Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/sSMElgLodEbAl0Mf5M1CJAtGd6o.roa
File: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (raw, json)
Hash identifier: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=
Subject key identifier: B1:23:04:96:02:E8:74:46:C0:97:43:1F:E4:CD:42:24:0B:46:77:AA
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 019422FB394C959AA6346E87A73CD0DA0E3C
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/sSMElgLodEbAl0Mf5M1CJAtGd6o.roa
Signing time: Wed 01 Jan 2025 17:47:57 +0000
ROA not before: Wed 01 Jan 2025 17:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210894
IP address blocks: 95.66.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:39:4c:95:9a:a6:34:6e:87:a7:3c:d0:da:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Jan 1 17:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b123049602e87446c097431fe4cd42240b4677aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:02:fe:6f:b2:b1:f4:a3:f2:1f:54:19:33:
e1:8a:48:66:23:7e:c7:a3:25:d3:cf:f8:31:45:5e:
06:8e:3d:15:55:33:fb:84:48:e6:f6:7f:d4:2d:6d:
20:de:b0:4b:bb:68:f1:98:f5:ee:f7:3e:05:b8:7a:
2f:c9:57:16:0c:59:5a:61:7c:ef:1f:5c:d7:30:5c:
57:56:f0:58:47:06:06:32:79:5c:35:05:0a:b6:b2:
45:d5:c9:4c:9e:16:88:96:bc:11:76:20:21:9e:5c:
cd:21:dc:05:75:2f:9c:1d:67:85:88:5f:3d:e9:f7:
f1:ef:5b:07:fb:79:16:c4:fd:46:93:77:7d:fd:60:
3d:5d:cd:ad:83:05:e6:af:d2:e7:03:a8:17:12:e4:
19:7d:f9:92:ab:29:7e:ff:2e:07:c4:2c:15:9c:f4:
dd:d8:a7:6b:5c:4a:2c:bd:e4:3e:c4:6b:9b:16:f6:
ec:c8:15:e5:c0:f9:e3:f4:fd:e4:12:ba:b3:6a:6d:
eb:7f:e3:2d:c5:b3:b6:0b:42:0e:3b:3c:dd:f1:b2:
8c:f2:83:9f:e4:2e:a5:5e:be:80:3a:f2:2e:79:51:
db:fc:05:62:37:fc:e1:66:e1:06:7b:01:ba:8f:2a:
ef:a6:3c:cc:d5:09:d0:4d:d9:83:84:6d:93:00:36:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:23:04:96:02:E8:74:46:C0:97:43:1F:E4:CD:42:24:0B:46:77:AA
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/sSMElgLodEbAl0Mf5M1CJAtGd6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.198.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ab:59:9e:7c:a7:cf:ce:b7:ad:eb:00:04:7a:51:59:13:c7:
af:e7:dd:1a:a8:cb:d8:d5:4c:b5:84:d6:5a:5d:08:c1:0a:20:
e1:9f:f7:22:9e:53:56:c3:5f:7a:1d:51:56:f3:c7:99:95:66:
c1:26:bb:7e:36:3c:32:05:cc:16:21:46:20:8f:e6:86:72:ed:
42:4a:1e:c5:e6:72:d9:6b:bd:98:89:c6:16:12:2a:68:b5:3e:
78:b9:37:60:1b:aa:9b:e2:40:78:f2:f3:26:cb:be:a8:1b:1e:
54:4a:0f:13:8f:16:37:0d:71:ad:db:ae:4b:9f:f8:5e:46:ad:
dc:9b:0d:08:1a:29:8e:f5:9b:c9:94:ae:89:fe:2d:af:ab:ea:
60:43:27:66:0f:06:67:c4:69:39:d9:78:62:6c:4e:be:54:1f:
99:51:b4:a9:5e:e3:2f:4d:6a:e5:78:17:77:42:b0:83:bb:cb:
ad:1c:75:96:62:82:d5:53:06:6c:57:71:3a:17:99:9f:23:a4:
91:58:d1:63:91:30:d8:45:75:3f:01:9c:8c:df:13:b9:70:12:
5f:38:61:fe:55:09:e9:ff:59:e3:3c:6d:73:66:41:a6:af:37:
ee:99:18:27:92:77:c5:e2:ec:8c:77:4a:8f:02:af:8c:bf:75:
49:ee:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net