Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/J_s2av7JnOvy1b-Xp4eVnB_Sq6M.roa
File: J_s2av7JnOvy1b-Xp4eVnB_Sq6M.roa (raw, json)
Hash identifier: LCBoUDWwzBI00xbbRPf7EXEPv77+pyR2JVJ7VM9be/s=
Subject key identifier: 27:FB:36:6A:FE:C9:9C:EB:F2:D5:BF:97:A7:87:95:9C:1F:D2:AB:A3
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0195425998BB0AC0169DAAB0DF3A0C8F4567
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/J_s2av7JnOvy1b-Xp4eVnB_Sq6M.roa
Signing time: Wed 26 Feb 2025 13:02:02 +0000
ROA not before: Wed 26 Feb 2025 13:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 188.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:59:98:bb:0a:c0:16:9d:aa:b0:df:3a:0c:8f:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Feb 26 13:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27fb366afec99cebf2d5bf97a787959c1fd2aba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:b9:c2:0a:4a:b3:60:66:b2:09:5d:83:23:
99:5b:54:42:f6:38:ba:7a:c3:1c:a6:f7:7a:09:3a:
21:58:ac:06:50:0a:16:88:03:98:7c:bb:4e:86:4f:
dd:4c:e8:3b:d5:2c:8d:2b:ca:7e:37:5c:d6:d7:57:
66:00:a8:6e:b8:ad:f1:cf:9f:13:6f:15:9f:ed:2d:
38:78:90:96:69:e5:f8:1e:12:90:81:b7:7d:36:30:
05:89:15:31:f2:df:eb:c4:27:1d:4c:a9:31:7a:98:
61:23:00:e0:fb:bc:8e:1d:00:c3:ff:e1:0b:f1:a8:
23:fb:17:df:49:d9:9e:c8:cb:f1:be:4e:7a:ff:e5:
ad:55:ce:2e:ae:ec:40:d9:94:65:51:87:3c:05:5f:
75:20:58:ee:de:4a:55:9f:a5:29:0b:20:c4:1c:6f:
27:c8:73:cd:2b:97:2a:65:1c:e0:4c:45:d4:22:71:
c8:af:97:d2:7e:ac:e0:92:f7:91:23:40:e5:a1:0c:
30:81:5b:6e:21:67:ed:5c:c4:8e:02:4f:14:3e:09:
34:2f:bd:79:ac:5a:95:04:8e:a2:ca:cd:6f:00:0f:
bc:3d:3f:04:21:92:c8:aa:7d:dc:b9:c5:c1:36:20:
c0:2c:1d:f3:10:58:dd:0d:d3:db:c0:38:ea:9a:25:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:36:6A:FE:C9:9C:EB:F2:D5:BF:97:A7:87:95:9C:1F:D2:AB:A3
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/J_s2av7JnOvy1b-Xp4eVnB_Sq6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4c:46:ff:d9:d1:b6:62:e5:89:fe:80:1d:aa:76:1e:c8:bc:
65:6a:73:ae:bf:3f:51:9e:1e:9a:2d:f5:a9:33:ca:dd:1b:8b:
4f:7f:8a:78:a9:8f:a6:31:70:66:27:25:fc:74:2e:5f:c4:5f:
8a:81:04:5a:96:37:61:3d:ed:a0:f1:64:b2:3b:d2:a0:5b:95:
cb:d5:88:19:00:5a:58:7b:3b:1d:19:23:69:80:ee:02:c5:57:
6c:a2:d1:9b:d3:8d:c0:2f:99:1c:bd:89:2a:bb:d1:40:e2:cf:
0d:fe:a3:53:ae:66:78:7b:ae:38:eb:e5:6a:b0:91:f7:cd:f8:
af:a8:17:c4:f6:89:4f:b3:08:0a:d4:65:6d:c7:49:bf:f3:00:
41:f6:ce:c4:43:ee:c9:05:33:6b:47:36:64:20:1d:b0:86:e0:
d4:fe:2b:3d:fe:a5:8b:3b:1d:5c:b1:1a:36:e4:59:62:71:c7:
76:63:ed:45:d8:55:c6:f0:34:7b:8d:a5:4c:59:65:6f:32:94:
a5:7b:59:02:87:7d:63:2a:f4:3c:e1:31:7c:9a:1d:3a:92:14:
3e:a1:c2:a8:80:57:fc:4b:96:5a:f2:23:25:8a:92:f5:0d:66:
dc:93:98:08:08:31:70:4b:05:af:04:49:d3:79:f2:cb:7d:44:
d5:cb:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:23 2025 by rpki-client