Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/8RHKnf43EnDTyj22kIIfanQSEQc.roa
File: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (raw, json)
Hash identifier: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=
Subject key identifier: F1:11:CA:9D:FE:37:12:70:D3:CA:3D:B6:90:82:1F:6A:74:12:11:07
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 0194274854206830ECF0D2CE028F62244B82
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/8RHKnf43EnDTyj22kIIfanQSEQc.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49840
IP address blocks: 95.142.128.0/24 maxlen: 24
95.142.129.0/24 maxlen: 24
95.142.130.0/24 maxlen: 24
95.142.131.0/24 maxlen: 24
95.142.132.0/24 maxlen: 24
95.142.133.0/24 maxlen: 24
95.142.134.0/24 maxlen: 24
95.142.135.0/24 maxlen: 24
95.142.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:54:20:68:30:ec:f0:d2:ce:02:8f:62:24:4b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f111ca9dfe371270d3ca3db690821f6a74121107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:31:5d:94:82:f8:38:8b:34:ec:a5:bb:4c:
b7:68:82:b2:4e:d1:b2:5c:1f:09:ff:74:6d:ab:a1:
84:88:05:47:d8:04:6f:10:cb:83:7c:6e:59:ad:83:
84:28:fd:41:c5:39:98:64:60:61:47:7d:c0:8d:fd:
6e:b9:56:e5:47:f8:a2:36:31:33:55:36:d5:01:03:
c1:ad:8c:ff:ac:d2:3f:5b:a7:f5:b4:10:21:9b:09:
ad:67:1f:81:19:cf:c0:3e:7a:0c:5c:d3:6d:f1:d4:
39:2a:e4:7c:db:3a:ab:88:59:c2:18:65:c7:5a:7e:
a6:37:4f:1b:7f:53:52:78:05:b8:45:cc:d6:49:2e:
36:bd:65:a6:29:6b:72:f2:13:e3:f7:c0:cd:a0:54:
8a:4e:3e:7e:45:77:41:e0:58:17:24:96:cd:2c:97:
28:7f:30:a4:36:45:e0:f4:1b:11:72:a3:4f:29:40:
93:83:c1:1a:b0:1d:e9:f4:8a:57:cf:bc:ae:e3:45:
8b:f6:53:9b:09:41:1d:b7:4c:82:48:72:f2:33:4d:
fb:c6:3e:16:24:6d:15:d2:0b:49:dc:56:e7:ab:4d:
7b:38:5c:34:12:6c:13:90:f7:e6:e1:8e:8e:ab:e3:
59:3c:35:e3:50:54:0c:1b:53:ae:dd:75:09:91:bd:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:11:CA:9D:FE:37:12:70:D3:CA:3D:B6:90:82:1F:6A:74:12:11:07
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/8RHKnf43EnDTyj22kIIfanQSEQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.128.0-95.142.136.255
Signature Algorithm: sha256WithRSAEncryption
38:30:71:f1:40:04:c0:de:7d:d7:bc:17:57:4f:17:d8:2d:a3:
28:d2:ab:ac:5b:cc:7d:d3:c9:8e:f3:75:75:8a:3c:11:cf:24:
8d:77:c1:d0:c8:88:b2:a7:a3:c3:f5:6f:80:c6:ba:1e:5b:7b:
00:da:a9:7c:bc:1f:0c:d6:f3:36:f1:36:df:fd:08:8b:25:dd:
76:5d:b8:b8:a3:ca:ef:b2:66:3d:8d:fb:0e:bc:3a:d9:63:2f:
22:c0:8c:68:93:0c:e5:75:b9:71:a1:d8:a4:b1:df:fd:78:80:
de:f9:e9:a4:59:99:5d:8f:3d:0f:8d:6b:a9:cf:09:32:fb:69:
03:a2:6a:ce:35:eb:b5:3f:5e:12:19:b3:9e:58:d8:f0:4e:1d:
4a:39:30:ea:fa:cd:e6:e2:2a:b0:41:3c:24:0a:1c:85:56:e1:
cd:87:2d:6f:b7:68:9e:68:bc:63:b4:c8:ca:14:2b:a9:1f:21:
d6:07:f8:93:70:4b:fc:43:55:7d:21:df:d3:ca:5a:f8:38:e3:
8a:f5:b1:42:14:1a:be:5b:87:8c:9b:33:c5:e9:42:9a:1f:96:
b3:87:21:84:20:46:f7:7a:38:86:af:0e:37:d3:16:85:de:65:
0e:4a:1a:3f:40:2c:0d:c1:cb:bd:b9:8e:ab:5f:3b:68:fc:a6:
cc:3f:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:38 2025 by rpki-client