Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/73uSq-4SpKYBlu8UyOkPNp8T3oY.roa
File: 73uSq-4SpKYBlu8UyOkPNp8T3oY.roa (raw, json)
Hash identifier: eHXgeezor68DXIBHnGvx5JBB1RTU4U01+LKJIzrEQ2Y=
Subject key identifier: EF:7B:92:AB:EE:12:A4:A6:01:96:EF:14:C8:E9:0F:36:9F:13:DE:86
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01946A9D62BC9DA70CC8399C52B699055C8D
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/73uSq-4SpKYBlu8UyOkPNp8T3oY.roa
Signing time: Wed 15 Jan 2025 15:38:06 +0000
ROA not before: Wed 15 Jan 2025 15:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214640
IP address blocks: 95.141.241.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a13:7c80::/32 maxlen: 32
2a13:7c81::/32 maxlen: 48
2a13:7c82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:9d:62:bc:9d:a7:0c:c8:39:9c:52:b6:99:05:5c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jan 15 15:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef7b92abee12a4a60196ef14c8e90f369f13de86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:00:39:9f:fd:b8:80:8b:da:c9:4c:83:86:
e1:03:22:d5:e3:56:cf:ad:98:22:79:d6:30:0c:dd:
f7:32:72:af:28:0d:30:d8:ac:31:5e:94:f4:da:97:
bb:9d:82:94:21:c1:03:bd:4d:36:18:d0:f7:80:ff:
8a:a4:45:47:66:b6:79:5f:69:16:00:c4:55:69:56:
9c:f0:92:85:be:75:12:c7:62:5a:f6:35:24:2e:56:
d4:a3:7f:4c:59:b9:fc:a2:23:30:5e:d4:14:36:03:
c6:a7:b0:37:28:eb:ef:cb:f2:df:0b:2c:a2:a9:5b:
26:06:96:0d:1d:81:1a:ae:35:5e:38:70:78:6f:0b:
f0:65:c6:40:d9:5d:87:ae:64:7c:83:e9:01:7a:88:
38:89:4e:dc:b7:8b:83:05:1b:19:99:0c:d9:07:c2:
34:02:b7:a1:ab:2c:e5:c5:6d:4c:6b:a3:94:36:c8:
31:bb:4c:b0:a4:b3:77:68:48:b9:85:a7:64:2f:3b:
3d:fd:78:7d:e2:ab:5c:b9:eb:6f:7c:a1:40:e5:a4:
75:a8:cd:05:1b:62:69:fe:bc:b8:53:26:62:52:72:
2b:68:a4:a0:f6:f6:bf:bd:cc:45:b5:7f:4c:ab:37:
e8:0f:6c:3e:fb:88:cd:8c:4d:d5:fc:f8:b5:0e:0f:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:92:AB:EE:12:A4:A6:01:96:EF:14:C8:E9:0F:36:9F:13:DE:86
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/73uSq-4SpKYBlu8UyOkPNp8T3oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.241.0/24
193.53.40.0/24
IPv6:
2a13:7c80::-2a13:7c82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:06:da:35:81:5b:7b:95:ba:ec:50:c3:e1:a2:07:06:b5:4f:
b4:b2:10:3d:d1:b2:ea:b3:e7:16:4c:4a:fa:fe:67:bd:9e:ad:
96:5c:10:70:78:2b:62:f3:49:62:6a:05:71:77:09:c3:6b:8d:
5a:b5:84:eb:81:fb:c7:5f:1f:fe:56:10:e0:85:a9:fd:53:92:
f5:57:01:3b:5d:b3:c3:47:72:e5:ea:07:31:52:47:92:47:fb:
c6:83:bf:a9:8a:9f:a4:6e:19:62:4e:a1:f2:7b:6b:48:7c:95:
a2:a3:57:1e:b1:e4:8d:30:29:be:17:66:17:33:81:b7:a5:c5:
e9:23:62:1e:6d:82:97:8c:a4:69:7c:fc:06:8e:44:dc:d7:03:
2f:fe:d5:1e:03:72:bb:f3:b1:36:c0:a4:74:74:a5:81:7c:a3:
e3:f9:60:6c:ca:4a:31:e9:45:14:51:db:5f:cb:5b:a1:5e:76:
9e:b9:63:f7:c1:e1:83:57:6e:61:b8:32:35:a4:85:da:3b:20:
a4:a2:12:e9:db:2c:c0:3e:28:16:06:de:57:b5:b4:89:9e:31:
14:f3:44:98:5b:fe:11:a7:48:1c:30:92:e2:bd:50:6a:c9:0e:
70:2e:10:74:89:84:30:70:f2:a8:80:b3:5c:b0:91:bc:a8:9f:
7c:22:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:08:06 2025 by rpki-client