Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/S3A1POWiFi4TlajvXsCPIiaaz_4.roa
File: S3A1POWiFi4TlajvXsCPIiaaz_4.roa (raw, json)
Hash identifier: IXC2iM5ax6sDDcgMKmOBil5L9Ty3tdxbCnAuaFnmWnw=
Subject key identifier: 4B:70:35:3C:E5:A2:16:2E:13:95:A8:EF:5E:C0:8F:22:26:9A:CF:FE
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 0194236A087A93E3EA7BFBB98B0BE559647D
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/S3A1POWiFi4TlajvXsCPIiaaz_4.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 95.170.12.0/22 maxlen: 22
95.170.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:08:7a:93:e3:ea:7b:fb:b9:8b:0b:e5:59:64:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b70353ce5a2162e1395a8ef5ec08f22269acffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:3f:34:d9:bb:28:a8:68:c2:13:b3:23:3a:
8f:7b:e2:55:f8:b8:12:b8:c6:db:ea:50:fd:93:0a:
a9:cd:cc:06:c8:49:b8:e7:b8:ac:eb:c2:ee:da:f5:
02:c8:4f:4d:96:46:fb:56:0c:3b:9b:c7:7e:6c:87:
0b:1d:34:28:f1:57:6a:0d:4b:03:a5:7c:df:98:9c:
6c:cc:5e:6d:a1:5e:c6:4f:6a:19:fb:15:70:42:63:
9d:c9:5d:f7:12:b1:19:75:a5:ab:64:8c:60:14:2c:
dc:c4:d3:5b:df:50:72:60:5c:49:7b:e2:95:36:f5:
5b:11:b8:f4:16:5d:36:95:d1:bd:52:47:7f:7d:78:
9c:6b:96:7d:d5:27:10:4e:50:1e:ee:d7:1f:d6:a2:
09:03:31:de:39:25:ed:07:62:38:d4:75:fd:b3:e0:
c0:01:b1:7b:cb:63:73:15:98:2a:d9:05:1a:29:42:
59:45:86:75:ce:49:d9:89:c6:a2:aa:a2:66:02:47:
cc:c0:e8:fe:64:ec:cb:83:9a:9d:41:56:8f:3a:5c:
22:e0:30:85:47:99:2c:33:7c:66:7c:5c:c5:b5:5b:
38:f4:7c:bd:72:ad:f5:2e:79:d6:88:fe:f6:19:eb:
c1:27:79:af:a7:33:da:29:7e:3c:d4:38:3b:c1:01:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:70:35:3C:E5:A2:16:2E:13:95:A8:EF:5E:C0:8F:22:26:9A:CF:FE
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/S3A1POWiFi4TlajvXsCPIiaaz_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0-95.170.31.255
Signature Algorithm: sha256WithRSAEncryption
23:e7:11:1c:9e:51:0f:19:69:c8:b0:53:d0:71:8b:0f:9f:d2:
36:01:ca:42:bb:57:64:ce:7f:94:03:b5:f0:d7:ad:f2:bf:f2:
0a:04:6f:4e:68:04:6a:06:da:6c:83:09:a3:b2:9c:4c:0d:5b:
f3:94:e7:e7:bd:e5:b0:bf:65:0a:2d:6b:6f:77:41:e6:61:6c:
3b:90:a3:d3:79:4b:6f:b6:72:ae:4e:bd:28:b2:44:d3:87:df:
11:b1:c0:e1:91:6c:a5:4d:59:b4:a9:ed:ef:8e:1d:e9:e7:09:
6a:2f:31:00:53:83:7c:50:64:a2:0b:bc:21:dd:d2:82:37:91:
cb:28:16:4d:af:60:31:75:98:a4:85:9c:18:21:8d:20:db:74:
a2:01:35:2c:af:b2:0f:ea:41:92:7f:2e:e9:ac:ef:28:dd:15:
ea:39:e3:d1:d7:e7:e9:5f:12:a7:0e:21:6d:3c:40:e5:7a:87:
9d:1d:33:fd:c2:89:94:00:b1:15:83:12:69:72:15:22:a7:52:
a5:d0:d3:60:54:7d:40:52:95:a9:e2:82:bf:54:27:34:1b:6d:
cd:68:89:d3:63:c4:b5:9a:05:51:2e:3f:b1:10:75:9c:8b:47:
64:bf:c4:bb:cd:36:be:bc:d9:be:4b:ef:f2:97:be:67:3e:b6:
99:0e:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net