Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/qZ2rbeeUwV9WnVFloyx-2WLLaic.roa
File: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (raw, json)
Hash identifier: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=
Subject key identifier: A9:9D:AB:6D:E7:94:C1:5F:56:9D:51:65:A3:2C:7E:D9:62:CB:6A:27
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 019428254A99A8977564C5F413D7F6FDCB85
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/qZ2rbeeUwV9WnVFloyx-2WLLaic.roa
Signing time: Thu 02 Jan 2025 17:52:00 +0000
ROA not before: Thu 02 Jan 2025 17:52:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208900
IP address blocks: 95.160.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:4a:99:a8:97:75:64:c5:f4:13:d7:f6:fd:cb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 17:52:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a99dab6de794c15f569d5165a32c7ed962cb6a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:74:0e:d9:f5:eb:ed:44:12:e3:53:ea:64:
d8:0e:ed:96:b3:55:af:80:c6:07:95:e9:fd:f4:6c:
e4:af:d6:0e:0d:c6:a0:0d:bc:95:28:63:b4:c1:30:
07:db:dc:ad:c2:e8:87:a8:48:91:4c:c2:7e:f7:31:
c0:41:7a:ed:e8:04:8d:db:0e:23:eb:43:d5:48:fb:
3c:cc:b1:91:d9:f5:6b:ca:38:69:ec:7d:e5:6e:ef:
67:32:a4:64:58:89:75:01:e2:37:bf:40:47:dc:04:
c2:d3:21:bf:e9:c2:e1:1b:81:c9:f6:aa:d7:24:fe:
f8:ab:b0:52:8d:cc:3d:ee:67:f9:98:89:1f:88:37:
11:4c:14:6e:44:b5:e1:ce:aa:16:c3:81:8a:70:a5:
27:d8:0d:ba:be:9e:7c:2c:4e:e4:82:e7:8d:8a:d5:
20:7f:3f:f7:69:67:0d:b6:86:79:c8:e2:69:76:54:
09:a4:87:77:a0:05:b8:05:d3:95:05:b2:8f:c6:1f:
3e:19:65:e9:4c:f0:51:7a:2c:29:d4:96:a9:61:7f:
38:ce:e8:2c:16:ab:4f:0d:56:dd:a2:6d:ca:1b:96:
f8:a6:c0:6b:46:72:da:6e:b4:c6:e0:68:20:39:b9:
73:29:55:06:dd:46:8b:87:73:48:e1:89:56:e8:61:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:AB:6D:E7:94:C1:5F:56:9D:51:65:A3:2C:7E:D9:62:CB:6A:27
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/qZ2rbeeUwV9WnVFloyx-2WLLaic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.160.57.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e6:57:12:59:48:f7:35:bb:39:60:85:c1:58:19:0f:20:21:
14:15:9d:64:42:65:d6:58:85:be:2f:98:d7:ce:be:f3:f9:0a:
41:32:54:74:e1:d1:8a:f6:83:ad:96:44:9c:1a:1a:b6:7f:2c:
cb:8f:3c:e0:2e:c1:05:a1:bf:46:2c:7c:88:6a:e2:9b:01:9d:
0a:db:2e:d7:73:86:ea:54:cc:ef:f8:e2:cc:7d:9c:3f:c7:bc:
da:11:65:85:88:85:14:7b:18:63:1f:d6:a8:7d:49:0c:87:09:
f6:49:23:5a:06:9b:ec:7e:3d:ab:03:88:d8:23:6d:b1:79:f1:
2f:4c:93:58:57:4b:c5:09:b4:0c:35:c4:30:ba:c2:16:75:e6:
ca:3a:23:e1:21:0e:2b:01:45:7b:20:0d:06:53:30:90:99:6d:
15:2a:ed:89:ff:e5:c1:5d:84:da:cf:b7:d3:f0:f7:0e:21:f1:
b0:04:ce:2e:50:49:8d:1d:9f:02:06:16:09:7d:35:a9:b5:8a:
e8:06:3b:79:39:92:2b:e6:27:03:f9:c8:1b:c1:57:84:b4:09:
34:79:42:da:4e:b7:c4:72:f3:b2:18:61:ca:c2:dc:2b:2d:30:
a7:ae:82:d9:fa:8c:13:a6:62:0e:20:18:51:cf:19:b3:0d:a6:
6f:6f:58:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJUqZqJd1ZMX0E9f2/cuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh
MjI5NjIwHhcNMjUwMTAyMTc1MjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTlkYWI2ZGU3OTRjMTVmNTY5ZDUxNjVhMzJjN2VkOTYyY2I2YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5N0Dtn16+1EEuNT6mTYDu2Ws1Wv
gMYHlen99Gzkr9YODcagDbyVKGO0wTAH29ytwuiHqEiRTMJ+9zHAQXrt6ASN2w4j
60PVSPs8zLGR2fVryjhp7H3lbu9nMqRkWIl1AeI3v0BH3ATC0yG/6cLhG4HJ9qrX
JP74q7BSjcw97mf5mIkfiDcRTBRuRLXhzqoWw4GKcKUn2A26vp58LE7kgueNitUg
fz/3aWcNtoZ5yOJpdlQJpId3oAW4BdOVBbKPxh8+GWXpTPBReiwp1JapYX84zugs
FqtPDVbdom3KG5b4psBrRnLabrTG4GggOblzKVUG3UaLh3NI4YlW6GFQsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmdq23nlMFfVp1RZaMsftliy2onMB8GA1UdIwQY
MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt
ZTA1MzRlMjM4NTliLzEvcVoycmJlZVV3VjlXblZGbG95eC0yV0xMYWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli
LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6A5MA0G
CSqGSIb3DQEBCwUAA4IBAQB25lcSWUj3Nbs5YIXBWBkPICEUFZ1kQmXWWIW+L5jX
zr7z+QpBMlR04dGK9oOtlkScGhq2fyzLjzzgLsEFob9GLHyIauKbAZ0K2y7Xc4bq
VMzv+OLMfZw/x7zaEWWFiIUUexhjH9aofUkMhwn2SSNaBpvsfj2rA4jYI22xefEv
TJNYV0vFCbQMNcQwusIWdebKOiPhIQ4rAUV7IA0GUzCQmW0VKu2J/+XBXYTaz7fT
8PcOIfGwBM4uUEmNHZ8CBhYJfTWptYroBjt5OZIr5icD+cgbwVeEtAk0eULaTrfE
cvOyGGHKwtwrLTCnroLZ+owTpmIOIBhRzxmzDaZvb1jN
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:03 2025 by rpki-client