:eb:3a:98:4d:0f:1f:6e:bf:7c:54:b9:62:f5:76:eb:
9d:84:4e:7d:a5:0b:2f:39:f5:d2:a7:c9:4e:e3:28:3c:8f:24:
21:4d:a3:dd:6c:ad:d6:a1:1a:d0:7a:80:60:2c:7f:ea:5e:a1:
f2:60:33:14:76:dc:64:be:db:13:e8:ff:8b:24:c6:4d:b2:a0:
81:9f:5f:46:3b:91:02:57:13:5a:74:4a:bc:d7:df:8e:3c:4d:
9f:83:11:56:66:9d:a7:26:d9:a7:ea:c4:6d:0f:67:4a:f3:61:
ef:81:5b:1e:38:c0:6a:41:f3:3b:65:ea:a4:c4:38:08:ab:11:
a6:b6:96:43:d4:b8:42:60:b2:f4:91:02:01:1e:b0:85:a6:59:
ef:84:30:08:fd:4f:6d:20:94:23:fa:58:75:42:fa:0c:7d:96:
24:3a:25:5a:d4:35:9e:fa:04:36:a6:70:99:84:a2:f7:d0:77:
ac:d8:de:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRCR1cpcU2zyNKSDGHk6sM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTA3MTkzOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWQ2YmNkZjcxZDA4ZjdhNmYxNDgxZDFkMTJhMjRhODY1YzBmNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOeD4e7TwqhpgQAQ3nHlI/9U1+hv
ggQUl8I2cQRRpIcBT/1cs8Ry2vuzAiLOYCgbVZdaV5i1T4KxfBR7u7uyX26rduON
ibSN+DTDK8FfhaVqEjsVppMW0NGVCevRkOz6LD1CfnL+wm4oFpkPr/EURSsJ1yMO
fmwPBOk7oqlPmMvyLOzcZYrQCxSnZUAd3puIKOAr9Eff8sc6bw83PZfZwatJyzAs
+dnYrRCrkDa9oxmGqxxv7FQ6/rIJep+ARl+7JM8Wej7u7Jsz5AOd7Y5KZjPVJK54
C2DYQfmKqifB5ennLJwuxVSAPLjkrBw2EmFHAhxyjOyFQnn7hfBc3aoJpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNnWvN9x0I96bxSB0dEqJKhlwPZgMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvMmRhODMzSFFqM3B2RklIUjBTb2txR1hBOW1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9axMA0G
CSqGSIb3DQEBCwUAA4IBAQBXOfrJtOmwBzlB2lIB7AVm9wRM/2SI6lX2frKSEVJh
XhpPFmW5WIrJ0cqAnNGuCn/70JQl6wM2g/auawL90h/ZUt1rTA9PXlgnfNjrOphN
Dx9uv3xUuWL1duudhE59pQsvOfXSp8lO4yg8jyQhTaPdbK3WoRrQeoBgLH/qXqHy
YDMUdtxkvtsT6P+LJMZNsqCBn19GO5ECVxNadEq819+OPE2fgxFWZp2nJtmn6sRt
D2dK82HvgVseOMBqQfM7ZeqkxDgIqxGmtpZD1LhCYLL0kQIBHrCFplnvhDAI/U9t
IJQj+lh1QvoMfZYkOiVa1DWe+gQ2pnCZhKL30Hes2N6i
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:54:12 2025 by rpki-client