Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/uy9rotP4GfgGA6fEbMzkj5aiTZs.roa
File: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (raw, json)
Hash identifier: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=
Subject key identifier: BB:2F:6B:A2:D3:F8:19:F8:06:03:A7:C4:6C:CC:E4:8F:96:A2:4D:9B
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 019422FB3885ADEF19DB0DE3127216A6025B
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/uy9rotP4GfgGA6fEbMzkj5aiTZs.roa
Signing time: Wed 01 Jan 2025 17:47:56 +0000
ROA not before: Wed 01 Jan 2025 17:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50556
IP address blocks: 95.66.175.0/24 maxlen: 24
95.66.178.0/24 maxlen: 24
95.66.179.0/24 maxlen: 24
95.66.232.0/22 maxlen: 22
95.66.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:38:85:ad:ef:19:db:0d:e3:12:72:16:a6:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Jan 1 17:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb2f6ba2d3f819f80603a7c46ccce48f96a24d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:0b:58:dc:f2:ac:b2:94:7f:a0:df:98:4d:
f0:ce:95:2b:01:e8:2b:e6:bf:3f:f6:04:00:be:0f:
6f:38:84:2f:9f:95:be:a3:5f:89:8b:e2:3d:f6:ed:
a3:c7:68:6a:8f:f9:fb:bf:b1:47:c3:71:9c:22:51:
c7:6b:7a:bd:68:1a:3b:b9:84:dc:a6:29:ae:84:c7:
db:8c:95:33:85:9f:7e:2c:c4:9f:98:37:f2:ce:6e:
a4:ed:92:40:b0:72:14:90:40:9c:8f:54:a7:c5:7d:
ee:22:82:cd:87:20:af:58:bf:e2:5d:4f:65:90:5f:
d0:73:1c:07:47:2f:92:62:f0:ae:e7:c3:f6:80:6f:
21:74:34:03:57:3c:5a:84:59:09:f7:f2:92:20:5c:
c5:45:3b:8d:e6:b5:c0:03:30:df:dd:cd:fd:55:c0:
5c:c0:18:ac:88:b4:2b:e0:f6:15:e6:5a:9a:e4:da:
b4:2d:85:e0:8f:4f:05:f3:02:68:5e:28:ab:fb:97:
06:c6:43:ea:d4:37:9b:75:2e:cc:d9:d6:54:ac:2a:
3e:95:d1:88:e5:a0:d6:da:5c:d2:d7:5c:fb:91:90:
c9:49:af:3f:2d:93:c8:f5:cf:19:1c:38:c3:06:59:
47:c3:47:94:80:30:6d:64:fa:8b:3c:65:1e:79:2c:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2F:6B:A2:D3:F8:19:F8:06:03:A7:C4:6C:CC:E4:8F:96:A2:4D:9B
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/uy9rotP4GfgGA6fEbMzkj5aiTZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.175.0/24
95.66.178.0/23
95.66.232.0-95.66.236.255
Signature Algorithm: sha256WithRSAEncryption
c6:86:e5:7f:44:b0:b0:62:8f:b9:81:d6:af:71:cb:a2:80:db:
4d:b6:f5:5c:ac:88:15:10:8c:e9:45:20:a8:47:65:db:b0:28:
6a:4b:bb:c9:c8:12:25:a6:dd:f2:28:ac:ce:3c:0f:65:aa:29:
88:52:f2:a5:28:fa:54:5f:81:78:0c:f9:89:24:b9:67:f1:66:
ac:15:0b:60:00:48:80:f7:bf:b7:f5:72:65:0f:c0:2b:0b:6c:
88:ae:11:84:14:5b:32:d5:3f:06:ed:6e:06:04:fb:9c:96:af:
5e:bd:06:d3:8d:69:71:79:d0:ca:26:9c:54:19:7b:87:75:94:
5a:a6:1d:6c:79:a1:76:de:29:85:f3:3c:69:40:94:46:b3:68:
1a:c7:99:4d:66:d4:30:64:14:44:35:7a:bc:30:74:6f:7e:53:
32:6d:04:ad:8e:d2:cc:38:78:91:cc:b9:5c:5a:6b:31:0c:a3:
80:e4:3f:46:6d:0d:4f:ee:65:06:e8:ee:8d:cd:3b:ad:ef:bb:
3a:9f:eb:f4:cc:ca:22:39:8c:d5:ef:f8:34:37:c2:79:dc:47:
fb:24:65:d6:a2:9c:da:e9:06:57:35:c1:1e:5f:ef:58:26:8b:
6f:11:0f:64:92:e4:95:b6:a5:8b:7c:ce:3b:e0:79:f7:f4:cb:
5a:28:f6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:57:34 2025 by rpki-client