Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/uF1fzkxS1dvB384G_6ACG-gahqw.roa
File: uF1fzkxS1dvB384G_6ACG-gahqw.roa (raw, json)
Hash identifier: /0hDj28NRbF23VkEh2wmxEvtyGKZo3nN4bNoYlxvanE=
Subject key identifier: B8:5D:5F:CE:4C:52:D5:DB:C1:DF:CE:06:FF:A0:02:1B:E8:1A:86:AC
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E5F44CC5EB9DFB33C0288C85E115
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/uF1fzkxS1dvB384G_6ACG-gahqw.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60829
IP address blocks: 188.95.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:f4:4c:c5:eb:9d:fb:33:c0:28:8c:85:e1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b85d5fce4c52d5dbc1dfce06ffa0021be81a86ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:e5:2e:cf:79:03:4b:c0:6c:de:3d:39:fd:
96:df:60:f9:58:e1:ba:fe:f6:e3:43:ce:08:c7:be:
0e:8b:1b:d9:e2:aa:69:b6:b0:14:25:73:65:a9:8d:
77:0a:c4:3a:ae:17:03:df:69:2d:b9:f0:f5:b5:47:
63:80:de:5f:27:a6:42:ee:0e:c8:72:de:11:5b:be:
70:c2:50:8a:5f:5a:90:fc:2a:69:5c:ea:a3:c0:62:
a3:50:79:68:b4:ce:c8:3a:a6:f5:67:d1:fc:f7:d2:
c8:4c:b1:f6:70:04:d1:3a:8d:c0:96:a4:aa:94:0f:
91:ad:1f:63:8e:10:a4:8c:69:d3:76:0d:c6:86:f6:
ca:3f:c6:77:e5:5e:19:16:3c:47:a7:dc:7d:95:6f:
c6:2c:3f:42:94:f0:f3:1c:e2:3f:0a:59:26:91:eb:
4d:56:fd:f6:63:e8:ce:52:6f:5b:30:f1:14:65:48:
8d:c3:3c:53:3e:57:7f:a2:a6:70:65:a4:92:08:a0:
92:ff:06:91:49:af:94:b2:fb:78:b9:dc:61:76:d5:
8e:8f:79:ea:e6:78:c1:2a:67:93:dc:6b:40:f2:ea:
3d:b9:54:18:40:40:df:23:3d:6f:26:0d:01:14:69:
0a:13:50:8c:28:70:46:bd:bd:a9:5f:5e:f2:08:34:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:5F:CE:4C:52:D5:DB:C1:DF:CE:06:FF:A0:02:1B:E8:1A:86:AC
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/uF1fzkxS1dvB384G_6ACG-gahqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.151.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:56:4b:22:ff:1f:fb:e7:c0:0e:84:25:79:11:d4:62:23:0f:
54:3f:2e:c8:78:4e:78:f8:9a:f6:b6:b1:cc:18:27:4e:2c:d0:
6e:5a:79:2b:aa:6f:f7:32:c7:b0:3b:05:7a:3e:02:c9:a1:d2:
a4:3c:67:45:70:6a:05:e5:28:d6:c7:a1:94:ce:b5:4d:27:b0:
09:d7:d1:54:8f:1d:6c:da:79:c2:d3:5b:99:fe:b5:2a:4b:e2:
c2:63:e5:7c:11:56:c2:66:6a:47:9f:48:1b:0e:c7:3e:96:fa:
b2:4d:34:9e:98:eb:eb:20:9e:65:8e:0e:c8:60:e9:55:c8:3c:
5e:9f:04:32:37:6b:ae:cc:ac:3a:21:df:b6:dc:a6:d5:f8:3e:
9f:8f:0b:64:fe:31:0e:e3:cb:4e:42:3b:bf:46:06:f9:f0:54:
42:8a:94:96:fd:63:34:62:66:9c:9c:a6:b6:7f:6c:cb:c9:de:
74:11:8c:34:05:4c:11:6f:e3:f0:6b:f6:5c:65:7d:20:3e:05:
57:74:95:41:63:a1:f7:74:16:9d:1b:a6:c0:94:f7:69:e9:46:
b7:d5:4f:a8:05:85:00:51:15:57:c5:44:ca:1c:42:cd:14:d3:
33:f3:24:1a:92:49:49:c9:fd:41:af:72:02:bd:b5:a2:44:9c:
d5:dc:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:32 2025 by rpki-client