Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Qi8od9-5X1sf48lKzwcNnNg6mHM.roa
File: Qi8od9-5X1sf48lKzwcNnNg6mHM.roa (raw, json)
Hash identifier: /syJMd1k0a2wLIgM5pfF31EnkGqqCBO2Z4W2CDpPvuA=
Subject key identifier: 42:2F:28:77:DF:B9:5F:5B:1F:E3:C9:4A:CF:07:0D:9C:D8:3A:98:73
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 0194214410916E776D419E1965882A438CF7
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Qi8od9-5X1sf48lKzwcNnNg6mHM.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48391
IP address blocks: 95.81.84.0/23 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.92.0/23 maxlen: 23
95.81.92.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:10:91:6e:77:6d:41:9e:19:65:88:2a:43:8c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=422f2877dfb95f5b1fe3c94acf070d9cd83a9873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:3d:db:17:70:a4:08:ab:5d:9a:ab:2c:6e:
7e:72:66:92:80:29:ea:b6:36:62:3d:46:6d:37:2f:
a3:70:c4:76:bc:e3:c8:f9:3f:9b:db:fe:8d:2e:5f:
14:16:0d:cc:af:86:6d:65:40:80:a1:8f:bc:61:6b:
86:de:e0:f8:8f:d4:66:35:37:b3:d9:85:84:5f:8e:
f2:09:41:38:fd:9b:4a:40:bc:76:ed:fa:4e:15:b1:
c8:d4:cf:da:73:be:80:8e:bb:6f:49:6c:9f:05:22:
f2:41:09:ad:d8:53:38:91:8d:17:5a:00:65:01:2f:
df:7d:e6:88:bb:5f:26:71:dc:79:36:a6:73:64:c4:
dc:12:fe:3d:dc:87:d5:7f:0c:db:83:96:9e:87:3e:
33:c9:07:9f:82:75:54:13:8c:20:dc:54:5c:b9:dd:
3d:8f:6e:c7:6b:10:0b:d5:1a:7b:c4:a1:a1:03:23:
57:de:61:d6:32:29:bd:1b:da:7c:88:09:36:b6:7b:
81:5d:78:45:a8:9a:52:4b:10:ce:0f:a5:96:b4:ae:
be:67:03:75:fd:37:2e:20:8f:5f:35:fc:db:d9:20:
26:bc:da:95:08:f0:df:35:4c:6e:ce:81:61:00:c1:
bb:1c:51:30:be:e4:50:87:9e:1d:43:aa:9a:89:98:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:28:77:DF:B9:5F:5B:1F:E3:C9:4A:CF:07:0D:9C:D8:3A:98:73
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Qi8od9-5X1sf48lKzwcNnNg6mHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0-95.81.86.255
95.81.92.0/23
Signature Algorithm: sha256WithRSAEncryption
21:11:88:cc:dd:e8:b1:0b:38:24:0b:12:8c:f8:a3:c2:75:62:
12:4b:79:70:05:44:62:e1:9f:23:3f:15:af:cc:05:dd:63:61:
fe:7e:00:a7:6c:c1:b2:e3:2d:9e:ff:55:0a:45:28:14:24:08:
7b:b4:51:02:5f:6e:55:7a:35:98:46:51:63:56:53:a0:f5:88:
02:6c:c0:1e:b7:fa:99:05:cf:a6:7f:23:2b:65:da:8c:6f:4b:
24:aa:f1:b4:2e:6b:5f:3c:e9:f0:9b:bc:42:14:f3:6e:e7:d1:
36:9c:d8:11:e9:71:a0:9b:27:91:da:3a:0b:ef:cc:5d:a9:e9:
86:36:b1:0e:34:e1:5d:39:74:03:ba:89:3c:c0:38:ba:fc:e0:
fb:3f:d3:14:d0:15:65:00:be:8b:bc:41:f2:0d:8c:cd:a5:78:
3f:a8:61:75:d8:89:37:f6:fe:7b:1f:ba:74:c7:4d:c9:f7:4a:
ee:93:5d:b1:02:e2:2e:72:a3:82:c5:97:5f:45:b4:4a:e3:ab:
9e:34:9f:65:ac:14:5c:6d:40:ef:85:5b:94:65:bf:5e:8b:22:
f8:cb:d8:bd:2a:6f:8a:39:84:c7:7f:8f:ef:db:06:8f:70:3c:
b3:ef:eb:cc:d8:8d:71:9b:ac:c3:dd:0e:18:fb:83:8c:7a:33:
fd:33:9c:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:19 2025 by rpki-client