Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/0ftKGAqo6skKR7cqi9qtdL_HV70.roa
File: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (raw, json)
Hash identifier: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=
Subject key identifier: D1:FB:4A:18:0A:A8:EA:C9:0A:47:B7:2A:8B:DA:AD:74:BF:C7:57:BD
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 0194B703CC13ED0384F9CAD80E9711ABE3E5
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/0ftKGAqo6skKR7cqi9qtdL_HV70.roa
Signing time: Thu 30 Jan 2025 11:41:06 +0000
ROA not before: Thu 30 Jan 2025 11:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215487
IP address blocks: 95.85.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:03:cc:13:ed:03:84:f9:ca:d8:0e:97:11:ab:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jan 30 11:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1fb4a180aa8eac90a47b72a8bdaad74bfc757bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:58:7a:b9:11:b3:1f:c2:f0:0c:73:74:b0:
50:3a:b5:ea:0a:49:7f:23:2a:f1:8e:54:cd:cf:10:
87:11:9a:42:1b:3a:f7:3d:7a:56:97:b6:8e:88:d2:
5a:0f:ca:d9:c2:2c:7d:26:7b:07:39:f1:92:a9:80:
b8:7f:49:a5:56:ec:e5:96:1d:a8:f7:85:6c:e2:dc:
0c:90:2a:10:24:d5:70:01:b4:bf:e0:42:a1:d8:88:
1b:2d:ba:af:d0:b8:31:c3:22:0b:b2:5a:26:dd:6e:
b0:0a:a2:b6:70:9c:df:2b:95:47:2f:e2:36:79:3b:
cb:a6:5d:c3:a1:7c:7e:c4:f1:a0:93:78:a8:cc:a9:
ac:8d:a3:4e:45:f6:06:11:91:35:5a:fa:60:20:84:
43:f6:fd:47:db:89:5a:ac:08:94:7c:5e:a3:66:cb:
82:5d:f1:6c:49:73:7a:6f:2b:8a:7d:7f:09:a5:2c:
02:91:5f:04:54:d5:88:42:6c:68:be:c3:32:c4:78:
2e:2a:b8:5d:4a:b4:79:82:31:a9:34:6e:80:a8:ff:
0b:6f:55:51:b4:6a:27:30:a0:08:e6:98:a6:bc:21:
66:1b:f6:cf:d6:98:9d:21:64:a6:f7:f4:67:d6:4a:
0d:0a:9e:bc:05:85:00:d3:af:fc:b7:b3:48:07:b4:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:4A:18:0A:A8:EA:C9:0A:47:B7:2A:8B:DA:AD:74:BF:C7:57:BD
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/0ftKGAqo6skKR7cqi9qtdL_HV70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.113.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:e1:3e:10:99:40:06:5e:12:8d:a0:7f:2d:ec:77:74:17:86:
97:be:6c:16:6e:dd:1a:0f:64:2c:fe:c6:6e:4b:b9:55:79:32:
d9:bf:56:d0:db:39:a1:cc:3c:a4:4c:39:c5:63:d8:e2:16:38:
c3:e2:30:b2:27:c6:d3:51:8a:25:19:37:cd:94:dc:4f:a6:25:
83:8f:c9:af:3f:f8:68:b9:47:ef:7b:c6:3f:6b:09:62:c8:67:
cb:de:38:91:21:93:9d:f8:a8:2f:cc:89:19:20:e1:46:cc:28:
3b:86:79:2f:82:9b:d2:34:e1:1a:71:e6:f9:db:0c:7f:9f:76:
13:66:f5:8b:a9:ad:2d:a4:7f:d7:98:93:97:db:a1:05:42:63:
54:d5:2f:2d:63:b5:4a:6e:14:f3:b1:6e:59:a9:20:26:d6:21:
98:1a:f6:b2:5f:8b:1b:4b:72:b2:32:1f:51:8c:53:a7:2e:a4:
1a:07:ac:69:bd:3a:ea:53:8c:2e:82:85:c4:8a:c4:5a:4e:f6:
a1:56:f3:1d:8a:14:e9:63:87:5c:29:90:01:fa:46:9b:ca:01:
22:7d:b6:fc:a2:ad:b7:0b:ef:c3:3a:23:fc:8d:5d:d3:ba:fe:
17:d9:86:b8:38:30:11:be:a2:1a:82:fe:2f:6f:84:11:ce:95:
5f:38:15:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS3A8wT7QOE+crYDpcRq+PlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5
NWE0ZWQwHhcNMjUwMTMwMTE0MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWZiNGExODBhYThlYWM5MGE0N2I3MmE4YmRhYWQ3NGJmYzc1N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGVYerkRsx/C8AxzdLBQOrXqCkl/
IyrxjlTNzxCHEZpCGzr3PXpWl7aOiNJaD8rZwix9JnsHOfGSqYC4f0mlVuzllh2o
94Vs4twMkCoQJNVwAbS/4EKh2IgbLbqv0LgxwyILslom3W6wCqK2cJzfK5VHL+I2
eTvLpl3DoXx+xPGgk3iozKmsjaNORfYGEZE1WvpgIIRD9v1H24larAiUfF6jZsuC
XfFsSXN6byuKfX8JpSwCkV8EVNWIQmxovsMyxHguKrhdSrR5gjGpNG6AqP8Lb1VR
tGonMKAI5pimvCFmG/bP1pidIWSm9/Rn1koNCp68BYUA06/8t7NIB7S0rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNH7ShgKqOrJCke3KovarXS/x1e9MB8GA1UdIwQY
MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt
MDhiZjIyZjY0MDk3LzEvMGZ0S0dBcW82c2tLUjdjcWk5cXRkTF9IVjcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3
LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1VxMA0G
CSqGSIb3DQEBCwUAA4IBAQDG4T4QmUAGXhKNoH8t7Hd0F4aXvmwWbt0aD2Qs/sZu
S7lVeTLZv1bQ2zmhzDykTDnFY9jiFjjD4jCyJ8bTUYolGTfNlNxPpiWDj8mvP/ho
uUfve8Y/awliyGfL3jiRIZOd+KgvzIkZIOFGzCg7hnkvgpvSNOEaceb52wx/n3YT
ZvWLqa0tpH/XmJOX26EFQmNU1S8tY7VKbhTzsW5ZqSAm1iGYGvayX4sbS3KyMh9R
jFOnLqQaB6xpvTrqU4wugoXEisRaTvahVvMdihTpY4dcKZAB+kabygEifbb8oq23
C+/DOiP8jV3Tuv4X2Ya4ODARvqIagv4vb4QRzpVfOBXy
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:29 2025 by rpki-client