Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SUbITK-GAoRKjMTxjKgKMM_28As.roa
File: SUbITK-GAoRKjMTxjKgKMM_28As.roa (raw, json)
Hash identifier: ifiqubQo+ae2rLxgxC6z8SlXRvfBw0ONhn7ab3M/cV0=
Subject key identifier: 49:46:C8:4C:AF:86:02:84:4A:8C:C4:F1:8C:A8:0A:30:CF:F6:F0:0B
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 019423DE9BD521A2B60FDE6E75975DF84E40
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SUbITK-GAoRKjMTxjKgKMM_28As.roa
Signing time: Wed 01 Jan 2025 21:56:18 +0000
ROA not before: Wed 01 Jan 2025 21:56:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.214.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:de:9b:d5:21:a2:b6:0f:de:6e:75:97:5d:f8:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 21:56:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4946c84caf8602844a8cc4f18ca80a30cff6f00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:3c:c1:6e:95:8d:70:e8:d1:29:4c:8d:bf:
c0:0b:73:4d:e2:c9:d1:f3:37:d0:51:2b:92:35:37:
e0:d6:aa:61:90:ce:32:06:44:5d:ea:e6:27:26:04:
c2:ae:2b:91:a3:21:3d:72:bd:84:c0:99:28:80:d7:
3e:e2:88:fa:a4:3e:41:3a:7a:c4:cc:7f:db:86:2e:
14:85:29:39:78:94:0e:6d:10:ff:b8:6b:84:28:2c:
4f:38:32:a6:f2:4c:d5:32:8c:71:e2:d3:95:f7:65:
51:0e:e1:b0:cd:5b:08:60:22:6d:be:97:10:ef:01:
60:21:ef:ca:ba:e1:6f:40:29:ce:40:1e:22:4d:00:
7a:10:57:51:dc:8a:a7:16:73:4c:e1:6a:c4:e6:76:
23:9b:6a:a9:0f:d3:e4:6a:0e:66:9b:62:13:0b:23:
c5:7a:b4:14:4d:9c:87:93:d7:9c:eb:da:89:8b:94:
7d:48:9e:39:ee:62:a7:d9:f1:26:4c:89:90:e2:71:
b6:89:0f:7d:20:22:7f:52:ee:0e:cb:25:96:cc:47:
87:1f:19:6e:74:0e:8f:de:7d:9e:07:67:ca:9c:96:
3a:15:7f:c4:64:3b:89:88:9e:54:b8:2d:0a:4b:6d:
1d:f6:0e:5c:4a:76:98:98:5a:45:4b:94:01:b8:8d:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:C8:4C:AF:86:02:84:4A:8C:C4:F1:8C:A8:0A:30:CF:F6:F0:0B
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SUbITK-GAoRKjMTxjKgKMM_28As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1d:9a:69:78:aa:15:4a:36:16:bf:90:26:ec:67:a9:e7:4a:
e1:44:06:2f:4d:31:b5:d5:ae:be:64:5e:8c:6d:ab:de:31:ea:
03:dd:0c:57:d6:98:51:34:30:15:ac:47:c3:79:3a:88:4f:67:
35:9c:e9:86:68:57:aa:e8:92:8f:3d:40:6e:c6:13:15:0f:97:
5c:d1:40:80:77:c5:7a:b5:75:f4:8a:bc:6b:43:45:b1:20:ae:
e1:f0:b1:a7:e5:34:71:23:43:e5:60:fd:3f:21:20:38:a2:41:
05:b5:2d:04:4d:46:6a:f3:5c:65:73:34:dc:77:bd:e9:d1:62:
06:7d:3b:87:9c:dd:9c:cc:a1:f7:36:23:cc:3c:84:cf:e1:29:
2e:76:49:9b:12:e7:2b:a9:77:7d:0f:cf:52:30:8a:bc:f1:12:
8c:09:14:43:33:19:90:5a:84:d8:0b:d4:30:c8:a3:ee:bf:1d:
35:74:74:4d:5d:e8:64:ec:d8:aa:d7:cf:0f:30:31:5f:5a:6a:
62:b0:c2:e3:87:46:49:fe:4e:a1:be:8b:c5:38:50:e7:31:0c:
6d:71:5d:4a:c1:03:80:ee:15:25:54:08:b3:61:c4:a2:22:71:
e2:b2:d2:01:c4:eb:66:4b:bf:30:bb:8a:62:e6:af:c5:26:e5:
89:b6:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:57:35 2025 by rpki-client