Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/8pYQBY1X6aonwnW6yuYCI5Wtti4.roa
File: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (raw, json)
Hash identifier: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=
Subject key identifier: F2:96:10:05:8D:57:E9:AA:27:C2:75:BA:CA:E6:02:23:95:AD:B6:2E
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 0194236A08F53312BF70A12858392E949A8F
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/8pYQBY1X6aonwnW6yuYCI5Wtti4.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198682
IP address blocks: 95.170.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:08:f5:33:12:bf:70:a1:28:58:39:2e:94:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f29610058d57e9aa27c275bacae6022395adb62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:d7:03:00:16:20:f4:57:f5:53:ab:60:2f:
04:34:ec:31:c4:97:09:7b:75:91:8a:9a:14:e1:9b:
eb:67:7a:77:f5:f8:e5:00:2f:ba:58:fc:8d:c7:04:
b1:5e:af:9a:1e:0b:96:29:dc:c4:4a:8d:08:ea:de:
97:ae:12:c9:17:54:f2:64:be:04:5c:b6:39:f3:1c:
62:ac:88:5e:86:b6:b4:66:5f:78:58:b4:ec:f1:19:
cb:2b:52:ee:bd:af:85:58:73:0b:ea:24:35:7f:a4:
7f:91:ee:99:a9:27:ef:1f:e9:a5:57:b9:1b:8c:d9:
97:0b:1e:4b:af:9d:e1:ce:a7:37:d8:ba:a7:97:36:
46:b6:16:f4:b3:5c:f9:73:e7:a9:cf:7e:93:33:a1:
d7:07:6f:82:bd:e8:4b:2e:1d:89:31:db:93:30:e0:
07:95:f6:7a:ce:65:c8:fc:41:7c:9a:69:1b:20:bc:
9f:0f:62:c1:ef:67:fa:c2:20:44:f4:3f:44:fd:19:
16:26:db:ad:fc:65:d9:68:3e:36:9a:9e:45:bd:a7:
d0:42:42:a1:a1:ac:d2:b3:e2:03:6f:6b:ac:3a:44:
a7:39:7c:2a:26:67:66:b5:7d:b4:3e:43:b6:55:81:
7b:93:f7:eb:5b:1a:6e:78:ff:1a:03:74:29:b9:6f:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:10:05:8D:57:E9:AA:27:C2:75:BA:CA:E6:02:23:95:AD:B6:2E
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/8pYQBY1X6aonwnW6yuYCI5Wtti4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.4.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2b:b0:bb:b2:10:93:0c:b5:7b:a9:10:24:f2:85:76:1a:cd:
cd:59:17:42:06:f9:e8:a7:20:15:44:1a:ec:5d:55:0e:77:4a:
ce:4a:e8:dd:c0:38:1d:84:fa:1d:21:d6:22:77:04:44:d9:06:
39:b8:07:a6:85:84:4f:9f:a1:a4:e5:45:2b:8f:54:5c:58:9b:
0b:29:de:66:00:06:1b:58:e4:05:15:ff:a0:1a:d9:9c:c7:3d:
c9:a6:dd:5a:ec:86:db:cd:6a:68:11:be:b2:b7:3a:73:4a:0e:
2d:62:97:fc:39:81:2c:ae:37:64:63:9d:07:e5:6a:8f:0e:3c:
b2:be:bf:76:c5:30:32:a1:aa:c0:96:d7:c3:7d:c1:58:74:4b:
8a:d0:f2:cb:60:12:9d:b0:95:01:28:e2:68:2d:ca:82:64:7c:
62:34:bf:3d:ba:88:ea:a0:2d:eb:89:ef:eb:85:d6:85:1a:38:
1b:c2:64:27:66:27:11:6c:89:88:c4:60:96:2f:6b:87:6c:f2:
46:f5:60:09:7f:27:d0:f7:34:1b:40:b5:d8:0e:96:47:8c:0c:
75:34:8c:3a:f2:c9:2e:40:fe:a7:1f:1e:6a:f4:55:85:09:22:
c0:a2:d1:8f:f0:c7:01:9e:0b:76:dd:60:e6:37:af:dc:e5:3f:
7a:42:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net