Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/AdhGNLC9cWzwE_YkHt8o7pq_cQo.roa
File: AdhGNLC9cWzwE_YkHt8o7pq_cQo.roa (raw, json)
Hash identifier: Z86vImiits21PtPo6Ue4gYlS01c4SDwwLEIEnDIK8sY=
Subject key identifier: 01:D8:46:34:B0:BD:71:6C:F0:13:F6:24:1E:DF:28:EE:9A:BF:71:0A
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019426D998E677C1DEA5D1C169D931517C69
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/AdhGNLC9cWzwE_YkHt8o7pq_cQo.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51330
IP address blocks: 93.95.30.0/24 maxlen: 24
185.192.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:98:e6:77:c1:de:a5:d1:c1:69:d9:31:51:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d84634b0bd716cf013f6241edf28ee9abf710a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:24:2d:1f:84:1d:5b:cd:d8:62:b0:00:40:
d0:18:68:73:f5:f3:ba:0d:da:94:34:c2:b7:11:c6:
c9:a1:8c:c8:cd:05:8f:db:99:ce:76:26:98:f6:0d:
d6:b7:78:88:e5:32:e0:d4:02:04:5b:c1:d6:8c:86:
b7:81:78:a8:4d:58:0a:71:cf:d2:c5:e8:f1:e8:5e:
55:15:f3:a3:fb:1c:f9:21:84:1f:d3:38:61:da:4d:
79:2c:8d:26:2e:07:42:62:c7:65:54:3d:9b:8f:67:
01:cd:35:f9:2c:dd:4e:02:1a:7b:ee:5c:e5:00:4b:
14:78:e3:7c:20:3c:55:15:9b:71:88:92:97:8e:82:
b1:23:64:3e:18:3b:e9:36:07:73:eb:97:9e:1e:84:
61:d7:99:16:d9:8b:4b:35:8e:f2:a8:65:9c:86:e6:
7b:5a:f6:58:df:30:ed:a7:bd:10:d5:c6:ce:98:a1:
4d:7f:08:da:ce:df:f9:37:b7:a7:e1:3f:c3:ae:43:
ec:7c:27:82:10:bb:e7:c6:95:8b:10:12:30:5e:00:
55:28:39:01:cc:6c:da:bc:85:48:ef:c2:bb:6d:3a:
75:53:41:44:aa:16:ba:b3:72:a9:b7:b2:7d:6c:55:
89:17:49:5e:1c:55:20:8d:f8:dd:c1:58:5a:69:4e:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:46:34:B0:BD:71:6C:F0:13:F6:24:1E:DF:28:EE:9A:BF:71:0A
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/AdhGNLC9cWzwE_YkHt8o7pq_cQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.30.0/24
185.192.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3b:bc:57:7b:fe:b8:a2:e3:a8:d6:14:07:b0:1e:60:b0:50:
5b:c8:0c:3f:d9:61:14:e3:f3:52:cb:58:89:0f:85:cb:e3:46:
3e:15:55:83:21:aa:c4:ce:5c:ba:13:c2:f4:7b:ed:7d:93:fc:
7c:44:ea:04:9b:86:c0:d2:f8:ad:bf:2f:34:1b:58:c0:51:e5:
f5:f3:ee:ae:ce:6d:0f:68:e2:a8:fd:22:34:ac:8d:ec:f8:f1:
56:ac:75:6b:00:4e:6e:d4:8b:43:70:9e:50:e2:a8:31:a5:a9:
f9:8b:ff:48:f7:3d:5f:94:78:88:95:6b:a1:e7:95:32:d0:8d:
de:51:62:c0:49:22:b1:2b:8c:8c:4d:95:34:1a:62:8f:5c:b9:
01:4a:5d:49:41:c6:f0:26:bb:ad:9f:d2:9a:94:a8:e1:63:73:
98:bd:f6:54:0c:ba:90:3a:a1:c8:8c:eb:7d:f0:51:35:5e:0b:
2d:de:a7:7b:6f:85:e0:3b:ba:f4:e9:2c:f6:82:4a:de:5b:90:
25:c6:21:94:9a:ca:a7:d9:7e:fd:0e:05:00:c7:73:5e:87:28:
95:16:44:36:ca:10:a3:5e:28:75:f8:89:d1:ca:b3:b2:9b:53:
51:be:c1:a9:11:2b:a9:13:29:d2:2b:c4:34:8a:b0:3f:79:c0:
ce:07:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:06 2025 by rpki-client