Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/woaauVoxvp4_WNTTTdGC5wmdObI.roa
File: woaauVoxvp4_WNTTTdGC5wmdObI.roa (raw, json)
Hash identifier: aMIfD8Bm7z/lNAu1jZ39w8jXOc4ZFrKw8zsUVcyxRTc=
Subject key identifier: C2:86:9A:B9:5A:31:BE:9E:3F:58:D4:D3:4D:D1:82:E7:09:9D:39:B2
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0195EB19EE48B3F0FD9E4165A2F6D1CE735E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/woaauVoxvp4_WNTTTdGC5wmdObI.roa
Signing time: Mon 31 Mar 2025 07:28:19 +0000
ROA not before: Mon 31 Mar 2025 07:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394814
IP address blocks: 95.164.144.0/20 maxlen: 24
95.164.200.0/22 maxlen: 24
95.164.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:19:ee:48:b3:f0:fd:9e:41:65:a2:f6:d1:ce:73:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 31 07:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2869ab95a31be9e3f58d4d34dd182e7099d39b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:e1:2a:3d:12:91:67:6d:27:62:20:8e:ee:
db:f9:7c:90:50:24:21:b4:95:04:bc:d2:42:e0:4c:
25:9a:68:b5:52:1a:69:be:b4:a4:40:49:57:4d:f9:
81:3b:87:28:08:78:87:e6:ca:a3:a7:12:43:7a:21:
ad:9b:c5:fb:92:37:15:78:8c:88:2d:b4:fb:63:55:
d5:9f:a1:2b:f3:54:98:3d:d3:a8:a3:04:f7:e5:3d:
3c:5f:95:17:d8:ec:5a:27:d4:60:72:b6:a4:3f:08:
22:69:6c:b1:d7:38:ba:3e:23:11:8f:81:84:c5:13:
8c:57:4e:0c:f4:be:5c:12:ae:93:87:2c:47:b5:59:
51:6d:98:92:9a:96:13:5d:58:1c:e8:9c:9f:49:ca:
4a:bd:99:82:f4:1f:08:07:f6:7f:b3:a0:cc:44:a8:
70:42:a0:81:eb:b7:73:72:37:70:8b:62:d9:a2:82:
e5:8a:c3:1d:7d:fe:ac:dc:3c:76:25:41:14:2d:b8:
68:be:fe:55:a5:1c:f5:cf:c3:85:f6:d5:c6:ad:18:
be:75:78:a9:08:f9:54:32:39:48:67:96:a2:86:6b:
e3:ad:0b:15:31:d3:ee:2b:a2:56:ff:4d:70:ee:0c:
4c:44:9e:ad:70:13:a3:c5:a8:a6:00:43:fa:86:d9:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:9A:B9:5A:31:BE:9E:3F:58:D4:D3:4D:D1:82:E7:09:9D:39:B2
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/woaauVoxvp4_WNTTTdGC5wmdObI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.144.0/20
95.164.200.0/21
Signature Algorithm: sha256WithRSAEncryption
39:8f:2f:ce:ee:b8:33:7b:41:a4:85:6a:67:35:26:df:92:4f:
b9:c4:89:d0:49:a1:62:9c:65:14:cb:b1:80:6b:7f:21:bc:2d:
33:07:a5:76:a6:f4:38:49:dc:d9:f8:80:77:09:ac:be:de:99:
02:19:a7:e3:f4:91:a5:72:c7:26:62:f7:00:67:58:f0:b0:4a:
29:9c:23:8e:a0:00:b9:36:11:95:f8:98:cc:0a:78:04:6c:60:
c9:57:a0:a2:f4:a1:0b:d1:5b:a5:d1:af:4c:8c:6d:5d:6e:10:
88:6d:28:19:b4:74:e5:ed:a6:17:a4:cf:e5:37:a9:63:72:3f:
94:a2:0c:4b:0c:94:9e:5d:48:61:5b:d8:fc:d6:f6:9b:56:fe:
fe:6d:99:b4:0f:b5:b6:dc:37:0e:34:4e:e4:e4:20:5b:c2:d6:
26:86:dc:58:e0:0b:32:80:c5:5d:a8:0b:5d:d2:53:80:f3:e9:
60:77:b1:37:bc:fa:9f:fd:52:c6:52:e2:c2:28:b2:8e:13:be:
1a:60:34:f2:86:76:1b:ec:8e:50:6c:23:0a:f8:1a:46:1c:48:
54:b1:e9:cc:73:e4:b0:aa:75:fa:72:fc:60:3a:61:a9:58:cb:
45:1c:af:81:d0:4a:91:4a:a1:b6:86:c1:a2:7e:78:9b:fa:8a:
d9:63:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net