Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/a-UPHbc06elr_blSu9vS7q86SLw.roa
File: a-UPHbc06elr_blSu9vS7q86SLw.roa (raw, json)
Hash identifier: 5vOUevzZOr+5szST6vxZMIM+U+1SeNXKPgwq9P6XW/E=
Subject key identifier: 6B:E5:0F:1D:B7:34:E9:E9:6B:FD:B9:52:BB:DB:D2:EE:AF:3A:48:BC
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 019421440EBB8B5C351082BE3B2B0FD0562A
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/a-UPHbc06elr_blSu9vS7q86SLw.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34636
IP address blocks: 95.81.80.0/23 maxlen: 23
95.81.80.0/24 maxlen: 24
95.81.81.0/24 maxlen: 24
95.81.82.0/23 maxlen: 24
95.81.88.0/22 maxlen: 24
95.81.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0e:bb:8b:5c:35:10:82:be:3b:2b:0f:d0:56:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6be50f1db734e9e96bfdb952bbdbd2eeaf3a48bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:f1:f3:29:d8:7b:34:46:eb:67:b3:0f:55:
90:bd:c9:68:6d:ab:54:89:87:8a:88:13:0b:3b:5b:
4a:c0:68:1f:4d:a6:2b:80:a4:a2:fa:64:cd:0e:fb:
70:c3:c7:cb:ec:9e:d0:65:af:ab:25:3e:17:84:08:
05:a6:11:e3:84:a2:2d:6e:70:12:63:5f:c1:62:ec:
91:6f:d3:cd:bd:04:0d:fa:05:5a:21:2d:fa:62:7b:
71:c0:10:20:72:88:50:fc:ab:8e:fb:10:d4:0a:5f:
be:54:50:1f:0b:7b:4a:7b:7c:94:21:c7:16:10:a5:
55:14:f5:75:72:e1:f7:d6:e1:ff:5a:95:37:1d:b5:
1e:2f:f1:de:57:d8:37:ad:b1:7b:42:5d:70:bb:83:
c6:a7:22:0f:40:85:d2:a6:74:f3:91:3f:36:31:c9:
f7:d7:18:df:75:36:51:07:e7:92:49:64:97:af:4c:
52:32:61:a5:42:74:59:66:4a:d0:f1:a8:3d:22:fa:
d8:e0:7d:1b:d4:35:3e:cd:ea:6e:90:a0:d1:ef:2d:
f5:ea:5d:2b:a3:a9:a5:08:ce:c5:c8:ac:d4:17:f1:
cb:37:29:63:e2:3f:51:24:68:c6:f8:ec:ad:1c:08:
2c:2d:fd:01:7d:46:f4:e9:22:dc:62:e3:68:8d:5a:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:0F:1D:B7:34:E9:E9:6B:FD:B9:52:BB:DB:D2:EE:AF:3A:48:BC
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/a-UPHbc06elr_blSu9vS7q86SLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.80.0/22
95.81.88.0/22
95.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ff:73:4c:84:29:eb:2d:10:df:db:97:9f:df:81:fb:4a:29:
16:36:0d:ed:f0:f2:32:af:2b:7c:24:f6:30:4c:ec:ee:86:94:
b4:f4:62:3c:6c:00:d5:01:fc:10:fe:25:33:d5:ed:c4:68:6e:
b9:13:18:85:e3:9e:25:2f:49:fd:ed:22:ad:a0:d5:a4:51:17:
00:52:45:65:df:ef:06:8f:68:e2:ce:f0:02:ad:08:6e:36:07:
2a:49:5c:f3:cd:3d:08:db:31:04:29:22:0f:b8:e1:4d:e5:a7:
92:f0:3f:3b:b0:16:44:c6:89:f0:7d:37:34:66:b1:72:0c:ec:
5c:92:f4:9e:7a:8f:5c:bf:56:25:c0:6a:c6:de:77:bf:66:ae:
0b:88:ad:78:d7:87:7e:fa:fc:10:f0:f8:fd:1a:70:13:40:0e:
f5:e4:c4:53:e8:d6:32:e7:69:38:2e:a3:2f:1d:72:3f:c7:bd:
b8:0a:0b:97:58:3a:9d:5d:bd:95:77:05:6e:48:4b:76:75:f7:
df:1e:4d:a0:e6:81:33:e3:61:6d:94:a4:2d:2d:ca:ce:4c:3d:
97:da:c1:1a:19:02:32:33:a2:c1:75:da:50:4e:e6:cc:f7:30:
75:ef:d8:53:a8:b9:27:ee:87:61:0f:f0:3d:27:5c:ce:51:e5:
c6:0d:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net