Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/88NNjHCiX9_36_Ap90bLZBoJu2g.roa
File: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (raw, json)
Hash identifier: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=
Subject key identifier: F3:C3:4D:8C:70:A2:5F:DF:F7:EB:F0:29:F7:46:CB:64:1A:09:BB:68
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 019427B66CC1231FF9A9CB094F540903A0E2
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/88NNjHCiX9_36_Ap90bLZBoJu2g.roa
Signing time: Thu 02 Jan 2025 15:50:54 +0000
ROA not before: Thu 02 Jan 2025 15:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48960
IP address blocks: 95.173.194.0/24 maxlen: 24
95.173.195.0/24 maxlen: 24
95.173.196.0/24 maxlen: 24
95.173.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:6c:c1:23:1f:f9:a9:cb:09:4f:54:09:03:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Jan 2 15:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3c34d8c70a25fdff7ebf029f746cb641a09bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:c6:ab:62:7e:dc:f2:ea:3e:b8:aa:27:61:
94:83:82:42:1d:01:5b:94:5d:4f:39:d7:fe:2f:04:
5c:bf:9a:45:19:3c:58:a4:bf:aa:93:48:6c:d9:08:
0e:b7:13:f9:66:aa:ae:4a:14:39:2a:b3:54:7f:71:
82:03:b4:24:00:72:3d:25:b5:e6:da:2b:4f:7d:d9:
96:42:be:4c:dc:68:33:fc:94:82:31:2e:9a:21:aa:
06:de:36:00:22:60:0e:9f:9f:0d:ba:04:be:3e:49:
a7:fd:f4:6d:f7:55:ec:5e:12:38:4d:5c:92:a1:a2:
97:05:a7:63:d5:0f:6e:f2:d0:cf:44:9a:0a:f1:4b:
07:9e:27:5d:89:58:21:b4:fa:09:eb:91:dd:b1:8a:
06:bb:20:4d:96:a7:74:f4:ad:8d:76:55:c7:b0:bb:
cd:8a:34:42:9b:8f:f4:8d:2c:65:f9:c6:d3:50:91:
4c:7d:65:50:f8:eb:6d:7c:37:96:cf:2d:89:ce:97:
4e:f8:d7:95:00:4b:8c:55:12:c7:d6:2e:a5:ca:cd:
f9:04:1f:3a:e3:ab:08:4d:d6:13:24:d2:58:8f:6e:
1f:85:52:8b:3a:c1:75:68:d4:fb:ff:9e:23:27:b6:
43:26:67:66:2b:f1:ae:ae:12:8a:55:f0:e2:e2:a3:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C3:4D:8C:70:A2:5F:DF:F7:EB:F0:29:F7:46:CB:64:1A:09:BB:68
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/88NNjHCiX9_36_Ap90bLZBoJu2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.194.0-95.173.196.255
95.173.198.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c0:81:94:17:cc:45:e8:2e:f6:92:50:4b:59:10:ec:79:17:
6b:36:02:b7:91:3a:aa:89:04:49:83:61:5f:b5:fc:cb:e2:c5:
01:70:a5:55:4b:71:82:d6:32:4a:4e:f9:40:74:a1:80:35:ce:
e0:ff:82:63:2a:e7:3f:cc:a4:d5:07:9b:63:b3:25:c8:9b:b0:
97:5b:90:9d:7f:f8:81:d1:08:f2:31:a6:69:23:8a:b3:7e:76:
b0:4e:07:80:07:1b:47:54:55:17:ee:63:bd:88:4b:c2:52:cb:
2c:98:85:36:e4:35:28:82:fd:93:90:77:26:a4:94:78:15:04:
31:97:89:c2:72:12:38:a4:40:da:ec:11:4d:ff:f8:a4:4b:25:
cd:26:09:0a:dd:d6:4f:1c:10:9f:05:44:b2:ba:26:f2:5d:9f:
06:9d:c1:be:57:fa:f9:3d:57:e6:58:2a:48:d0:25:ce:06:55:
d9:fe:01:6a:26:ba:87:af:44:ea:65:99:5c:ba:0e:7f:5f:c1:
1b:2e:0e:10:46:d3:42:1d:1d:9b:37:7e:9b:ab:92:8a:37:c0:
f1:47:9e:7b:fb:28:c2:79:d3:46:4d:9a:1e:ba:ee:cf:ce:fa:
35:b2:1d:32:60:96:be:11:cb:30:e9:d7:aa:7f:62:a6:71:c4:
88:d3:88:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:07 2025 by rpki-client