Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa
File: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (raw, json)
Hash identifier: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=
Subject key identifier: 6E:0D:30:D0:33:F1:BB:21:A1:E4:F2:81:0B:99:48:5D:DC:26:DC:46
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 019498C09A20F0F6844FD663199658F07156
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa
Signing time: Fri 24 Jan 2025 14:39:06 +0000
ROA not before: Fri 24 Jan 2025 14:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265515
IP address blocks: 95.210.33.0/24 maxlen: 24
95.210.95.0/24 maxlen: 24
176.227.129.0/24 maxlen: 24
176.227.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:c0:9a:20:f0:f6:84:4f:d6:63:19:96:58:f0:71:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 24 14:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0d30d033f1bb21a1e4f2810b99485ddc26dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:42:f4:8b:74:13:b8:e0:36:6d:ef:2a:80:
44:71:c6:f1:04:ed:a9:8f:4a:ea:92:9b:54:77:d4:
90:57:c2:09:31:56:b1:e5:ac:e0:a9:60:39:99:4c:
2a:f5:80:40:65:b2:01:71:f8:a7:96:30:ac:0b:db:
93:3b:10:61:11:4b:e0:75:8a:b5:2e:3e:1f:03:11:
c4:54:0e:59:67:1f:08:4b:7f:07:51:28:66:56:34:
54:46:51:d0:18:62:bb:da:95:2b:5e:d6:75:18:a3:
19:da:95:8e:8d:c7:89:38:37:c4:46:09:7e:43:81:
16:8f:0e:a8:cc:9e:47:c2:15:3a:bd:e6:00:a6:3b:
64:a7:69:a6:63:6d:35:34:34:fa:e8:cc:21:c0:80:
3a:dc:cc:b2:a9:92:ac:e9:5f:7e:58:ae:be:e9:30:
27:ce:6c:a5:03:e3:74:aa:d7:2e:b6:6f:08:41:b4:
b6:e3:5d:14:0b:f5:1d:0d:4a:b6:fc:97:fa:7a:57:
1d:17:b1:d7:b8:0d:d6:f7:74:1b:c9:2d:a9:38:d1:
4c:e2:74:65:96:03:b0:ce:0a:1c:e0:2e:23:23:d5:
5f:a0:2a:c7:ec:b3:46:ab:52:50:21:85:6f:c4:e2:
cb:db:3e:e5:df:20:a4:f1:d9:32:ba:52:08:51:b7:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:30:D0:33:F1:BB:21:A1:E4:F2:81:0B:99:48:5D:DC:26:DC:46
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.210.33.0/24
95.210.95.0/24
176.227.129.0/24
176.227.133.0/24
Signature Algorithm: sha256WithRSAEncryption
12:63:c1:c3:61:86:be:8c:35:fc:e2:78:d6:0e:b9:f9:87:58:
70:90:48:02:22:e2:28:13:28:be:cd:f6:a7:2f:41:be:4b:ad:
ee:f2:04:1b:1a:5a:dc:f0:2b:cc:0d:73:96:9b:de:1d:e6:d4:
fb:a8:f9:1f:8d:48:b4:28:4e:62:65:db:22:f4:a1:cd:f4:52:
ca:80:ae:e2:3b:8f:d7:56:48:2c:52:f4:9f:d6:5c:cf:ac:dd:
13:da:b1:43:f5:7a:cf:af:a6:d0:f0:f6:39:ed:b3:4c:a0:bb:
9a:db:3f:99:bc:a2:ff:6e:24:ef:b6:77:3c:3b:81:18:2b:79:
ab:1e:7e:4e:b0:b7:6f:b3:75:35:79:7d:1c:f7:e7:fc:de:ff:
49:7a:f1:13:13:99:2e:10:f4:a2:b4:5a:d0:e8:4c:f7:c4:40:
d7:4d:02:17:f2:a6:4b:32:f6:6d:7c:92:58:f1:40:34:7d:19:
0c:ad:fa:c0:28:28:95:1a:23:ce:fb:c7:4a:5e:e9:74:09:a9:
fc:72:4f:d3:ae:1b:e9:70:5e:bb:29:2d:d7:ae:78:47:df:0e:
fc:c6:d7:e6:45:d7:89:1f:90:2a:85:3c:11:9d:02:74:f4:83:
98:cd:f5:ff:67:f8:56:fd:d2:a3:14:2f:69:23:40:27:bf:36:
85:0d:40:69
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZSYwJog8PaET9ZjGZZY8HFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjUwMTI0MTQzOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTBkMzBkMDMzZjFiYjIxYTFlNGYyODEwYjk5NDg1ZGRjMjZkYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6RC9It0E7jgNm3vKoBEccbxBO2p
j0rqkptUd9SQV8IJMVax5azgqWA5mUwq9YBAZbIBcfinljCsC9uTOxBhEUvgdYq1
Lj4fAxHEVA5ZZx8IS38HUShmVjRURlHQGGK72pUrXtZ1GKMZ2pWOjceJODfERgl+
Q4EWjw6ozJ5HwhU6veYApjtkp2mmY201NDT66MwhwIA63MyyqZKs6V9+WK6+6TAn
zmylA+N0qtcutm8IQbS2410UC/UdDUq2/Jf6elcdF7HXuA3W93QbyS2pONFM4nRl
lgOwzgoc4C4jI9VfoCrH7LNGq1JQIYVvxOLL2z7l3yCk8dkyulIIUbe6mQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFG4NMNAz8bshoeTygQuZSF3cJtxGMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEvYmcwdzBEUHh1eUdoNVBLQkM1bElYZHdtM0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX9IhAwQA
X9JfAwQAsOOBAwQAsOOFMA0GCSqGSIb3DQEBCwUAA4IBAQASY8HDYYa+jDX84njW
Drn5h1hwkEgCIuIoEyi+zfanL0G+S63u8gQbGlrc8CvMDXOWm94d5tT7qPkfjUi0
KE5iZdsi9KHN9FLKgK7iO4/XVkgsUvSf1lzPrN0T2rFD9XrPr6bQ8PY57bNMoLua
2z+ZvKL/biTvtnc8O4EYK3mrHn5OsLdvs3U1eX0c9+f83v9JevETE5kuEPSitFrQ
6Ez3xEDXTQIX8qZLMvZtfJJY8UA0fRkMrfrAKCiVGiPO+8dKXul0Can8ck/Trhvp
cF67KS3XrnhH3w78xtfmRdeJH5AqhTwRnQJ09IOYzfX/Z/hW/dKjFC9pI0AnvzaF
DUBp
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:12:05 2025 by rpki-client