Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/W_I6VhBLwqUarDv_M6qL6T1kaNU.roa
File: W_I6VhBLwqUarDv_M6qL6T1kaNU.roa (raw, json)
Hash identifier: PstHAmYISZomOui19+7AO+pwFL+mSC1+xcuwB8FQSFo=
Subject key identifier: 5B:F2:3A:56:10:4B:C2:A5:1A:AC:3B:FF:33:AA:8B:E9:3D:64:68:D5
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAC1D1E4AF2078E02ED750062E792
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/W_I6VhBLwqUarDv_M6qL6T1kaNU.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 95.214.176.0/24 maxlen: 24
212.115.126.0/24 maxlen: 24
212.115.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:1d:1e:4a:f2:07:8e:02:ed:75:00:62:e7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bf23a56104bc2a51aac3bff33aa8be93d6468d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:a7:13:88:8a:83:17:d2:0f:47:02:05:56:
60:8e:a7:58:20:b1:1c:bf:43:60:8c:c3:df:9a:59:
8d:83:18:eb:93:d5:0d:d2:e9:c1:70:f6:bf:18:0a:
3d:ee:ed:00:98:9c:7d:71:2a:71:d7:8b:0f:28:2f:
b4:97:18:73:4b:13:0f:74:25:15:cc:f4:6f:80:bc:
18:df:1d:4c:f2:71:a7:8f:6c:65:6e:3e:da:8f:1a:
31:bf:d2:6d:1e:0e:ab:35:2e:91:f0:ec:12:c4:41:
12:43:4f:2e:49:a9:e2:e5:f6:69:ed:d1:14:d1:07:
e9:25:82:e9:db:9e:88:21:74:8f:2c:7f:a5:80:79:
9e:55:90:b2:6a:48:1a:25:a6:4b:f6:02:d8:ea:a8:
0a:0a:e1:fd:32:a0:08:93:55:83:95:4c:ff:5c:2f:
b5:ad:17:11:2d:62:48:09:d9:13:40:b3:39:0b:48:
fb:0b:dc:21:76:65:e2:72:b5:d9:a9:14:fc:8e:1e:
1d:29:8a:36:a1:bc:5a:00:c3:39:53:04:12:0b:29:
f2:24:8c:46:64:ed:52:78:a1:85:2f:87:df:87:c9:
9e:9c:1d:50:0a:30:7b:75:3a:25:a8:6b:88:26:f0:
e4:92:58:c0:2a:dc:1c:47:dc:9d:07:4c:ea:89:35:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F2:3A:56:10:4B:C2:A5:1A:AC:3B:FF:33:AA:8B:E9:3D:64:68:D5
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/W_I6VhBLwqUarDv_M6qL6T1kaNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
11:13:8e:89:0a:40:15:94:05:f9:6a:a4:d7:a2:87:e0:49:e7:
7f:07:4f:38:7c:e1:b7:45:23:7b:96:ac:a8:63:60:af:7d:25:
4a:04:fb:de:06:b3:ac:11:2e:27:4c:e6:db:a3:4b:64:73:43:
e1:5a:b9:e2:09:94:7a:b3:13:f8:fc:36:7c:b9:c3:16:b4:7c:
d5:4c:02:77:be:12:84:30:d6:1a:e3:1a:9b:d5:64:d8:17:1e:
aa:48:3f:e2:04:76:c2:66:ef:1f:81:52:b4:42:06:76:c4:d9:
66:29:d3:45:96:79:9f:ae:dd:8f:8d:dc:bd:d9:97:57:65:e2:
97:3c:50:67:61:c0:3f:c2:e2:b5:1a:95:97:27:f7:a0:a4:fd:
a8:3d:8d:ef:71:48:4f:37:4f:c3:91:77:4b:6c:f5:fa:27:e7:
2c:08:43:c2:dd:8b:ea:0f:7d:b5:17:18:67:b1:08:0c:43:2c:
2d:2f:f4:2d:bc:86:c2:fe:2d:5d:e8:63:fa:bd:e3:03:c8:2b:
dd:8c:6f:92:c3:53:15:73:9a:53:b2:ed:7c:f8:3e:5a:84:45:
b6:37:ee:06:4f:da:1f:98:d9:95:85:58:f5:7a:85:62:13:66:
3a:8b:ca:e6:6f:01:4e:ab:6a:8c:6e:53:a4:cf:68:c4:27:91:
69:19:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net