Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/C8QSGaryHD1ifNMCj6TvuYmJ4_s.roa
File: C8QSGaryHD1ifNMCj6TvuYmJ4_s.roa (raw, json)
Hash identifier: FDfh4y52jk52XVkY0in4dMkywyFVX54MNFbeJM/1CKk=
Subject key identifier: 0B:C4:12:19:AA:F2:1C:3D:62:7C:D3:02:8F:A4:EF:B9:89:89:E3:FB
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019427B50D544A76AB1CFDDFCAAC6587226D
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/C8QSGaryHD1ifNMCj6TvuYmJ4_s.roa
Signing time: Thu 02 Jan 2025 15:49:24 +0000
ROA not before: Thu 02 Jan 2025 15:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204773
IP address blocks: 93.95.210.0/24 maxlen: 24
2a13:3000::/30 maxlen: 30
2a13:3004::/31 maxlen: 31
2a13:3006::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0d:54:4a:76:ab:1c:fd:df:ca:ac:65:87:22:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Jan 2 15:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc41219aaf21c3d627cd3028fa4efb98989e3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:76:95:ac:e2:4d:80:1c:37:c5:61:d7:84:
34:d7:04:d2:7b:59:c6:6f:25:bc:3e:5c:2c:0b:e8:
73:e2:00:51:cf:d9:e3:0e:ad:41:51:d5:a0:2e:9f:
70:eb:94:16:21:e0:ea:0f:ab:a0:dd:5b:2f:75:f6:
5e:58:c2:f8:53:0c:17:d6:c2:25:ad:37:4d:81:e1:
01:d6:b5:5e:81:7d:35:1d:54:7c:e7:85:aa:a9:dc:
45:fc:03:63:01:6c:fd:6e:af:e6:2c:b5:21:a0:eb:
ff:af:e8:3f:8e:c7:dd:9c:d8:bf:f7:d4:c7:b4:04:
0b:18:6e:75:a2:91:53:12:b6:58:aa:b3:98:c5:0f:
fa:1d:bc:e0:3c:d5:be:17:06:9a:6d:18:ac:fa:af:
a1:15:4b:db:db:cc:9a:1c:9f:a9:69:cd:e2:9f:fc:
c1:07:92:b9:8b:c5:59:97:af:59:5c:7d:c3:65:d8:
6c:5d:04:24:14:5c:2e:d9:57:e4:a6:13:63:eb:87:
19:d6:b4:6e:9b:f5:5e:87:a3:65:8b:aa:42:f2:03:
53:c1:81:17:92:94:b8:da:cc:24:91:d3:b0:1f:5a:
98:76:9e:e8:6c:1e:6d:41:a4:9c:49:6c:54:0a:f6:
06:72:04:65:11:85:0e:cb:d9:50:55:73:8f:3b:ff:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C4:12:19:AA:F2:1C:3D:62:7C:D3:02:8F:A4:EF:B9:89:89:E3:FB
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/C8QSGaryHD1ifNMCj6TvuYmJ4_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.210.0/24
IPv6:
2a13:3000::-2a13:3006:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:ab:2b:87:8a:d4:67:45:73:2c:de:64:57:29:1a:b1:e2:23:
87:c0:31:35:cd:63:eb:45:d1:73:8b:b0:4b:a7:b7:45:45:0b:
b2:8d:54:4e:ee:59:ab:77:80:48:12:ed:c4:81:b3:88:03:fd:
b6:67:78:67:1a:e7:19:1e:1f:8d:e1:6f:fd:31:85:0e:98:88:
26:f2:e0:8d:50:0a:79:46:44:a0:b5:76:8c:fb:5d:49:12:86:
e2:8c:89:a1:94:a3:f7:e3:ce:58:75:78:8d:b1:2b:7c:ea:c7:
96:33:83:39:51:a4:57:5e:50:14:65:6f:84:9a:05:93:13:e0:
54:2c:b1:4e:7d:ff:a4:55:a7:de:6f:de:e6:5e:f5:77:d3:a1:
3a:a3:f0:92:ef:77:92:d6:df:3b:3f:a3:96:c9:27:4b:e2:52:
ab:ed:23:3a:6a:32:82:e8:70:49:19:a8:61:64:4e:e1:56:60:
9f:53:b9:64:34:a4:2d:70:38:d8:43:d4:77:4b:dd:ed:fc:74:
6d:6f:db:84:6f:d9:eb:9f:3f:71:19:de:ce:94:69:8f:f2:c4:
6a:ab:64:e0:e3:37:ab:32:54:5f:dd:73:4f:a2:0f:eb:37:86:
e3:df:f8:75:f8:11:d9:f6:0e:94:ab:43:07:71:c7:2c:eb:44:
23:bb:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:32 2025 by rpki-client on console.sobornost.net