Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/p5qeM8pBglCmH9S_-by9le3dhdY.roa
File: p5qeM8pBglCmH9S_-by9le3dhdY.roa (raw, json)
Hash identifier: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=
Subject key identifier: A7:9A:9E:33:CA:41:82:50:A6:1F:D4:BF:F9:BC:BD:95:ED:DD:85:D6
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 019422FB8060D4398D83894CDCF19121FF86
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/p5qeM8pBglCmH9S_-by9le3dhdY.roa
Signing time: Wed 01 Jan 2025 17:48:15 +0000
ROA not before: Wed 01 Jan 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200370
IP address blocks: 95.142.231.0/24 maxlen: 24
95.142.232.0/24 maxlen: 24
95.142.238.0/24 maxlen: 24
95.142.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:80:60:d4:39:8d:83:89:4c:dc:f1:91:21:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79a9e33ca418250a61fd4bff9bcbd95eddd85d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:a7:16:cf:80:99:f5:2a:33:b0:76:fa:2e:
50:17:1e:9a:b6:7a:e9:b2:99:45:3d:3e:8a:e4:03:
0f:22:9b:fd:61:6f:cf:09:9b:b6:e0:1d:88:63:cc:
76:92:d2:47:30:61:c4:b0:80:95:93:5b:23:81:89:
84:c2:7a:e0:26:2f:c6:a9:fb:97:a7:07:6f:fa:2e:
9a:0d:d0:82:6f:ef:00:1a:a5:17:36:eb:87:e4:46:
b2:66:12:01:46:db:c7:5f:22:9f:e3:85:50:28:f2:
e0:26:e8:ef:b4:17:a3:d3:c9:d0:5c:da:9e:b4:b7:
2e:9f:4b:03:13:83:6d:1a:5b:56:16:58:34:f1:db:
2e:93:7f:ba:2f:5e:12:f2:d8:38:79:06:ba:4e:d2:
33:8a:a8:6b:d8:35:3c:34:da:f7:57:90:06:0e:63:
23:06:d2:8d:46:56:9d:2d:99:81:bf:2f:70:e5:6a:
12:b3:c8:6d:e4:29:2a:52:e6:ee:1a:9d:75:c3:40:
cd:cd:24:6d:13:5d:15:56:00:e7:36:c4:ee:00:e3:
ba:44:2f:9f:0d:d0:a7:a9:e6:e2:7d:bf:33:b2:ed:
a1:4b:aa:66:af:eb:a4:af:c4:cb:33:98:af:fe:c7:
b3:57:0e:37:ab:2f:e4:f0:7f:93:a0:a7:cf:09:2e:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9A:9E:33:CA:41:82:50:A6:1F:D4:BF:F9:BC:BD:95:ED:DD:85:D6
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/p5qeM8pBglCmH9S_-by9le3dhdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.231.0-95.142.232.255
95.142.238.0/23
Signature Algorithm: sha256WithRSAEncryption
df:25:3c:32:fd:b7:cd:a9:d7:b5:81:4e:f9:33:5c:cc:af:51:
af:d4:0d:da:58:53:aa:c0:05:d8:94:3c:39:61:de:20:ee:a4:
35:a0:0f:89:9c:b8:e4:8d:fc:b7:68:91:d2:d4:34:99:83:ec:
82:42:10:29:3f:96:eb:d5:da:cc:59:cc:8e:c5:c3:81:19:06:
7c:59:eb:f1:c8:15:c5:e0:00:2a:3f:97:b5:26:ff:dd:8d:b2:
fa:cb:c4:51:7b:21:e8:d8:a4:86:d6:3f:b2:49:56:32:31:e4:
43:ab:7d:a6:65:69:3c:db:d2:f5:bf:bf:81:dd:db:e8:2c:69:
69:13:26:05:93:a9:d8:9e:56:fe:c9:b2:3a:6f:54:62:74:94:
af:5e:b1:f8:c5:96:f6:b3:26:e8:00:84:52:78:b2:33:bf:ed:
9b:a2:ca:01:41:bb:75:ad:1b:b2:99:73:0d:01:dc:c2:06:46:
d3:3e:72:b9:23:0f:a1:5f:14:dc:94:8b:95:b1:00:0d:c4:0d:
74:cb:46:6f:54:45:bb:fd:bf:1f:82:00:cd:99:f3:7a:d3:5e:
04:1f:5b:23:03:a2:9e:e0:cc:74:aa:99:5c:24:4e:84:7b:8e:
45:82:50:2c:fe:e4:08:00:e5:42:59:e0:9c:3f:34:d0:45:9f:
71:66:b4:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net