Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa
File: aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa (raw, json)
Hash identifier: b2SmcSH4KOG2Jvamzo/dYIoESNg2kaU1WJmva5O/UBE=
Subject key identifier: 68:B2:DF:41:62:61:E1:EF:0C:58:80:71:5B:B3:2B:54:F0:AD:7C:8D
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 0195EB518B36BA35A746B6D0F72528104BBA
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa
Signing time: Mon 31 Mar 2025 08:29:04 +0000
ROA not before: Mon 31 Mar 2025 08:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31059
IP address blocks: 95.143.8.0/23 maxlen: 23
95.143.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:51:8b:36:ba:35:a7:46:b6:d0:f7:25:28:10:4b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Mar 31 08:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b2df416261e1ef0c5880715bb32b54f0ad7c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:9b:8d:6f:12:7d:e5:1d:ff:66:44:a4:36:
90:20:ea:fc:a9:0b:b6:da:5c:78:ee:f5:60:2c:11:
f0:33:0a:2e:05:6f:a5:72:8f:9a:4f:9a:a1:58:dc:
9a:b4:a0:75:1a:a4:86:04:91:75:a0:14:8f:32:79:
f2:51:7f:10:bf:96:f2:85:10:61:e2:bd:f8:8d:ab:
ef:b0:25:4a:22:75:d3:e5:33:3f:6a:cf:b5:1a:9a:
9a:3e:d7:35:2f:0e:5b:9b:a8:ff:f7:7c:89:39:b1:
98:9c:8d:53:dc:de:9b:1a:fa:54:d3:53:d0:96:8c:
a2:08:47:11:45:8d:fd:66:f1:18:fa:9d:d5:a9:08:
71:6d:cd:cb:b2:09:e9:26:90:56:03:0a:3f:e3:14:
8d:34:6b:4e:9f:5a:77:15:da:5a:45:88:84:df:7c:
e5:37:a7:14:a4:ad:0a:9c:8d:51:c2:a6:56:d0:92:
e1:df:26:f8:9b:7c:b0:a5:9d:3e:e7:f4:65:8b:67:
6c:4e:e8:91:29:96:7f:96:46:48:c2:75:47:f8:0a:
f3:ae:59:13:a8:35:2d:ca:ea:77:cc:21:bd:2f:8a:
38:ca:b9:41:64:a5:f0:cb:f1:4b:e0:c3:91:94:d5:
8c:6f:0f:32:97:88:90:1e:bc:02:3f:c6:2d:02:ad:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B2:DF:41:62:61:E1:EF:0C:58:80:71:5B:B3:2B:54:F0:AD:7C:8D
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.143.8.0-95.143.10.255
Signature Algorithm: sha256WithRSAEncryption
78:56:4f:29:37:78:73:8b:e3:2d:85:a0:ef:e1:fe:f8:eb:a9:
76:7c:28:57:4a:c7:e9:46:53:da:30:71:a2:bb:7e:ba:92:22:
cd:38:cf:8c:66:ea:3b:ac:53:f7:fd:a2:65:7d:74:f8:73:24:
0b:91:6a:a5:1e:d1:c9:62:58:51:db:c2:3a:34:83:bf:17:f6:
b2:ba:39:40:d5:2b:ea:8b:14:37:fd:82:87:72:cf:31:94:74:
97:ad:ec:7c:0f:23:61:23:d0:87:f5:f3:4f:b0:9e:61:c8:5e:
6a:b4:a6:d0:b6:2f:0b:07:dc:e8:b6:d3:55:f9:ec:74:8a:5e:
1b:9b:c7:90:24:64:e2:1c:6b:ee:9a:90:34:b8:d3:2c:f0:27:
e8:d0:32:de:83:eb:16:6a:ea:98:cb:e5:9a:c6:ee:17:9d:a2:
8d:df:70:3c:b2:a1:32:47:fa:cb:de:3f:ae:ae:68:43:91:ba:
54:3d:85:44:d4:c7:00:03:9a:54:77:0a:a9:67:03:ef:6a:70:
f1:4f:57:6a:66:77:2d:26:78:72:9e:58:4f:d7:a6:94:35:29:
a0:2e:0c:f1:68:f6:a1:bc:90:d7:e7:a5:15:01:2b:8f:f6:10:
94:b4:5e:cf:18:bc:56:05:3f:fd:10:b4:55:e5:eb:8d:ec:04:
a8:48:74:09
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZXrUYs2ujWnRrbQ9yUoEEu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDQ4MGIwNzk1NjE3ZTJlMjZlNmUxODI2NDM3N2U3YTk2
Yzc4ZjMwHhcNMjUwMzMxMDgyOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGIyZGY0MTYyNjFlMWVmMGM1ODgwNzE1YmIzMmI1NGYwYWQ3YzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ybjW8SfeUd/2ZEpDaQIOr8qQu2
2lx47vVgLBHwMwouBW+lco+aT5qhWNyatKB1GqSGBJF1oBSPMnnyUX8Qv5byhRBh
4r34javvsCVKInXT5TM/as+1GpqaPtc1Lw5bm6j/93yJObGYnI1T3N6bGvpU01PQ
loyiCEcRRY39ZvEY+p3VqQhxbc3LsgnpJpBWAwo/4xSNNGtOn1p3FdpaRYiE33zl
N6cUpK0KnI1RwqZW0JLh3yb4m3ywpZ0+5/Rli2dsTuiRKZZ/lkZIwnVH+ArzrlkT
qDUtyup3zCG9L4o4yrlBZKXwy/FL4MORlNWMbw8yl4iQHrwCP8YtAq0A/QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGiy30FiYeHvDFiAcVuzK1TwrXyNMB8GA1UdIwQY
MBaAFCPUgLB5Vhfi4m5uGCZDd+epbHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQt
YWY5OGU0OWYxMWFlLzEvYUxMZlFXSmg0ZThNV0lCeFc3TXJWUEN0ZkkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQtYWY5OGU0OWYxMWFl
LzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANfjwgD
BABfjwowDQYJKoZIhvcNAQELBQADggEBAHhWTyk3eHOL4y2FoO/h/vjrqXZ8KFdK
x+lGU9owcaK7frqSIs04z4xm6jusU/f9omV9dPhzJAuRaqUe0cliWFHbwjo0g78X
9rK6OUDVK+qLFDf9godyzzGUdJet7HwPI2Ej0If180+wnmHIXmq0ptC2LwsH3Oi2
01X57HSKXhubx5AkZOIca+6akDS40yzwJ+jQMt6D6xZq6pjL5ZrG7hedoo3fcDyy
oTJH+sveP66uaEORulQ9hUTUxwADmlR3CqlnA+9qcPFPV2pmdy0meHKeWE/XppQ1
KaAuDPFo9qG8kNfnpRUBK4/2EJS0Xs8YvFYFP/0QtFXl643sBKhIdAk=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net