Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/48Q1fBuHaCYBqsQHrsPju3z190U.roa
File: 48Q1fBuHaCYBqsQHrsPju3z190U.roa (raw, json)
Hash identifier: RofaoW7a6GekqnmhLzaxpAySjsCQ2fnyFNi4MLXLEX8=
Subject key identifier: E3:C4:35:7C:1B:87:68:26:01:AA:C4:07:AE:C3:E3:BB:7C:F5:F7:45
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F63014D419899483248C71C68F32
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/48Q1fBuHaCYBqsQHrsPju3z190U.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197050
IP address blocks: 95.43.232.0/22 maxlen: 24
213.16.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f6:30:14:d4:19:89:94:83:24:8c:71:c6:8f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3c4357c1b87682601aac407aec3e3bb7cf5f745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:f6:8b:6f:d5:39:1e:f9:41:3e:f2:4b:cf:
26:a4:70:a1:66:fd:55:49:80:c2:55:35:6e:8c:cf:
60:8d:53:db:56:b5:33:48:5e:88:c6:d7:db:6f:a4:
d2:7a:65:fa:96:74:5c:dc:6d:23:b7:21:03:3e:b4:
37:87:1f:d0:c6:19:7a:7c:34:0c:ab:0c:34:68:69:
96:dd:cf:13:42:52:f7:16:b3:b3:75:4e:95:9c:20:
1f:04:09:92:85:eb:3f:b3:51:96:61:9b:de:a0:e6:
f8:b4:11:47:67:5b:93:65:b9:ed:ac:e1:94:28:76:
d8:18:d6:06:73:61:13:f3:19:8e:65:94:4a:52:c6:
fd:0a:05:2a:ab:67:1a:23:24:f6:7d:b7:da:31:e1:
cf:ea:89:a4:91:8f:3c:f2:79:8d:30:bb:f5:e3:39:
f8:0d:8e:24:ba:10:80:fa:4a:8a:07:31:77:c9:e6:
94:07:88:a6:f2:86:01:e6:fa:9c:66:0c:35:a2:18:
02:29:3f:ac:aa:16:25:25:2f:9f:bb:d5:fb:46:b1:
d8:9f:5c:19:92:a1:87:fa:7b:62:6a:ac:12:cc:aa:
f0:ec:77:0f:a3:98:a9:58:b2:12:fb:31:df:a2:34:
ba:8b:7c:5e:05:41:e6:0d:61:75:38:e4:93:58:01:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:35:7C:1B:87:68:26:01:AA:C4:07:AE:C3:E3:BB:7C:F5:F7:45
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/48Q1fBuHaCYBqsQHrsPju3z190U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.232.0/22
213.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:28:d5:65:2a:81:62:84:22:fe:96:58:c0:52:c7:d1:8c:ee:
21:30:44:6a:09:4c:1f:70:01:06:08:c5:12:98:88:73:b1:b9:
7d:bc:2d:63:e1:fa:4e:44:ce:61:7b:f8:0a:de:9c:ea:b7:06:
3a:50:dd:42:6c:d2:8d:28:fe:c8:83:c3:80:6e:3f:55:06:35:
3d:8f:84:41:ad:81:9d:20:f3:24:69:9b:c7:bc:d5:02:98:9f:
53:07:99:cf:6d:b7:2a:9f:48:d3:c0:1f:08:cc:25:48:a3:18:
7e:ed:d7:92:e3:0b:28:b0:74:6d:20:2a:3f:92:50:fe:52:56:
29:f4:89:f2:92:36:bb:50:a8:45:62:fc:9f:fd:89:10:6a:41:
9e:44:19:de:fd:f6:e1:2c:9d:81:f2:97:2d:14:71:ae:ad:c7:
a7:c8:52:4f:72:6b:4c:40:91:99:07:0e:81:1d:61:b7:94:2a:
fb:4b:99:d5:de:cd:3a:33:ea:34:7a:48:8f:81:c3:b9:32:d1:
08:16:ef:0b:50:dc:3b:4a:1f:99:2d:a8:2b:99:67:b5:38:c0:
90:5e:4a:72:7e:54:cd:f4:db:7d:ea:d7:6a:32:4f:9f:83:b6:
6c:63:e8:f5:05:48:76:db:2a:5d:2b:a8:cc:e6:d2:86:69:7a:
3d:e4:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:38 2025 by rpki-client on console.sobornost.net