Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/50rRL9X8tFzrH9Pao7-gkFnU8c8.roa
File: 50rRL9X8tFzrH9Pao7-gkFnU8c8.roa (raw, json)
Hash identifier: jO7lN5WZlnXcEhBFXOcAQklZV4ejAicZmZD3QpiSxwQ=
Subject key identifier: E7:4A:D1:2F:D5:FC:B4:5C:EB:1F:D3:DA:A3:BF:A0:90:59:D4:F1:CF
Certificate issuer: /CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Certificate serial: 0185702703208565CC7129FCDD5DC423707E
Authority key identifier: A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/50rRL9X8tFzrH9Pao7-gkFnU8c8.roa
Signing time: Mon 02 Jan 2023 01:44:42 +0000
ROA not before: Mon 02 Jan 2023 01:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59885
IP address blocks: 95.214.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:27:03:20:85:65:cc:71:29:fc:dd:5d:c4:23:70:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Validity
Not Before: Jan 2 01:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e74ad12fd5fcb45ceb1fd3daa3bfa09059d4f1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:d2:6e:22:82:50:9e:30:df:d0:54:b5:0f:
30:4c:ce:cc:30:6e:5a:74:95:9f:cc:5c:49:6f:5e:
10:84:31:1d:6c:ee:02:e2:65:7f:d9:30:ba:4b:a1:
38:0f:b6:71:af:90:83:9d:fd:ee:14:c6:cc:ef:21:
6d:69:4f:39:dd:39:9d:cc:62:f2:f1:e4:30:2b:7f:
d8:45:33:85:1f:9a:c7:f6:01:cf:fa:b0:52:45:5f:
4d:04:19:0e:78:76:06:af:d0:ed:eb:d3:bd:cf:6b:
5e:5e:e7:72:0c:b8:5a:f3:a7:d6:56:8a:13:b2:0f:
83:1a:2e:f5:8b:5e:47:6d:d0:bf:93:ba:42:52:9e:
3e:65:f0:ad:82:44:47:b1:81:ce:9e:b3:4f:03:7f:
10:e6:a0:e0:63:a1:36:6b:64:38:04:f3:33:39:31:
04:5d:55:6a:83:7e:e9:a8:f7:30:17:06:b7:7e:6c:
5e:3c:82:73:c6:f7:23:54:0b:75:07:c6:41:7f:f7:
8d:e4:43:d2:a7:31:de:ac:2a:a8:39:b0:f2:20:b9:
8f:ac:26:30:e2:ef:20:85:c3:dd:93:cb:69:09:6b:
c7:18:d6:0b:30:6a:88:ce:04:0c:3d:28:a7:4e:28:
1e:64:53:3a:5c:fb:32:d5:c7:00:a7:be:77:67:32:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:D1:2F:D5:FC:B4:5C:EB:1F:D3:DA:A3:BF:A0:90:59:D4:F1:CF
X509v3 Authority Key Identifier:
keyid:A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/50rRL9X8tFzrH9Pao7-gkFnU8c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.240.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ee:b4:7a:a2:08:f0:ab:e6:59:b2:96:5d:d5:1a:50:cc:8c:
9f:c1:72:a5:70:01:58:b3:ae:bd:a0:b5:5b:cd:97:50:ec:7d:
fc:af:6e:5b:71:10:8f:c9:22:10:bb:27:9a:aa:82:9d:b6:73:
36:f5:e6:3f:60:46:30:fb:7b:86:06:ba:73:5d:63:18:e8:bb:
24:60:9e:d9:84:a3:ef:14:a9:40:e8:3c:a4:da:5e:7f:8d:9b:
86:55:e2:12:f2:c0:c9:5a:1a:9f:01:8a:1f:52:22:b1:db:7a:
f7:b8:df:69:7a:1b:60:7c:cb:dc:1c:38:9c:32:a9:ca:85:28:
85:5c:d2:43:8a:7d:3d:47:1c:45:f9:ed:93:63:3c:2a:f0:3c:
08:0f:55:26:3a:10:46:b7:e2:b9:a3:df:26:04:61:7e:29:f0:
65:b7:6e:5f:2e:ca:c4:20:00:34:c7:30:27:3b:fb:18:6b:35:
89:9a:b4:d9:18:56:a8:67:39:30:b2:88:16:d3:5d:26:72:79:
98:83:14:64:a5:e2:ed:ac:14:16:f5:fb:80:84:31:d1:78:98:
a0:30:4e:e2:e5:28:0b:1c:1f:54:da:a8:89:1a:86:4d:ac:9e:
60:35:99:a0:26:79:44:92:03:14:c9:57:d5:cd:de:38:39:32:
d7:eb:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:42:05 2025 by rpki-client