Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa
File: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (raw, json)
Hash identifier: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=
Subject key identifier: 60:40:06:52:FA:B8:6B:4B:81:29:4C:6C:BC:1C:5B:8D:06:81:17:22
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 0194252110D3590A20A97E8D762F8A94CC67
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa
Signing time: Thu 02 Jan 2025 03:48:31 +0000
ROA not before: Thu 02 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209684
IP address blocks: 95.214.56.0/24 maxlen: 24
95.214.56.5/32 maxlen: 32
95.214.58.0/24 maxlen: 24
95.214.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:10:d3:59:0a:20:a9:7e:8d:76:2f:8a:94:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Jan 2 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60400652fab86b4b81294c6cbc1c5b8d06811722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:d1:99:48:ce:55:57:66:d2:cc:84:dd:e5:
b3:aa:af:ef:9c:59:2b:e9:0a:b8:16:63:ed:2e:92:
81:03:40:e3:9e:a3:89:1a:7e:9a:45:19:7a:55:a0:
43:12:c6:d9:fe:c3:5a:25:81:6b:84:a4:4f:60:6f:
52:92:2d:6f:f4:7e:90:95:71:31:45:50:34:ef:24:
bd:25:44:4c:b0:a5:00:92:95:75:34:4d:d5:0c:f1:
51:61:dd:32:f7:0e:62:e1:b7:22:4b:9b:dc:b2:05:
7d:bb:63:6b:c0:39:35:cb:ae:85:cd:9f:1f:b9:b7:
be:29:63:55:1f:d1:05:0e:76:a6:04:37:1e:8a:38:
09:b8:93:6d:aa:99:a8:a0:c0:d1:7e:00:ff:4c:5d:
40:92:6a:06:18:8b:a5:52:df:a9:10:51:56:84:d0:
c2:b9:76:db:a2:c0:42:c9:46:3e:02:18:60:1f:23:
bc:e8:af:04:70:5f:0d:88:ef:6a:f7:eb:10:3a:35:
76:2f:40:e1:ac:54:74:9f:82:88:97:8d:30:aa:82:
aa:3f:57:16:b8:a6:14:3d:19:f8:c6:85:6f:fd:68:
08:fe:83:b6:2b:09:93:7a:77:58:88:be:fe:43:11:
84:06:fb:fb:53:27:04:ff:f0:f9:19:19:eb:b6:e7:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:06:52:FA:B8:6B:4B:81:29:4C:6C:BC:1C:5B:8D:06:81:17:22
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.56.0/24
95.214.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:35:8f:c3:92:fc:9b:27:de:48:c7:10:50:79:8f:46:c7:a6:
6b:8f:78:dd:e9:5a:71:65:6b:0a:8e:f6:56:61:f7:f2:1f:6b:
80:81:e3:52:1a:48:49:a4:99:eb:27:b5:dd:a3:44:d8:9c:37:
19:14:0b:07:1b:8f:71:c6:3e:a6:97:ae:49:ad:bb:21:03:90:
5f:30:9a:8b:ba:3d:05:28:ec:7d:38:9c:19:6a:68:3f:57:66:
4f:cb:f7:b3:a9:07:f9:e5:fd:6e:b2:27:dc:10:be:2f:98:39:
99:b6:88:e5:6b:51:6e:1f:36:5b:80:75:94:b2:0c:dc:07:c2:
5a:44:9f:5d:15:1a:0c:bf:fa:a2:dd:9c:c0:c9:81:8c:cd:56:
51:1a:6d:4c:ee:77:a3:d6:f7:ac:40:c5:41:a9:7c:76:11:13:
1d:60:cf:b9:a4:94:0d:0f:b7:f1:be:9b:ec:83:db:a8:d8:aa:
e5:d4:96:28:ab:fe:19:e4:64:58:2d:74:77:ce:b7:1e:f8:1a:
1d:24:7f:85:7e:2e:1b:18:97:2f:bb:30:be:3a:c5:5e:bb:67:
07:bb:17:3f:95:7e:0b:8b:d6:86:cf:bd:09:66:68:83:95:89:
a8:a5:5b:3d:8c:b1:13:0e:30:fd:21:04:7d:ba:eb:5f:5e:27:
c7:e3:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net