Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/I_rTyRLzc4rm9hMv4EM-qjZGK4Q.roa
File: I_rTyRLzc4rm9hMv4EM-qjZGK4Q.roa (raw, json)
Hash identifier: Y3PXD1a/YVk2edvsi4KIG4k9tE/RWqpjvbh8fAUYV4c=
Subject key identifier: 23:FA:D3:C9:12:F3:73:8A:E6:F6:13:2F:E0:43:3E:AA:36:46:2B:84
Certificate issuer: /CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Certificate serial: 018239A456E7836ACC6ABAF875558105C2E1
Authority key identifier: A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/I_rTyRLzc4rm9hMv4EM-qjZGK4Q.roa
Signing time: Tue 26 Jul 2022 08:34:07 +0000
ROA not before: Tue 26 Jul 2022 08:34:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59885
IP address blocks: 95.214.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:a4:56:e7:83:6a:cc:6a:ba:f8:75:55:81:05:c2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Validity
Not Before: Jul 26 08:34:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23fad3c912f3738ae6f6132fe0433eaa36462b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:66:5d:e7:bb:11:38:7d:dc:b9:4f:b8:1c:
66:2c:35:ac:4c:e2:f3:1b:89:ee:63:04:61:b1:aa:
d3:d1:b5:f5:d4:c1:19:10:ad:13:ee:5d:8b:75:85:
29:b3:44:d2:56:bb:b6:f9:14:9b:89:a2:85:3d:2a:
3b:0c:54:2d:29:11:41:aa:59:54:0f:2e:eb:66:81:
07:b0:bf:bd:6b:cc:ab:25:11:01:ef:6e:ea:0d:99:
3e:59:3d:b8:d3:df:36:de:c5:a5:f5:80:88:33:0a:
7d:37:de:ca:5e:38:8f:66:b6:43:53:d7:56:e8:f3:
c0:ca:f9:53:3e:83:1d:d1:4e:09:a9:9c:5d:73:8c:
c0:12:d0:54:f5:aa:7f:66:c6:3d:ca:45:c9:1d:df:
2b:2b:8f:fe:b5:e6:68:d4:7d:a3:56:bf:9e:d9:7b:
17:da:0a:21:0b:8d:51:32:b2:b0:c1:fe:35:a2:82:
78:ef:67:69:88:0f:cc:93:85:fd:0a:f6:64:3f:ea:
a6:7d:c5:cd:4d:43:bc:5d:f7:7d:8a:d8:cf:47:7c:
45:a8:0a:8a:cf:0c:c8:44:b4:b2:3d:01:a0:37:37:
5b:75:10:3c:2e:f5:99:31:54:3b:dc:c2:32:b3:cf:
2e:12:0b:fd:e1:b0:9a:af:67:64:d6:c1:30:d8:b0:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:D3:C9:12:F3:73:8A:E6:F6:13:2F:E0:43:3E:AA:36:46:2B:84
X509v3 Authority Key Identifier:
keyid:A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/I_rTyRLzc4rm9hMv4EM-qjZGK4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.240.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c7:f2:32:1f:b4:e3:0e:2b:f7:c2:7b:d6:8d:0c:7c:09:fc:
19:64:d1:f7:67:25:cd:8a:8c:2a:72:78:82:2a:fb:d3:f6:c7:
25:10:4c:b7:ca:7e:94:c7:1a:0e:81:fc:b9:44:f5:16:34:a7:
8b:02:16:0d:18:de:56:80:a3:22:c2:48:e0:05:95:8a:0a:30:
d3:2f:79:65:52:36:67:2e:f4:ef:7d:cf:8e:c4:ea:38:d3:72:
92:6c:7a:b1:1f:55:bc:ca:53:d3:53:05:40:bc:b0:89:5f:98:
6d:08:85:01:12:5d:56:d9:92:77:31:6b:85:83:8f:5e:bb:44:
c3:1f:f3:7a:3c:7d:5d:0b:82:9b:a7:cd:5a:96:c6:4f:1a:63:
e9:ba:a3:d6:2a:98:b7:29:df:ff:94:58:35:3e:2e:a7:51:cf:
e7:07:86:78:25:3b:d1:25:e6:54:bc:39:5d:dd:5c:e7:15:1c:
ed:67:9a:c7:2b:ef:48:d7:f5:20:50:53:de:cb:b9:f3:0c:3a:
f1:30:ae:66:f4:aa:9d:5b:c9:5f:25:12:f8:fc:4f:84:77:56:
f9:52:cf:f2:fc:33:e8:af:fa:09:a9:4e:94:03:5d:8a:56:91:
df:af:66:e9:96:86:a7:09:0d:71:c5:f4:3d:1c:a0:46:9d:1c:
c1:4b:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:19:36 2025 by rpki-client