Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/0POJciZWWro_jDW5gLUlia7VkPo.roa
File: 0POJciZWWro_jDW5gLUlia7VkPo.roa (raw, json)
Hash identifier: PUX6TlXdoBD0rDCCnC9XhihGwmsPlYpjzYrlI5kJTEM=
Subject key identifier: D0:F3:89:72:26:56:5A:BA:3F:8C:35:B9:80:B5:25:89:AE:D5:90:FA
Certificate issuer: /CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Certificate serial: 018570270254C380CCF3993D005E937EC1D3
Authority key identifier: A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/0POJciZWWro_jDW5gLUlia7VkPo.roa
Signing time: Mon 02 Jan 2023 01:44:42 +0000
ROA not before: Mon 02 Jan 2023 01:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42947
IP address blocks: 95.214.241.0/24 maxlen: 24
95.214.242.0/23 maxlen: 24
94.154.3.0/24 maxlen: 24
5.181.236.0/22 maxlen: 24
45.14.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:27:02:54:c3:80:cc:f3:99:3d:00:5e:93:7e:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Validity
Not Before: Jan 2 01:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0f3897226565aba3f8c35b980b52589aed590fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:a4:99:93:00:a9:75:9a:ce:21:f4:19:29:
1f:ea:53:a6:d7:d1:4e:b1:19:f4:cb:5f:8c:43:90:
f6:14:31:7c:10:09:de:fc:fd:42:08:66:e1:bb:5e:
a8:d2:fc:03:23:db:0a:10:f0:91:58:03:5c:1a:25:
19:b9:89:8f:ec:2d:ee:5c:14:2d:00:ff:e4:01:2e:
b0:26:a8:7c:47:f3:6b:9f:e1:20:df:b2:bc:92:c8:
93:07:19:31:3e:11:6e:1d:66:12:af:db:56:8a:fc:
9d:3d:3b:31:b9:eb:25:64:10:99:59:7a:ac:79:b7:
5d:f5:cd:bb:31:be:cc:e4:a0:9d:aa:82:f3:5a:97:
a0:94:8e:0e:18:8f:4a:98:3b:79:c2:da:67:47:41:
a9:de:21:ad:bd:fa:93:b8:be:0e:70:ec:ef:ac:03:
84:29:60:6f:2c:3a:25:97:28:ab:be:60:5e:0a:a5:
85:64:9b:66:26:2b:a9:aa:3e:02:f0:15:76:73:b0:
0f:1c:34:9a:16:88:c3:73:b5:9c:a4:77:57:2a:e2:
f3:3c:0c:b2:48:9c:6f:f1:87:25:20:e7:aa:a8:93:
ee:f1:b5:74:55:07:63:8c:83:4f:f3:c4:e1:03:f7:
4f:ab:bf:d7:12:62:d0:16:d2:61:3b:e7:09:55:14:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F3:89:72:26:56:5A:BA:3F:8C:35:B9:80:B5:25:89:AE:D5:90:FA
X509v3 Authority Key Identifier:
keyid:A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/0POJciZWWro_jDW5gLUlia7VkPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.236.0/22
45.14.120.0/22
94.154.3.0/24
95.214.241.0-95.214.243.255
Signature Algorithm: sha256WithRSAEncryption
5c:34:78:76:40:13:ab:0a:18:7a:ac:80:25:8e:07:c0:b3:8b:
fd:93:d6:93:bd:95:a1:92:8b:3d:02:ac:16:44:27:bb:bc:6a:
9a:b6:96:64:c6:1b:00:36:a7:ab:f9:bd:62:e8:4d:4e:92:f3:
a1:55:90:b2:36:49:7c:ba:79:bb:27:b3:96:62:87:9e:92:a1:
6b:de:df:90:45:6d:e4:65:25:c8:b4:a4:cc:21:cd:4e:8b:c9:
66:cc:d6:4d:e5:0d:6c:2e:4e:e5:49:0f:9f:ef:32:85:bd:36:
cb:0d:73:11:5c:90:de:0f:50:1d:c8:6c:7d:cc:3f:a1:6b:3f:
60:7d:3a:8f:64:1b:9c:0a:80:8c:b3:dc:56:f0:cd:c3:79:56:
db:9a:43:e5:cb:53:88:09:96:18:6b:73:9f:c7:b9:35:3c:9b:
e4:f8:31:8e:a2:5e:1d:21:53:f8:fd:8e:d7:71:fe:d1:a6:ba:
9a:0f:1c:4d:d9:57:80:fc:36:0b:c1:42:91:64:44:a0:f8:76:
d5:5f:52:02:8c:bb:02:d2:95:ec:9a:e4:41:36:46:1a:69:58:
2b:02:30:e1:08:eb:f9:06:79:f0:8e:79:f4:e6:1c:3c:d8:40:
4f:c4:18:28:f6:44:2a:0e:b1:df:9c:1b:1b:86:ec:6e:d5:92:
6c:d5:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:15:51 2025 by rpki-client