Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/OXR5a_qv6GsrnD_xECci24iQstc.roa
File: OXR5a_qv6GsrnD_xECci24iQstc.roa (raw, json)
Hash identifier: aja/H1yZRveeANb/nW+RNLAw49Wjg4rCbZRAt4mF5sY=
Subject key identifier: 39:74:79:6B:FA:AF:E8:6B:2B:9C:3F:F1:10:27:22:DB:88:90:B2:D7
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 0195DDE72C9E158DB6B547D26E1174F59FAA
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/OXR5a_qv6GsrnD_xECci24iQstc.roa
Signing time: Fri 28 Mar 2025 17:57:49 +0000
ROA not before: Fri 28 Mar 2025 17:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 93.95.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:e7:2c:9e:15:8d:b6:b5:47:d2:6e:11:74:f5:9f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Mar 28 17:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3974796bfaafe86b2b9c3ff1102722db8890b2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:44:3c:39:31:58:12:c9:a3:f3:01:74:67:
b4:39:2e:80:2b:3e:ea:c5:5a:5a:22:c8:4a:d9:b1:
20:2b:6d:0d:96:35:3a:43:0d:63:41:e2:f5:53:08:
34:27:f8:84:a3:ac:49:ad:ae:4e:9d:b3:82:97:cd:
65:25:f7:66:bb:22:89:0c:af:8a:ee:f5:ea:ec:3e:
79:dc:ad:1a:48:44:ba:02:ce:ba:7c:1e:8c:ae:0b:
cf:cf:f0:ab:e1:ce:fc:14:6a:8c:19:c3:21:67:09:
68:1d:35:04:9c:c6:ba:42:60:92:94:ae:42:be:e5:
33:13:ae:e9:d3:1e:82:a2:da:21:61:13:a1:a1:d7:
47:b5:e3:0a:e2:e2:35:73:88:01:3e:14:87:50:56:
b6:ac:29:3c:1b:fe:88:d9:cd:d5:31:fb:b1:4b:e0:
6e:d5:fd:a5:2f:24:ea:29:63:89:67:95:e8:76:ff:
5b:de:50:b9:20:86:ba:c2:0a:a2:9f:f6:46:29:fd:
97:cf:b2:c7:8d:d0:35:01:62:79:17:9e:be:c2:3b:
9b:15:be:91:73:00:9b:ce:60:b3:fe:8c:fb:a8:7b:
1c:44:25:69:95:b8:59:e7:fc:8e:94:4f:20:6d:d4:
b3:d1:f9:2c:90:0f:78:5b:0c:91:38:43:3d:3d:10:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:79:6B:FA:AF:E8:6B:2B:9C:3F:F1:10:27:22:DB:88:90:B2:D7
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/OXR5a_qv6GsrnD_xECci24iQstc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1d:4f:b2:ae:29:03:2e:24:d2:cb:9d:b5:bf:79:f4:3d:8a:
83:45:b2:fc:05:1e:e4:70:93:a5:96:5f:61:98:f2:c5:41:1a:
dc:99:d0:dc:f5:3d:92:aa:85:11:72:1e:98:bc:87:5b:bf:97:
c9:f2:5c:dd:86:1e:d4:1e:7c:bf:5e:e5:23:61:e1:2a:fd:c6:
89:92:d8:ac:dc:7f:94:65:8b:d4:1f:2b:52:ea:c8:a4:76:a5:
cc:7c:00:c2:e4:81:46:ee:91:4e:51:a0:69:70:5a:76:ba:d0:
3c:f6:0c:8f:5a:1d:34:8d:66:2a:f4:cd:b5:bf:dd:b2:fa:3f:
80:88:a0:51:e2:b1:ac:76:d0:db:6b:67:74:52:9f:5f:8e:fc:
05:ff:70:d2:5c:24:fd:2e:7e:93:04:8c:9e:37:e0:c9:23:38:
2e:8f:ec:b1:6d:04:2c:d9:b5:3f:1f:b7:ff:2d:d5:db:b8:b9:
12:ee:d4:01:72:43:0a:40:3c:42:57:11:66:42:96:1f:02:91:
e2:2c:e9:ae:00:87:47:11:34:0a:2f:c7:e2:32:c2:3d:5a:f3:
a5:62:3b:92:30:d3:50:2e:a4:ba:fa:6d:0a:7a:4e:79:4b:e1:
0b:5d:0e:14:e6:ef:9c:32:49:49:29:28:46:0b:1f:8e:a5:fe:
9f:a2:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:48:05 2025 by rpki-client on console.sobornost.net