Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/x-aWmx9xt3UlN8LTKHOaep8nb1E.roa
File: x-aWmx9xt3UlN8LTKHOaep8nb1E.roa (raw, json)
Hash identifier: URKvcIolbNVwyMOId7LzopRA4aL+b5mPWmLF3PC5lbw=
Subject key identifier: C7:E6:96:9B:1F:71:B7:75:25:37:C2:D3:28:73:9A:7A:9F:27:6F:51
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F1B0F05C44974B39F11F32B2425D1
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/x-aWmx9xt3UlN8LTKHOaep8nb1E.roa
Signing time: Thu 02 Jan 2025 05:48:43 +0000
ROA not before: Thu 02 Jan 2025 05:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42626
IP address blocks: 95.183.216.0/22 maxlen: 22
193.255.58.0/24 maxlen: 24
194.27.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1b:0f:05:c4:49:74:b3:9f:11:f3:2b:24:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7e6969b1f71b7752537c2d328739a7a9f276f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:07:1d:f0:9f:6b:59:15:58:bf:96:b7:93:
0a:09:39:1b:a4:c1:10:87:ae:f9:a3:77:58:34:a3:
66:12:6b:6e:f8:c7:76:dc:96:28:ea:5b:b2:36:66:
7a:21:b3:10:43:e9:77:65:40:c0:ed:97:6d:b7:23:
bc:88:9c:ae:1d:02:c8:33:1a:8d:ac:0b:b4:c2:2e:
3c:d5:49:c1:c7:68:ae:49:00:6f:81:f9:7b:9e:fa:
91:5d:44:06:28:83:bf:99:e1:64:61:ea:8f:ca:3f:
36:5c:72:50:49:80:bc:1d:0f:be:d3:63:ef:59:bd:
14:04:81:10:3f:95:b1:7f:74:f3:f7:d6:af:19:19:
6f:71:af:6a:54:e7:1b:ca:81:8e:48:4d:0a:b7:30:
52:8b:22:c4:8e:ef:56:fc:0b:ae:bc:75:b7:37:3a:
91:4f:26:4b:0b:cb:a9:f5:9e:6b:3c:69:70:fc:3f:
95:33:a6:e1:e2:9f:41:57:9b:78:6b:30:92:9b:46:
8d:e5:61:67:bc:08:c1:b2:9a:30:c3:38:e4:39:14:
28:d7:f0:f3:cd:67:fe:86:2e:3d:31:b8:74:33:16:
de:0b:de:19:cf:98:30:72:bc:a9:8f:f8:a2:5f:69:
00:ac:7c:d9:64:17:27:49:d0:42:f5:6f:b8:c1:13:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:96:9B:1F:71:B7:75:25:37:C2:D3:28:73:9A:7A:9F:27:6F:51
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/x-aWmx9xt3UlN8LTKHOaep8nb1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.216.0/22
193.255.58.0/24
194.27.48.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:cf:97:01:45:00:e0:78:e3:58:5f:4c:06:fb:78:10:93:2c:
28:5d:e0:86:49:d0:b0:be:2c:40:c8:67:56:6d:f2:ef:6e:da:
eb:a2:9b:e6:86:79:ac:fe:86:94:86:3b:1e:a4:29:22:d0:56:
42:c8:71:28:60:5c:02:a9:63:ba:83:d5:e1:d1:69:07:2a:a3:
61:f7:a1:66:14:36:3c:04:16:b1:04:b5:e8:55:f3:2d:4f:30:
2c:ee:5f:63:fc:dd:46:8d:9d:d1:d1:66:5e:db:1d:1c:17:d2:
84:e5:09:7b:9a:60:f6:00:98:d7:72:b6:27:2f:b4:16:ec:94:
d5:b6:34:2a:0f:9a:9e:80:d9:55:bf:33:51:5d:b3:ec:82:15:
b5:7e:99:d0:64:b1:93:8b:af:61:f1:cd:67:c7:ad:56:c8:5e:
bc:ee:f4:9a:a3:c7:47:2d:f1:22:c4:3b:e1:49:a4:b3:b7:7b:
54:67:8f:21:62:54:ff:7a:32:57:c5:e6:ca:a9:ab:6e:31:79:
82:60:c5:8f:9b:a1:db:59:c5:02:ae:29:99:4a:ad:1f:c4:a3:
50:8a:a7:24:ce:a8:fc:2d:7a:14:ed:04:a6:0d:78:da:a1:15:
91:d4:7d:ab:8a:58:a5:36:bd:92:0d:4f:a2:3a:4e:d5:8d:2d:
5c:92:6e:69
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQljxsPBcRJdLOfEfMrJCXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjUwMTAyMDU0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2U2OTY5YjFmNzFiNzc1MjUzN2MyZDMyODczOWE3YTlmMjc2ZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UQHHfCfa1kVWL+Wt5MKCTkbpMEQ
h675o3dYNKNmEmtu+Md23JYo6luyNmZ6IbMQQ+l3ZUDA7ZdttyO8iJyuHQLIMxqN
rAu0wi481UnBx2iuSQBvgfl7nvqRXUQGKIO/meFkYeqPyj82XHJQSYC8HQ++02Pv
Wb0UBIEQP5Wxf3Tz99avGRlvca9qVOcbyoGOSE0KtzBSiyLEju9W/AuuvHW3NzqR
TyZLC8up9Z5rPGlw/D+VM6bh4p9BV5t4azCSm0aN5WFnvAjBspowwzjkORQo1/Dz
zWf+hi49Mbh0MxbeC94Zz5gwcrypj/iiX2kArHzZZBcnSdBC9W+4wRO4lQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMfmlpsfcbd1JTfC0yhzmnqfJ29RMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEveC1hV214OXh0M1VsTjhMVEtIT2FlcDhuYjFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCX7fYAwQA
wf86AwQBwhswMA0GCSqGSIb3DQEBCwUAA4IBAQCaz5cBRQDgeONYX0wG+3gQkywo
XeCGSdCwvixAyGdWbfLvbtrropvmhnms/oaUhjsepCki0FZCyHEoYFwCqWO6g9Xh
0WkHKqNh96FmFDY8BBaxBLXoVfMtTzAs7l9j/N1GjZ3R0WZe2x0cF9KE5Ql7mmD2
AJjXcrYnL7QW7JTVtjQqD5qegNlVvzNRXbPsghW1fpnQZLGTi69h8c1nx61WyF68
7vSao8dHLfEixDvhSaSzt3tUZ48hYlT/ejJXxebKqatuMXmCYMWPm6HbWcUCrimZ
Sq0fxKNQiqckzqj8LXoU7QSmDXjaoRWR1H2rililNr2SDU+iOk7VjS1ckm5p
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:08:47 2025 by rpki-client