Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa
File: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (raw, json)
Hash identifier: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=
Subject key identifier: AD:64:30:DC:0A:7D:20:C4:C8:FF:77:1B:52:06:F9:72:CF:6C:7E:98
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0195FA9B6DD040A844E73B1682C21094DC2F
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa
Signing time: Thu 03 Apr 2025 07:44:04 +0000
ROA not before: Thu 03 Apr 2025 07:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213411
IP address blocks: 95.161.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:9b:6d:d0:40:a8:44:e7:3b:16:82:c2:10:94:dc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Apr 3 07:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad6430dc0a7d20c4c8ff771b5206f972cf6c7e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:c4:db:f9:e6:13:ca:5b:36:c2:4c:39:fa:
30:30:54:32:ec:df:cc:c1:05:2f:95:b3:f6:8b:b4:
0f:ca:d1:a2:cc:c9:90:46:53:5f:b0:0d:94:54:21:
2c:d9:b1:49:5c:82:64:af:eb:5d:cf:5c:70:6b:73:
27:5b:60:f3:71:66:f1:ec:41:13:26:d4:3a:00:20:
55:0e:90:ae:05:b4:d8:1a:b1:0f:63:cd:d2:00:86:
4f:d1:61:d3:c2:60:5d:ab:30:a3:94:8b:bb:42:45:
08:fa:7c:1c:d3:b1:e6:c4:57:5e:8d:d6:a3:45:05:
b5:e0:2a:59:ab:40:75:8c:7e:f0:84:1a:47:bf:80:
70:0d:af:0b:88:fa:c7:ce:2b:28:08:31:0a:bd:db:
04:11:d9:32:ec:5d:24:45:62:32:f9:a4:76:b8:22:
98:38:c1:b3:e6:45:d0:2e:9f:f3:25:7e:6a:22:b0:
a4:ad:84:40:35:78:82:de:e7:8c:be:75:8d:7e:bd:
5d:3d:a8:a0:74:4b:90:e8:6e:67:52:cb:bb:35:e8:
10:66:f3:f3:46:a1:4d:09:4b:5c:33:97:12:42:68:
43:8f:f0:27:02:b6:48:be:b4:25:52:74:25:3f:27:
07:03:18:15:37:02:8b:79:66:49:c8:22:fc:bf:bf:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:30:DC:0A:7D:20:C4:C8:FF:77:1B:52:06:F9:72:CF:6C:7E:98
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.240.0/24
Signature Algorithm: sha256WithRSAEncryption
76:09:79:56:f4:51:c4:e1:0b:b1:a5:d0:64:af:23:5f:fa:01:
50:bb:24:4d:6a:f4:90:95:0b:ac:86:d1:76:5a:74:46:85:9c:
15:d1:3a:5f:82:bd:8f:c2:69:71:df:df:cd:52:a2:6a:aa:d8:
3b:5b:b7:00:d1:7c:a8:43:e1:56:75:a7:ac:46:f4:0b:1c:0c:
e4:72:16:16:2b:30:b3:5a:ba:70:a3:61:54:1c:d1:a7:76:d0:
c7:22:ee:b4:c8:93:0e:ac:cd:78:f6:ac:7a:37:62:d4:5a:2d:
60:76:52:b4:39:86:c5:18:ec:99:d2:47:ec:e1:83:2a:d2:19:
e6:ea:33:61:98:1b:ef:41:cb:65:c4:9a:2f:c1:7f:65:65:88:
8e:20:22:10:06:5a:49:09:0f:9c:30:a5:8c:9d:20:d7:20:2d:
6e:f0:71:30:0b:61:b9:32:bf:79:66:7f:3f:2c:9a:f6:f3:88:
b4:05:29:a5:55:e3:5b:89:16:63:9d:6a:75:44:43:9c:4b:3c:
d8:c6:85:25:3a:dd:f5:e1:f1:c3:90:b0:fc:54:d3:b6:36:4b:
7b:70:cb:97:a2:d7:da:bc:01:60:c9:4d:e2:dc:e2:aa:22:9f:
45:d1:32:cb:75:00:48:85:c0:83:21:05:63:a8:f8:6e:5d:ea:
76:6e:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net