Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa
File: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (raw, json)
Hash identifier: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=
Subject key identifier: F5:3F:90:86:C6:D1:86:6A:E4:BD:DB:15:2C:1D:4F:90:77:0F:40:05
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019426D9A364D440D8839984DED88C24794B
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16299
IP address blocks: 95.169.251.0/24 maxlen: 24
217.168.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a3:64:d4:40:d8:83:99:84:de:d8:8c:24:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f53f9086c6d1866ae4bddb152c1d4f90770f4005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:c5:9f:c3:a3:94:23:dd:30:3d:e8:f0:fe:
ba:e7:e2:e6:5a:2a:d6:20:ae:a6:11:eb:66:7f:31:
19:67:62:6c:af:5b:65:95:fa:52:6a:9f:f6:a7:bd:
ab:b1:95:75:04:2b:20:af:b1:40:62:7d:7f:6a:be:
9e:8c:ee:8b:a9:d2:53:2b:e8:4e:bf:7c:51:f8:1d:
9b:c8:7c:3e:85:49:b9:56:ac:9f:1f:a9:4f:0e:0f:
62:30:ed:d9:a2:3a:fa:c8:d9:c1:38:f3:01:90:9f:
fc:14:d4:62:6f:4a:f7:1b:8a:be:b9:7a:83:33:b5:
1e:be:b6:72:76:16:f2:4e:ea:d2:4e:de:c7:5c:7d:
c4:88:f8:b0:60:ee:5a:0e:bb:ca:41:e0:1f:39:86:
01:e5:ee:86:3d:bd:f6:0f:15:c7:02:c7:ce:0c:7d:
b1:ab:70:6b:6f:84:04:3a:80:67:a0:21:c9:e9:d0:
6d:f8:ec:c9:02:97:06:7c:21:a5:01:96:58:0e:00:
d1:1b:25:04:32:d6:fa:2c:19:b2:54:72:7f:99:20:
f0:4f:78:e2:03:c6:f2:5a:f6:c1:7b:3b:cf:8b:0a:
f8:ff:d8:9f:cd:18:17:c7:95:ef:18:54:5c:c4:df:
d6:2e:47:0e:21:7d:a1:7e:6a:85:a3:3b:77:29:89:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:90:86:C6:D1:86:6A:E4:BD:DB:15:2C:1D:4F:90:77:0F:40:05
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.251.0/24
217.168.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:de:81:f6:2d:04:51:b9:fa:ff:d7:0b:d3:5a:da:56:9b:6f:
5a:8e:83:85:4d:4e:e4:54:83:0e:89:93:3d:0c:17:93:b4:fe:
d8:c4:ef:ad:0c:b1:59:8d:c3:8d:93:90:b2:f1:1b:4a:46:28:
a4:20:62:e6:5f:e9:63:a7:05:be:0f:43:44:e6:c4:e2:50:8c:
f1:e2:a1:03:9c:66:69:4f:fd:0a:ff:8e:91:32:f0:fe:9f:0a:
61:b9:c5:05:e5:ed:28:cb:20:e1:40:af:3d:7e:ac:80:36:5b:
70:f0:d5:50:dc:71:3c:52:74:1f:4f:19:c7:9d:c6:8d:32:88:
4f:99:0d:03:06:55:a8:12:99:ae:e7:eb:17:5a:d4:cf:57:bb:
ac:0b:4a:f6:5c:91:a4:95:d5:bd:c1:73:61:6f:28:db:be:8c:
fe:df:7a:78:da:38:5d:8b:69:2d:d5:34:a7:ee:1b:ad:61:d7:
aa:97:17:2a:c3:c8:46:24:eb:8f:53:6e:fc:1c:28:3e:22:05:
27:72:a6:42:f0:b6:d1:57:c5:73:9b:0e:17:b3:d3:72:e3:61:
26:01:1c:9d:70:9d:7b:27:17:86:31:2b:c2:cd:a4:c6:e2:00:
60:39:5b:0f:38:5f:a6:00:3c:98:4f:dd:29:bb:8f:db:2d:4d:
77:9d:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net