Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Q_OQ6xn7j1SaIewb6vOOQDUXPp0.roa
File: Q_OQ6xn7j1SaIewb6vOOQDUXPp0.roa (raw, json)
Hash identifier: /rddSw/sMC+W1NkGz/YycU6Fs/0/yt59hnLJm5CS3/Q=
Subject key identifier: 43:F3:90:EB:19:FB:8F:54:9A:21:EC:1B:EA:F3:8E:40:35:17:3E:9D
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0194728CEF4CF58ADC42AA6E01B1A6E619AF
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Q_OQ6xn7j1SaIewb6vOOQDUXPp0.roa
Signing time: Fri 17 Jan 2025 04:37:06 +0000
ROA not before: Fri 17 Jan 2025 04:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 188.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:72:8c:ef:4c:f5:8a:dc:42:aa:6e:01:b1:a6:e6:19:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 17 04:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43f390eb19fb8f549a21ec1beaf38e4035173e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:9d:85:b8:33:4e:8a:56:31:17:d0:25:7a:
b1:ce:8a:e6:e5:ff:f2:b6:63:13:fa:8f:6c:3e:c1:
6d:72:14:d3:2f:22:30:71:fc:32:63:68:1f:74:13:
9f:fe:df:01:b6:54:ff:fa:ed:26:56:5e:ce:31:9c:
9b:1d:35:0a:9d:a7:2e:c7:00:8a:b1:15:f8:af:46:
39:58:f5:ba:a5:00:dc:31:ea:3a:21:e2:5e:cf:0c:
35:3e:45:73:77:41:19:67:94:aa:dc:57:f2:fe:d4:
02:85:fa:8c:1d:a2:6f:7c:d8:3b:99:63:42:17:59:
2f:f5:71:09:62:af:0d:7e:5b:67:12:0d:35:55:c8:
6a:39:ad:1d:ce:95:ca:8a:cb:5e:e3:b8:80:bd:51:
17:93:e2:67:ca:aa:8e:3b:c6:2a:6f:35:d3:d0:63:
08:d0:76:5a:2c:c1:a9:5d:a1:e7:f0:17:42:d3:61:
ee:3d:c5:87:bc:9f:3b:45:8f:cb:27:22:47:2c:e0:
c9:09:53:62:60:3e:73:fe:37:4b:ff:78:77:32:9b:
74:6d:b2:52:e3:16:dd:2b:d1:8a:46:4e:de:41:5d:
c5:8c:6b:a0:6b:47:4a:1f:15:d4:ba:27:c9:cd:4a:
67:1c:67:d8:ca:69:b2:9b:6b:36:39:7a:fb:53:47:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:90:EB:19:FB:8F:54:9A:21:EC:1B:EA:F3:8E:40:35:17:3E:9D
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Q_OQ6xn7j1SaIewb6vOOQDUXPp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fe:82:0c:af:88:03:bd:f7:98:f8:32:7f:8b:40:f9:d6:d7:
28:17:18:ef:b0:e0:88:be:ea:b1:3a:a3:ba:b5:2f:16:79:3f:
71:83:ad:86:e9:7d:ce:59:d2:c2:26:4b:12:b4:26:5b:40:79:
03:50:20:46:23:fa:40:e8:d5:67:b2:ef:4f:41:44:e2:21:04:
f5:f9:b5:bd:de:db:e7:4d:5f:1d:1c:e7:fd:13:b4:0b:91:ac:
be:f6:0e:20:5c:0a:90:f3:18:40:76:29:c5:3d:af:71:f6:b9:
c2:0f:09:4f:ae:bc:db:e7:c5:71:f0:af:56:fa:04:65:53:3e:
1a:de:28:0b:55:08:a9:83:47:91:e1:0d:7b:e2:30:2a:69:d9:
68:ec:81:fe:ba:96:26:db:45:4a:34:6a:0f:8b:eb:c2:02:8a:
91:3b:20:a9:ac:b9:b0:b1:46:84:58:06:85:a3:8f:89:5f:8d:
28:bb:71:a0:89:81:f5:a9:1b:06:7b:8c:b5:e1:d2:e5:a6:c9:
55:de:e1:4b:2d:0c:1d:b3:78:3d:18:f5:2e:ec:30:8a:3c:45:
c8:d5:d3:f0:1f:f3:9c:66:2b:3b:5c:3e:0a:ee:cf:c2:85:e4:
21:95:f4:c4:37:35:2b:d3:5d:ec:5f:df:ad:84:df:1b:ac:56:
b4:90:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:54 2025 by rpki-client