Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/9iTVcABMKXRZ-jDsWu-61gCPaTM.roa
File: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (raw, json)
Hash identifier: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=
Subject key identifier: F6:24:D5:70:00:4C:29:74:59:FA:30:EC:5A:EF:BA:D6:00:8F:69:33
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 0194228D66039CED14EA51F4558A2157D3E6
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/9iTVcABMKXRZ-jDsWu-61gCPaTM.roa
Signing time: Wed 01 Jan 2025 15:47:59 +0000
ROA not before: Wed 01 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201856
IP address blocks: 95.141.254.0/24 maxlen: 24
2a13:4d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:66:03:9c:ed:14:ea:51:f4:55:8a:21:57:d3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Jan 1 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f624d570004c297459fa30ec5aefbad6008f6933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:e7:f0:0c:5d:ab:d7:3e:3e:e0:74:c3:0f:
6a:b4:3d:7c:f8:65:4f:57:ca:f5:8a:30:db:75:d8:
b5:22:5b:01:1e:6e:c4:f4:3d:ea:e0:19:8d:ee:91:
43:66:a6:bc:9d:86:cf:c2:01:36:59:60:ac:f3:02:
4a:ec:8f:3e:d4:50:63:87:0a:2b:c3:4d:9e:ad:8d:
eb:43:4b:3c:54:1f:a8:de:49:17:86:0e:f5:35:ae:
a2:47:79:e5:5e:ec:34:c8:b8:8c:9f:b4:72:af:fb:
3e:cd:99:0c:55:a4:ec:4b:d4:40:76:25:e8:74:aa:
74:30:8e:54:af:87:78:06:09:c1:f6:4f:35:51:ab:
20:54:86:23:67:dd:a0:e4:1d:76:a6:c4:58:07:da:
d0:82:2c:99:11:a7:18:48:7a:89:e6:42:89:3b:be:
70:a4:0c:8e:ee:39:0a:4e:96:d3:7f:13:7c:a7:56:
9b:27:20:98:b2:3d:42:1c:49:ed:0c:57:b1:c3:35:
34:31:6c:8c:3c:7c:38:07:03:20:d9:2d:5e:81:9b:
dc:e4:9e:d8:9c:e7:a4:6a:ae:83:43:c8:8f:80:6a:
67:96:41:45:4f:78:2a:59:d5:ba:14:53:d3:db:6d:
b2:74:72:d6:4f:ff:1f:ce:81:1c:72:17:e9:54:c6:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:D5:70:00:4C:29:74:59:FA:30:EC:5A:EF:BA:D6:00:8F:69:33
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/9iTVcABMKXRZ-jDsWu-61gCPaTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.254.0/24
IPv6:
2a13:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
60:d2:bb:54:c2:6d:2b:0a:a8:0a:44:4f:df:24:50:bc:e7:9d:
f1:f4:0a:53:3e:6a:b8:97:64:b6:db:f9:21:65:e3:22:c7:bc:
01:f9:0c:91:87:b0:6d:10:99:be:95:b3:bb:44:64:71:13:20:
54:a6:2c:14:39:50:7a:7b:9f:ae:28:97:9a:65:f9:08:e4:e5:
4c:07:50:2e:44:1b:38:a2:a0:c0:d3:7f:06:27:28:c7:e5:4e:
97:38:90:08:69:64:55:ec:80:c2:81:e3:73:56:f4:96:7b:d4:
86:9d:e0:94:90:6d:0a:06:ea:0a:9a:59:4e:35:be:32:e3:9c:
a0:ed:c2:f1:c5:94:a0:07:0e:69:d5:bf:40:af:23:33:ea:cb:
2b:20:de:ae:51:9e:a6:70:ce:06:e8:98:60:ae:62:98:b5:da:
80:f7:13:34:6f:aa:07:36:10:16:a6:e3:3a:ca:e9:91:ad:c1:
bd:4f:81:dd:9d:03:9a:54:71:a0:e2:93:f3:8f:54:83:07:ad:
90:d2:48:d3:cd:62:d8:ff:39:62:6f:68:27:36:2c:d3:fb:4e:
f2:ac:98:70:4c:88:bd:a7:de:e6:6e:0a:be:4d:9e:71:53:b1:
be:82:b4:d6:35:e2:3e:88:09:dd:8b:7f:51:89:ae:a3:ea:69:
7b:4f:d5:11
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijWYDnO0U6lH0VYohV9PmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGU4MTdiZWFlNGMwYTJkNTdmN2ZjM2YwOGM2MjdkNTY1
NDBlN2UwHhcNMjUwMTAxMTU0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjI0ZDU3MDAwNGMyOTc0NTlmYTMwZWM1YWVmYmFkNjAwOGY2OTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYHn8Axdq9c+PuB0ww9qtD18+GVP
V8r1ijDbddi1IlsBHm7E9D3q4BmN7pFDZqa8nYbPwgE2WWCs8wJK7I8+1FBjhwor
w02erY3rQ0s8VB+o3kkXhg71Na6iR3nlXuw0yLiMn7Ryr/s+zZkMVaTsS9RAdiXo
dKp0MI5Ur4d4BgnB9k81UasgVIYjZ92g5B12psRYB9rQgiyZEacYSHqJ5kKJO75w
pAyO7jkKTpbTfxN8p1abJyCYsj1CHEntDFexwzU0MWyMPHw4BwMg2S1egZvc5J7Y
nOekaq6DQ8iPgGpnlkFFT3gqWdW6FFPT222ydHLWT/8fzoEcchfpVMZn4QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPYk1XAATCl0Wfow7FrvutYAj2kzMB8GA1UdIwQY
MBaAFP/egXvq5MCi1X9/w/CMYn1WVA5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjkt
NmNjYTY2ZmQzYzk5LzEvOWlUVmNBQk1LWFJaLWpEc1d1LTYxZ0NQYVRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjktNmNjYTY2ZmQzYzk5
LzEvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAX43+MA0E
AgACMAcDBQAqE02AMA0GCSqGSIb3DQEBCwUAA4IBAQBg0rtUwm0rCqgKRE/fJFC8
553x9ApTPmq4l2S22/khZeMix7wB+QyRh7BtEJm+lbO7RGRxEyBUpiwUOVB6e5+u
KJeaZfkI5OVMB1AuRBs4oqDA038GJyjH5U6XOJAIaWRV7IDCgeNzVvSWe9SGneCU
kG0KBuoKmllONb4y45yg7cLxxZSgBw5p1b9AryMz6ssrIN6uUZ6mcM4G6JhgrmKY
tdqA9xM0b6oHNhAWpuM6yumRrcG9T4HdnQOaVHGg4pPzj1SDB62Q0kjTzWLY/zli
b2gnNizT+07yrJhwTIi9p97mbgq+TZ5xU7G+grTWNeI+iAndi39Ria6j6ml7T9UR
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:12 2025 by rpki-client