Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa
File: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (raw, json)
Hash identifier: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=
Subject key identifier: 98:25:9F:D4:5D:4C:9B:B3:81:A4:CE:E4:06:DF:D5:E8:57:01:CD:C3
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 01942521D0FFBAC26122962498E1D64AC876
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 95.130.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d0:ff:ba:c2:61:22:96:24:98:e1:d6:4a:c8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98259fd45d4c9bb381a4cee406dfd5e85701cdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:6b:d8:14:54:08:88:5c:73:96:f3:6c:b1:
55:43:f4:cb:46:26:1f:e2:52:b6:43:b5:34:59:4b:
59:61:62:b0:6f:6b:60:4c:b3:d7:d3:20:45:0e:ab:
02:c6:40:27:18:fa:ca:cf:3c:b0:1d:a5:39:1d:6f:
07:6e:e0:42:a7:5c:7b:0c:c2:2d:59:36:39:80:a9:
e7:85:c9:70:13:f7:62:ae:51:ca:d7:0d:25:3d:a2:
04:e9:32:cd:e8:ec:88:66:92:41:21:ec:68:06:7f:
82:a1:39:b0:aa:56:7d:b7:03:58:92:ab:c9:79:06:
66:1a:81:02:5f:cd:97:47:c2:17:a9:82:46:86:67:
f1:03:18:9c:e4:1f:be:a2:76:91:d5:de:fe:b4:83:
77:05:4f:a1:cc:fd:0d:c9:78:ea:c8:e7:3b:d8:35:
79:17:25:eb:82:9a:fc:70:45:5d:fe:c3:9f:e9:97:
cc:ee:ba:99:2d:9a:af:33:12:dd:2f:c8:f2:53:39:
f5:6f:7c:ad:c7:76:d9:66:09:8a:6f:de:00:e0:38:
37:72:60:ed:1d:7e:c5:8a:d2:fa:ea:5e:12:67:8f:
7c:ce:7e:b6:68:d0:10:c0:a2:51:57:df:6c:d0:f7:
8a:23:b4:79:48:c5:8d:b8:40:d7:fe:83:b1:c3:ca:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:9F:D4:5D:4C:9B:B3:81:A4:CE:E4:06:DF:D5:E8:57:01:CD:C3
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.184.0/23
Signature Algorithm: sha256WithRSAEncryption
63:f0:2e:05:b7:c9:6f:4f:cc:00:a4:0f:f6:33:e1:d5:2f:fb:
dc:43:25:8e:ff:02:da:fe:72:93:f4:39:83:ce:9b:cd:58:3a:
5f:87:d4:c6:7a:32:37:e0:1c:a6:38:64:9d:37:a3:37:27:d2:
9a:01:cf:fd:42:99:3b:69:be:4d:9a:b0:f6:c4:5d:40:c3:87:
a9:c3:ec:1d:39:9a:fa:51:c1:80:8b:39:d4:9e:55:3f:bb:73:
c0:0e:52:46:ed:32:34:15:05:eb:f8:04:64:56:0b:55:48:29:
6d:9c:d9:11:80:49:aa:52:60:fc:46:3a:ab:8c:89:f5:75:7d:
f5:8c:33:51:65:ba:e5:76:3d:22:f2:de:be:a8:f8:72:89:26:
f2:e1:2e:91:63:b2:43:6b:92:4a:f7:fe:a5:08:8e:c3:41:7a:
4b:fe:01:70:d2:4a:87:90:a2:57:83:d5:8b:d3:4c:36:ac:b9:
d1:8f:0e:ac:a3:d5:8b:36:55:0b:f3:41:2d:8f:e3:a3:a7:01:
43:85:c7:db:3c:b9:ba:4e:65:a6:18:cb:df:59:84:8b:77:69:
4c:c3:79:d4:ce:d9:c1:f4:94:ee:b4:8c:f3:cf:1b:bd:7c:10:
cf:49:00:39:42:08:dd:e1:54:8a:ae:48:6e:22:ac:92:28:d6:
7e:56:52:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIdD/usJhIpYkmOHWSsh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz
NzZlZjAwHhcNMjUwMTAyMDM0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODI1OWZkNDVkNGM5YmIzODFhNGNlZTQwNmRmZDVlODU3MDFjZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsBr2BRUCIhcc5bzbLFVQ/TLRiYf
4lK2Q7U0WUtZYWKwb2tgTLPX0yBFDqsCxkAnGPrKzzywHaU5HW8HbuBCp1x7DMIt
WTY5gKnnhclwE/dirlHK1w0lPaIE6TLN6OyIZpJBIexoBn+CoTmwqlZ9twNYkqvJ
eQZmGoECX82XR8IXqYJGhmfxAxic5B++onaR1d7+tIN3BU+hzP0NyXjqyOc72DV5
FyXrgpr8cEVd/sOf6ZfM7rqZLZqvMxLdL8jyUzn1b3ytx3bZZgmKb94A4Dg3cmDt
HX7FitL66l4SZ498zn62aNAQwKJRV99s0PeKI7R5SMWNuEDX/oOxw8rS8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgln9RdTJuzgaTO5Abf1ehXAc3DMB8GA1UdIwQY
MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct
YzgxM2NlMGY1ZTQ3LzEvbUNXZjFGMU1tN09CcE03a0J0X1Y2RmNCemNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3
LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4K4MA0G
CSqGSIb3DQEBCwUAA4IBAQBj8C4Ft8lvT8wApA/2M+HVL/vcQyWO/wLa/nKT9DmD
zpvNWDpfh9TGejI34BymOGSdN6M3J9KaAc/9Qpk7ab5NmrD2xF1Aw4epw+wdOZr6
UcGAiznUnlU/u3PADlJG7TI0FQXr+ARkVgtVSCltnNkRgEmqUmD8RjqrjIn1dX31
jDNRZbrldj0i8t6+qPhyiSby4S6RY7JDa5JK9/6lCI7DQXpL/gFw0kqHkKJXg9WL
00w2rLnRjw6so9WLNlUL80Etj+OjpwFDhcfbPLm6TmWmGMvfWYSLd2lMw3nUztnB
9JTutIzzzxu9fBDPSQA5Qgjd4VSKrkhuIqySKNZ+VlIR
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:54 2025 by rpki-client