Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/ZeORqX3dKA0d2Zuw_Hlv6iL1SSU.roa
File: ZeORqX3dKA0d2Zuw_Hlv6iL1SSU.roa (raw, json)
Hash identifier: C5BzVUpKOpuPPwDzOIs0+EoFG8wNxqXoQdbKsgmi7VE=
Subject key identifier: 65:E3:91:A9:7D:DD:28:0D:1D:D9:9B:B0:FC:79:6F:EA:22:F5:49:25
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDA5223FB686A9A6C77183BC3BE7B6
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/ZeORqX3dKA0d2Zuw_Hlv6iL1SSU.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39598
IP address blocks: 95.161.0.0/18 maxlen: 24
95.161.124.0/24 maxlen: 24
95.161.248.0/21 maxlen: 21
95.161.250.0/24 maxlen: 24
2a00:11d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:22:3f:b6:86:a9:a6:c7:71:83:bc:3b:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e391a97ddd280d1dd99bb0fc796fea22f54925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:29:36:f8:ef:88:c0:64:21:4c:83:1b:7d:
c6:0c:f2:a8:07:b2:77:c6:1c:ed:e9:b6:61:db:54:
85:9d:f3:9a:b1:13:da:e1:06:94:d5:64:1e:e1:b1:
ca:f8:d0:89:bd:47:9b:10:79:ae:cd:f8:ac:c6:05:
48:ce:5f:e1:f2:b7:3e:14:61:8a:71:f7:16:ba:a9:
fa:ea:1b:2d:95:82:01:e6:f9:51:84:22:e6:66:2f:
e0:6d:67:3e:18:b1:e1:1c:54:3b:14:f1:a3:76:db:
d4:4c:a1:20:7e:3d:f5:52:8e:fc:cd:7d:04:75:35:
f0:68:61:a7:b0:aa:f4:76:68:fd:bc:a2:63:88:76:
9a:b2:99:7a:7b:10:d2:a8:78:21:cb:92:d2:e4:41:
19:6b:52:2e:2d:d0:76:05:a0:bf:9f:7d:02:24:bc:
4a:e5:8e:4e:99:7a:61:da:59:b5:9b:21:70:7b:99:
38:a3:44:b3:c8:08:d1:bb:df:cc:55:bd:34:8f:65:
8a:1f:79:7c:95:cd:e1:40:7d:ab:b7:50:91:9d:4e:
d9:1c:bb:af:26:30:26:11:84:cc:a7:76:ab:9b:6c:
86:a5:85:15:86:00:39:60:35:af:7f:c9:ff:c7:c2:
25:a7:74:e1:51:98:64:a0:7f:18:9c:87:98:bc:ef:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E3:91:A9:7D:DD:28:0D:1D:D9:9B:B0:FC:79:6F:EA:22:F5:49:25
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/ZeORqX3dKA0d2Zuw_Hlv6iL1SSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.0.0/18
95.161.124.0/24
95.161.248.0/21
IPv6:
2a00:11d8::/32
Signature Algorithm: sha256WithRSAEncryption
24:a4:9a:08:a2:82:e8:d2:d4:b0:62:13:98:26:02:14:d3:8b:
a1:c2:e1:27:30:f3:4f:11:4f:8d:8d:4b:61:f8:5f:ea:f1:82:
de:a2:f9:ee:de:94:99:a2:1b:d5:37:1c:48:eb:2c:4c:fa:0b:
68:16:a8:1c:0c:3c:d6:e3:9e:81:d5:ff:3b:12:45:78:9e:9b:
cb:6a:e0:a7:b1:1e:51:cf:86:2d:96:4c:7f:20:8a:e5:f5:a6:
82:82:7a:d6:dc:2a:06:19:c7:4c:83:e3:ec:2f:bf:8d:72:7a:
4f:39:92:91:78:84:a4:56:38:39:a8:bc:41:38:b6:2d:77:87:
f1:66:a6:cc:2d:59:5c:fd:cc:fc:b6:00:3e:31:86:e7:ef:46:
d1:5d:3e:77:1a:4a:b2:89:27:d2:74:81:5c:6c:44:97:bb:03:
11:d2:66:20:f9:4a:86:00:0d:53:3b:b9:02:78:e2:d0:1c:d5:
cd:e3:cf:4c:d4:a5:62:6c:d4:29:a1:20:bd:1a:9c:fc:66:c7:
e7:f9:d6:db:14:3d:e9:b3:7f:a2:72:07:18:82:b9:d3:45:bd:
ba:78:84:f2:df:3d:6b:8c:44:42:41:3f:17:06:e7:88:71:73:
22:3d:24:4f:17:ae:cb:7a:5d:fb:e4:d8:13:c5:52:0e:6a:a4:
5d:52:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:45:49 2025 by rpki-client on console.sobornost.net