Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa
File: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (raw, json)
Hash identifier: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=
Subject key identifier: 95:35:74:C2:64:01:07:8F:0A:B6:BD:15:7F:6C:A4:1F:B3:63:20:76
Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial: 01942827C921AF81807E931E663E9A43B396
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa
Signing time: Thu 02 Jan 2025 17:54:43 +0000
ROA not before: Thu 02 Jan 2025 17:54:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62457
IP address blocks: 95.178.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c9:21:af:81:80:7e:93:1e:66:3e:9a:43:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Validity
Not Before: Jan 2 17:54:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=953574c26401078f0ab6bd157f6ca41fb3632076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:63:f2:22:f2:98:e1:0d:9a:d1:55:b6:da:
e6:32:3b:1a:8a:7d:60:0a:d7:fe:ea:9c:16:42:a5:
a6:b0:d8:a5:6f:11:59:80:b1:ff:5d:eb:d6:94:d1:
ff:d5:fb:06:77:cd:3b:d6:f9:96:7d:40:a3:0f:4c:
72:a6:54:51:35:fb:46:9e:04:25:d2:b0:56:4c:ac:
b5:8b:4c:05:4d:be:36:86:9f:43:80:e2:2b:24:04:
b7:ca:12:ae:e4:df:6b:87:a6:77:e2:5d:ec:c2:a1:
a0:c0:28:e1:d0:13:cb:67:98:3c:94:b1:b1:b0:16:
93:53:29:e7:29:e5:af:b4:70:df:17:ea:16:4e:3c:
b2:c4:c3:37:95:aa:07:91:13:8d:c2:af:24:c2:0a:
c5:fa:c4:c5:f9:5a:cc:c1:af:3f:ea:a3:dc:6a:bd:
58:81:12:e1:ce:9c:76:16:0c:c4:9c:b9:a6:e3:78:
7c:be:f9:51:5e:71:ed:17:61:e8:e0:e2:32:9f:e6:
99:88:fd:56:39:cb:42:21:37:93:82:dc:bd:05:51:
48:83:50:08:6c:9a:2f:80:f6:52:24:64:8e:ee:7c:
04:19:ce:f5:44:28:0a:ef:75:18:7b:f0:88:2d:15:
c2:e5:82:89:ee:b8:15:99:95:5d:aa:66:14:14:48:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:35:74:C2:64:01:07:8F:0A:B6:BD:15:7F:6C:A4:1F:B3:63:20:76
X509v3 Authority Key Identifier:
keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f7:ab:84:ed:c4:d8:6d:77:b9:8f:3e:03:aa:ef:79:0e:30:
e6:d3:4e:7d:fd:cb:ee:26:d8:a4:89:51:31:f9:81:85:9f:2d:
0c:9b:16:73:72:07:e8:2f:ee:48:b3:de:a7:42:7e:9f:57:f9:
82:8d:78:d7:0f:b3:88:b2:da:c3:2b:a4:92:d4:be:d7:6a:87:
25:e8:62:72:cc:9b:2a:65:54:93:e5:87:0d:f6:c0:33:ee:34:
06:1f:eb:12:04:e5:44:78:ac:14:91:4a:4b:c3:18:58:ba:7a:
42:f5:ee:62:1a:58:c7:9f:ef:72:e3:e5:2d:03:85:c2:0a:83:
14:ee:02:d6:04:14:fa:72:f5:88:2a:f5:87:50:6a:9a:a1:20:
38:46:56:90:fe:a7:ff:13:44:9d:31:e0:d4:be:18:96:30:37:
7a:f5:3e:f6:a6:ec:92:1b:26:a3:a3:6c:be:d2:6a:22:2b:ec:
31:5a:0f:7e:38:16:72:e2:36:25:6a:b5:8d:74:bc:05:eb:d2:
71:15:a8:93:b2:14:29:0b:e0:f2:f3:0b:b9:4d:76:6a:23:a6:
be:bd:9d:75:a2:a2:01:30:c9:fb:16:8a:2f:4b:04:25:6f:42:
72:91:d6:e5:8b:e7:be:6f:bc:e7:cf:c8:15:05:0f:df:18:ff:
a1:80:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:46 2025 by rpki-client