Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/B7wjK36IHBypTvEqXjOEhhx6Ze4.roa
File: B7wjK36IHBypTvEqXjOEhhx6Ze4.roa (raw, json)
Hash identifier: FXUtVXi8sZV7peu/Il2w9Mrkuwf0jPb7ZTbxh0mbQPU=
Subject key identifier: 07:BC:23:2B:7E:88:1C:1C:A9:4E:F1:2A:5E:33:84:86:1C:7A:65:EE
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FB3753807D4A1C63584E3B3822014
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/B7wjK36IHBypTvEqXjOEhhx6Ze4.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 95.214.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b3:75:38:07:d4:a1:c6:35:84:e3:b3:82:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07bc232b7e881c1ca94ef12a5e3384861c7a65ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:78:ac:5a:d0:b8:92:ec:92:89:a3:82:40:
1c:6a:d7:35:fd:8b:d7:2d:c5:65:5b:5d:58:1f:4f:
38:3d:6f:0e:ab:38:42:0a:75:7a:1f:57:a4:77:ed:
30:74:c9:84:5b:81:b7:47:f5:7a:72:e5:7c:7b:a5:
ba:a7:f3:85:37:7d:62:10:bd:bb:00:03:0f:9e:14:
f4:e9:ee:b8:a3:b8:eb:9f:d9:62:4a:91:3c:e1:00:
c2:e5:37:b6:6c:ed:f3:a2:c4:de:90:21:88:57:67:
cb:5d:3e:e3:86:8a:9f:27:a6:00:7b:45:e8:5c:90:
57:6e:35:92:d0:30:4b:47:6c:37:ef:bb:a5:89:6f:
6f:ab:0c:39:c4:44:f5:16:45:ed:10:e7:77:90:11:
25:57:a2:9c:00:5c:d3:0b:45:f4:8b:5a:c7:ce:29:
85:49:af:61:b3:5d:6b:a8:d8:9e:37:e7:60:66:52:
0a:77:dc:69:48:f6:b6:85:43:0c:74:83:2c:53:40:
44:f9:e7:7c:30:a5:e0:d4:ae:71:ab:ec:82:67:40:
a9:63:10:e2:bd:f4:46:92:5e:47:5a:de:c6:9b:0b:
2c:4f:59:ba:e8:44:b9:29:e1:9e:01:7f:1c:fa:54:
b4:bc:c6:95:94:29:63:90:32:17:61:79:ae:ba:e8:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BC:23:2B:7E:88:1C:1C:A9:4E:F1:2A:5E:33:84:86:1C:7A:65:EE
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/B7wjK36IHBypTvEqXjOEhhx6Ze4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.178.0/23
Signature Algorithm: sha256WithRSAEncryption
75:3d:0d:6a:4b:51:f1:57:33:82:64:ce:2c:d6:c6:3c:4d:26:
75:28:69:a5:f2:b9:2c:be:85:b0:ba:e2:ec:89:f9:68:79:b9:
69:01:d0:f2:b8:a9:c5:1e:35:ee:db:1a:20:6d:67:78:7a:8f:
05:5d:ad:d3:c4:99:72:50:3a:8b:83:5d:4f:19:44:f3:db:0f:
ef:c9:2a:54:47:42:1f:3e:05:e9:34:64:43:e9:30:b9:1e:51:
ee:82:72:02:f0:ff:99:2a:bf:c4:70:1b:92:a9:33:5f:2a:f8:
b6:06:d3:5a:ff:78:80:49:b6:96:d9:62:6e:ba:c6:11:0d:b1:
bb:34:9a:d2:82:0d:32:c7:b3:b6:d8:13:d6:d7:c3:27:2d:ee:
2b:90:e8:bf:b0:c4:6b:db:18:bc:1f:1d:50:69:76:4d:a2:b3:
08:7f:b5:71:7a:8d:a4:25:98:48:8e:e9:20:1d:06:bb:7a:1b:
41:bc:a2:1d:f4:6f:e1:c5:e1:65:ce:9e:05:c6:c3:8e:9d:cc:
fa:5f:da:ff:f9:b0:93:89:58:25:ac:6b:f5:3e:02:41:3a:cd:
35:90:e0:05:a7:67:9f:d4:8b:b4:ab:65:7c:5c:68:f3:d3:b6:
70:37:da:ce:a1:a9:1f:ff:34:01:b9:eb:5f:99:54:39:56:7f:
a6:d0:4a:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj7N1OAfUocY1hOOzgiAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2JjMjMyYjdlODgxYzFjYTk0ZWYxMmE1ZTMzODQ4NjFjN2E2NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne94rFrQuJLskomjgkAcatc1/YvX
LcVlW11YH084PW8OqzhCCnV6H1ekd+0wdMmEW4G3R/V6cuV8e6W6p/OFN31iEL27
AAMPnhT06e64o7jrn9liSpE84QDC5Te2bO3zosTekCGIV2fLXT7jhoqfJ6YAe0Xo
XJBXbjWS0DBLR2w377uliW9vqww5xET1FkXtEOd3kBElV6KcAFzTC0X0i1rHzimF
Sa9hs11rqNieN+dgZlIKd9xpSPa2hUMMdIMsU0BE+ed8MKXg1K5xq+yCZ0CpYxDi
vfRGkl5HWt7GmwssT1m66ES5KeGeAX8c+lS0vMaVlCljkDIXYXmuuuhGpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAe8Iyt+iBwcqU7xKl4zhIYcemXuMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvQjd3akszNklIQnlwVHZFcVhqT0VoaHg2WmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX9ayMA0G
CSqGSIb3DQEBCwUAA4IBAQB1PQ1qS1HxVzOCZM4s1sY8TSZ1KGml8rksvoWwuuLs
ifloeblpAdDyuKnFHjXu2xogbWd4eo8FXa3TxJlyUDqLg11PGUTz2w/vySpUR0If
PgXpNGRD6TC5HlHugnIC8P+ZKr/EcBuSqTNfKvi2BtNa/3iASbaW2WJuusYRDbG7
NJrSgg0yx7O22BPW18MnLe4rkOi/sMRr2xi8Hx1QaXZNorMIf7Vxeo2kJZhIjukg
HQa7ehtBvKId9G/hxeFlzp4FxsOOncz6X9r/+bCTiVglrGv1PgJBOs01kOAFp2ef
1Iu0q2V8XGjz07ZwN9rOoakf/zQBuetfmVQ5Vn+m0Er/
-----END CERTIFICATE-----
Generated at Wed May 7 11:39:10 2025 by rpki-client