Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ak9hhOr2MIaPzLTTk661I1yz1uk.roa
File: ak9hhOr2MIaPzLTTk661I1yz1uk.roa (raw, json)
Hash identifier: YfmD2QnEJ61D2L6DXZPZTVEBuDdRG6IwzSG89ps+TQc=
Subject key identifier: 6A:4F:61:84:EA:F6:30:86:8F:CC:B4:D3:93:AE:B5:23:5C:B3:D6:E9
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01943A0822458946207226A6E5E7F81B9DF0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ak9hhOr2MIaPzLTTk661I1yz1uk.roa
Signing time: Mon 06 Jan 2025 05:13:19 +0000
ROA not before: Mon 06 Jan 2025 05:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 95.214.177.0/24 maxlen: 24
185.177.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:08:22:45:89:46:20:72:26:a6:e5:e7:f8:1b:9d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 6 05:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4f6184eaf630868fccb4d393aeb5235cb3d6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:73:ae:c0:eb:44:50:45:b5:22:8f:df:e2:
e1:54:a0:50:3b:7e:96:81:46:22:62:33:22:91:16:
40:6c:54:02:10:a7:ac:ac:b9:15:d1:60:fb:4b:4b:
f7:dd:36:2b:44:da:02:6d:1c:a1:07:cf:ab:0b:97:
7c:51:de:e7:50:2c:42:4a:fa:3d:6b:f5:5b:f6:e1:
90:c7:67:f2:83:8e:c9:2b:a1:eb:82:3b:5b:b0:e4:
8a:2d:b3:08:a6:42:4a:dd:5e:f0:d7:12:9d:b6:19:
ee:d4:d1:41:2a:13:d7:6f:76:e6:11:84:b2:af:4c:
0d:bb:79:43:65:67:93:3d:b8:9f:ba:f8:67:f8:c3:
6a:58:12:a1:06:3b:a5:2a:e6:c4:43:7e:58:d4:2e:
6b:2c:0b:ac:38:8c:0f:e1:9e:27:e7:8e:65:2d:6d:
1a:74:78:91:c3:f2:1b:56:e2:ba:fe:bc:de:02:e8:
f2:2a:14:93:e5:41:ec:26:87:01:cd:37:e2:b8:39:
0f:02:3f:7b:58:1b:dd:c4:b3:52:af:c3:7d:9d:21:
1f:a9:0e:c5:51:a7:88:3f:a6:1d:b7:59:ec:ac:56:
b7:46:be:ab:fa:bc:7a:2f:d4:23:85:b4:fd:d1:1b:
df:5f:7f:ef:01:8b:bc:ca:86:9b:af:2f:a7:ba:e8:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:61:84:EA:F6:30:86:8F:CC:B4:D3:93:AE:B5:23:5C:B3:D6:E9
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ak9hhOr2MIaPzLTTk661I1yz1uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.177.0/24
185.177.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:64:da:f4:3d:f8:b6:34:17:da:3e:9d:d1:02:9c:8a:43:3d:
c9:39:90:1a:a3:b5:40:e8:0c:27:a9:5b:f5:6c:1b:ef:65:de:
bf:19:68:32:97:c2:5a:e6:56:8f:b1:01:b2:3e:37:38:ae:8a:
0a:23:87:ba:a0:5e:52:0f:f4:b7:05:00:60:7f:1e:9d:3e:93:
45:4d:b6:79:c3:cd:cf:8a:30:62:46:a4:ad:90:1d:27:28:70:
f9:6a:cd:8a:ba:62:76:80:ff:d1:ef:f7:6c:22:88:54:e3:59:
d1:75:79:ed:ba:76:ec:05:fb:1e:63:5a:af:ba:bc:89:32:15:
85:ad:61:d0:5d:b5:40:eb:ba:5b:df:e7:eb:6f:f9:d9:ff:f0:
3d:31:05:77:3f:d9:3f:4e:ae:27:81:14:73:11:06:32:c2:7d:
20:75:11:5a:39:cb:4a:45:cd:00:d7:a6:a5:e3:90:69:9d:e7:
f6:4f:f3:19:9f:c7:39:42:a5:cd:6e:b5:24:4a:0e:f8:11:a6:
12:54:36:1e:ab:24:2c:31:47:df:45:18:63:55:29:ab:5b:8c:
d6:61:39:2b:6e:29:c3:ab:67:6b:d3:c2:6e:0f:fd:d5:43:9a:
5b:f1:e8:7e:91:db:81:bc:92:cd:11:4b:cd:4e:06:25:83:e7:
b9:23:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:12:24 2025 by rpki-client