Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1CXXRvDW2i5xYBWOpCt9x4b2y_8.roa
File: 1CXXRvDW2i5xYBWOpCt9x4b2y_8.roa (raw, json)
Hash identifier: 9LX+an1A3w9ug8tCdDF9asDNZp2ONhUv5GBtjGBlmFw=
Subject key identifier: D4:25:D7:46:F0:D6:DA:2E:71:60:15:8E:A4:2B:7D:C7:86:F6:CB:FF
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FA8D7C7E8FF7F38AEDA01EC909329
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1CXXRvDW2i5xYBWOpCt9x4b2y_8.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 95.214.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a8:d7:c7:e8:ff:7f:38:ae:da:01:ec:90:93:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d425d746f0d6da2e7160158ea42b7dc786f6cbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:66:2c:d9:1b:d9:25:8c:4c:6f:4f:d3:3a:
93:e4:1c:03:4f:41:c9:3a:48:61:43:c1:c7:44:be:
e4:58:d2:14:9e:90:51:2a:83:fe:51:e6:ac:e2:85:
a0:d4:c3:33:7a:3f:24:79:dc:72:7f:73:3c:2b:0a:
1b:4a:f3:c9:d7:55:22:10:53:fb:36:9d:5f:d4:97:
ac:cc:e5:e4:7d:17:f8:21:33:df:84:e8:9e:f3:b1:
dd:d6:27:78:e1:92:67:e3:59:2f:61:2c:fa:55:16:
ec:78:7a:90:c7:87:d2:25:db:f0:ec:76:53:7c:2b:
f3:4b:34:13:01:ff:87:85:72:da:d8:0d:61:f4:71:
44:aa:fd:da:b7:7d:d6:10:41:d6:99:13:a4:f7:7c:
13:bf:0e:e1:25:fb:60:d5:13:2a:5f:9f:e4:c4:25:
e4:49:a1:f3:51:00:b1:b3:be:6f:6a:8d:37:5f:56:
04:2b:cd:85:d3:77:da:be:29:6c:e9:10:4e:8f:f0:
8d:a2:0d:e9:2a:38:d3:d9:a0:02:84:3b:73:2a:55:
5f:a6:4f:22:a1:25:dd:3a:bc:66:70:91:49:c9:ab:
47:ca:fe:9c:75:28:53:eb:28:b6:65:4a:22:27:a0:
56:c9:74:b6:7b:a4:e4:07:b8:1d:18:5a:21:cd:0d:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:D7:46:F0:D6:DA:2E:71:60:15:8E:A4:2B:7D:C7:86:F6:CB:FF
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1CXXRvDW2i5xYBWOpCt9x4b2y_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d2:98:2a:d1:47:97:d9:2b:1f:bf:a7:e0:d3:a0:9c:4f:d9:
bf:15:68:37:00:52:ea:ca:c5:56:35:4e:3b:c9:a7:bb:74:ad:
fa:b3:9c:b2:78:dc:8d:7b:0f:92:4d:6c:9e:2e:b4:90:a2:02:
da:89:7e:f1:a6:15:8b:d9:71:35:cb:b1:3e:f5:ac:04:29:b1:
81:56:d0:f1:17:ee:d6:7f:08:28:4d:8e:29:eb:3a:06:f1:8a:
d0:b6:cc:7b:f4:3b:7f:fe:36:2e:19:74:39:a7:67:87:9d:95:
0d:5c:1c:f6:1c:21:90:3a:e6:a3:da:98:69:ab:9e:b2:94:7d:
ec:86:d6:f5:d7:95:57:98:e8:a5:af:31:8b:55:29:d8:f8:7d:
ce:95:8b:b4:ad:7c:bf:9a:74:45:7d:ea:3f:59:5a:17:ae:d2:
eb:af:5e:67:8c:7d:9a:4b:d5:c3:20:48:18:08:2c:27:22:ea:
92:43:1a:f4:20:04:92:61:f0:a7:6c:9c:bc:21:3f:a3:8e:53:
e7:18:4a:8b:67:15:1c:38:98:13:b8:a3:99:a6:b5:11:a5:ef:
33:f6:c7:75:cf:b7:dd:f5:98:47:b5:74:3e:56:1d:57:b0:5f:
a7:d0:ec:f6:3a:51:5e:54:16:55:c8:e0:61:b6:7d:49:ef:a9:
72:01:fe:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6jXx+j/fziu2gHskJMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDI1ZDc0NmYwZDZkYTJlNzE2MDE1OGVhNDJiN2RjNzg2ZjZjYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAVmLNkb2SWMTG9P0zqT5BwDT0HJ
OkhhQ8HHRL7kWNIUnpBRKoP+Ueas4oWg1MMzej8kedxyf3M8KwobSvPJ11UiEFP7
Np1f1JeszOXkfRf4ITPfhOie87Hd1id44ZJn41kvYSz6VRbseHqQx4fSJdvw7HZT
fCvzSzQTAf+HhXLa2A1h9HFEqv3at33WEEHWmROk93wTvw7hJftg1RMqX5/kxCXk
SaHzUQCxs75vao03X1YEK82F03favils6RBOj/CNog3pKjjT2aAChDtzKlVfpk8i
oSXdOrxmcJFJyatHyv6cdShT6yi2ZUoiJ6BWyXS2e6TkB7gdGFohzQ2Y4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQl10bw1toucWAVjqQrfceG9sv/MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvMUNYWFJ2RFcyaTV4WUJXT3BDdDl4NGIyeV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9axMA0G
CSqGSIb3DQEBCwUAA4IBAQBN0pgq0UeX2Ssfv6fg06CcT9m/FWg3AFLqysVWNU47
yae7dK36s5yyeNyNew+STWyeLrSQogLaiX7xphWL2XE1y7E+9awEKbGBVtDxF+7W
fwgoTY4p6zoG8YrQtsx79Dt//jYuGXQ5p2eHnZUNXBz2HCGQOuaj2phpq56ylH3s
htb115VXmOilrzGLVSnY+H3OlYu0rXy/mnRFfeo/WVoXrtLrr15njH2aS9XDIEgY
CCwnIuqSQxr0IASSYfCnbJy8IT+jjlPnGEqLZxUcOJgTuKOZprURpe8z9sd1z7fd
9ZhHtXQ+Vh1XsF+n0Oz2OlFeVBZVyOBhtn1J76lyAf4I
-----END CERTIFICATE-----
Generated at Sun May 11 18:33:32 2025 by rpki-client