Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/IyqYG6lxn2QMSQZwtCxgUFCeJz8.roa
File: IyqYG6lxn2QMSQZwtCxgUFCeJz8.roa (raw, json)
Hash identifier: p83I4mzsEqptIUVslTxPYw5YgkTpPheBBTxPCVXji0s=
Subject key identifier: 23:2A:98:1B:A9:71:9F:64:0C:49:06:70:B4:2C:60:50:50:9E:27:3F
Certificate issuer: /CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Certificate serial: 0194236A03E834813245C8A902E55940FEB3
Authority key identifier: E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/IyqYG6lxn2QMSQZwtCxgUFCeJz8.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 95.215.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:03:e8:34:81:32:45:c8:a9:02:e5:59:40:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=232a981ba9719f640c490670b42c6050509e273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:a8:08:3a:2e:ce:e5:8a:55:de:bd:b2:08:
7f:ab:a0:93:ca:e1:34:b7:76:c2:d3:27:e0:b8:0e:
62:22:b9:27:46:7a:10:12:d2:90:de:68:94:31:e0:
a4:b3:8a:ca:80:4f:92:28:c0:32:88:3f:0a:08:73:
fd:d9:b8:3c:b5:38:e7:7f:25:15:5e:87:17:07:36:
76:90:87:f9:ec:bb:fe:41:f8:35:7a:f2:51:ae:ec:
c7:ee:e9:a3:62:fa:41:74:9d:ba:7b:a7:14:5c:45:
69:93:51:9a:42:97:d9:90:48:80:40:eb:a7:e3:02:
db:a0:4e:32:24:d3:a9:44:c4:89:45:66:8d:c6:53:
0b:52:c8:c9:53:20:15:10:42:50:df:c2:ff:a3:85:
51:76:ad:f8:1e:87:6c:39:4d:a9:10:2e:56:38:c2:
3c:6c:90:56:8e:d4:d3:db:ea:6d:1c:cc:70:5d:93:
2e:0a:d6:88:4c:44:8a:4b:7c:ae:fc:f4:09:c6:75:
57:8d:40:54:10:86:e0:c7:0d:50:48:d9:be:9f:1b:
e3:38:a4:1f:e7:85:97:78:a0:b4:cc:f3:ea:83:8c:
28:10:0c:71:0d:65:94:e6:58:3a:35:2a:51:02:7a:
dd:b3:03:2f:e6:d4:1b:08:21:1e:59:cb:23:ad:6c:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:98:1B:A9:71:9F:64:0C:49:06:70:B4:2C:60:50:50:9E:27:3F
X509v3 Authority Key Identifier:
keyid:E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/IyqYG6lxn2QMSQZwtCxgUFCeJz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.8.0/24
Signature Algorithm: sha256WithRSAEncryption
05:59:60:90:b7:13:04:19:46:fb:c0:02:2b:7b:c9:bb:08:30:
4f:ed:db:33:3f:96:1c:02:01:4a:12:5d:69:5d:d7:ef:76:54:
fb:66:46:45:22:23:01:a0:54:05:a2:64:01:1e:c0:6a:99:1c:
6f:a1:ae:fb:99:de:19:37:63:2a:7b:9a:33:4b:f7:38:c0:ca:
97:f6:b3:2a:10:09:61:56:6c:0f:80:17:5c:c3:63:ac:19:3a:
93:88:52:33:97:e1:27:f3:99:bf:5a:a0:1c:d3:d9:14:3a:f7:
27:05:7a:09:c1:08:7b:24:bf:ec:5d:81:27:47:60:b1:d3:03:
a7:69:64:42:65:0d:0d:a4:3c:58:e3:7e:68:fc:2d:e7:22:30:
be:e1:96:e1:bf:9e:47:39:ca:3a:3f:3a:1a:be:df:fe:df:23:
07:e8:19:d0:bb:c8:e1:bd:27:97:08:af:68:45:5a:ba:78:fc:
da:67:3f:ea:bb:52:c0:bd:ed:6b:6d:7a:0b:07:4a:f7:7b:89:
1b:5e:e3:c2:2e:04:15:07:06:9c:05:d9:23:56:ed:42:6e:79:
c3:08:d0:51:fe:87:f1:af:c3:70:a4:b2:16:a3:b3:d2:cf:ed:
f6:1b:5c:58:06:fa:97:5d:54:86:8f:e3:dd:f0:0e:75:5f:a6:
aa:bc:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:29 2025 by rpki-client