Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qsj7XfEC3HxrtK4yZybQAkKlR44.roa
File: qsj7XfEC3HxrtK4yZybQAkKlR44.roa (raw, json)
Hash identifier: Kmt9UMAAnVHfuwIVdadMVy3M/QBN1FNfkCme+Pjq0B4=
Subject key identifier: AA:C8:FB:5D:F1:02:DC:7C:6B:B4:AE:32:67:26:D0:02:42:A5:47:8E
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274803755C12B6A7DC770A23D7415AB3
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qsj7XfEC3HxrtK4yZybQAkKlR44.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207772
IP address blocks: 95.43.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:75:5c:12:b6:a7:dc:77:0a:23:d7:41:5a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aac8fb5df102dc7c6bb4ae326726d00242a5478e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:56:6d:9d:bb:2c:dc:27:e8:2d:ce:49:4f:
cf:a1:61:ea:9e:48:f9:5e:5a:1d:22:f7:2f:35:d8:
e5:ba:fb:98:30:32:72:20:85:07:13:da:59:ac:b7:
71:55:8e:a5:8e:04:53:30:d7:d6:17:8f:7b:ee:79:
87:8d:14:c7:14:79:da:7c:20:9b:eb:01:7e:29:0c:
a6:c0:9c:1c:b8:20:30:06:03:b1:1c:09:c1:e7:bb:
c6:d5:9c:d7:43:61:54:0a:fa:6a:d5:f7:07:1a:f1:
ac:59:de:0e:3e:cf:e5:e6:09:5c:c1:b3:2d:00:73:
7b:50:c5:f7:e9:58:e1:2b:00:2a:81:15:bd:f4:11:
3f:80:23:fc:09:c9:22:82:7e:b7:a6:2e:74:34:ae:
f7:e4:7b:d1:60:96:be:a6:a9:16:47:ca:58:16:d9:
87:23:af:c7:6b:30:8b:b9:92:90:50:a3:eb:48:1c:
4a:e5:70:47:26:b3:15:9c:50:d8:f2:18:9b:a9:11:
de:ba:26:0b:ba:e9:a3:76:3f:e0:3d:0f:ee:26:0c:
38:2a:f0:bc:32:b2:f8:13:12:aa:13:af:74:e6:e5:
4c:f1:43:11:f7:6e:c6:ba:63:d0:d3:46:78:b1:ec:
03:15:ed:06:9b:0c:20:4f:a4:b9:52:3b:94:6d:07:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C8:FB:5D:F1:02:DC:7C:6B:B4:AE:32:67:26:D0:02:42:A5:47:8E
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qsj7XfEC3HxrtK4yZybQAkKlR44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6a:38:84:5e:e0:85:59:ee:f0:01:33:9d:f4:f9:18:99:4d:
ac:0d:3a:8d:a6:ad:07:2d:1e:03:2d:2d:b4:57:90:45:c9:eb:
6e:76:11:29:c5:7a:18:3e:0e:4c:47:f8:df:88:14:c9:54:60:
6e:39:06:e6:64:ff:c2:c3:65:13:5c:69:00:0f:55:ec:a3:63:
aa:db:f5:83:f0:e2:88:d3:58:66:d5:73:65:73:5d:7e:51:b3:
57:c0:43:8a:ca:71:27:c2:8c:25:8c:9e:ec:8e:7e:ee:a4:26:
45:e2:18:3d:ba:b8:cb:03:38:76:6a:ce:35:87:23:11:52:ec:
4a:f9:00:98:b4:7c:bb:7d:eb:b8:95:96:be:08:0d:1f:61:02:
ac:5f:40:49:0f:f3:de:a9:63:0f:76:ad:75:1a:db:16:fc:fb:
95:e5:ed:7d:09:e0:df:06:99:e6:6a:6f:99:9a:3a:b5:f3:cc:
0c:12:e5:ef:a5:9a:86:2f:ff:f9:72:6c:de:0c:64:0c:3c:11:
a1:10:c9:fd:41:6a:0f:b5:1e:73:2f:e0:28:17:3f:d8:7c:2a:
6b:97:54:c1:15:56:39:28:42:2b:e1:d3:3d:d5:c3:9e:af:63:
f5:dd:02:ed:3f:87:89:2f:c5:93:65:88:2c:bd:fb:d7:75:94:
c8:41:38:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSAN1XBK2p9x3CiPXQVqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWM4ZmI1ZGYxMDJkYzdjNmJiNGFlMzI2NzI2ZDAwMjQyYTU0NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mxWbZ27LNwn6C3OSU/PoWHqnkj5
XlodIvcvNdjluvuYMDJyIIUHE9pZrLdxVY6ljgRTMNfWF4977nmHjRTHFHnafCCb
6wF+KQymwJwcuCAwBgOxHAnB57vG1ZzXQ2FUCvpq1fcHGvGsWd4OPs/l5glcwbMt
AHN7UMX36VjhKwAqgRW99BE/gCP8Cckign63pi50NK735HvRYJa+pqkWR8pYFtmH
I6/HazCLuZKQUKPrSBxK5XBHJrMVnFDY8hibqRHeuiYLuumjdj/gPQ/uJgw4KvC8
MrL4ExKqE6905uVM8UMR927GumPQ00Z4sewDFe0GmwwgT6S5UjuUbQcYGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKrI+13xAtx8a7SuMmcm0AJCpUeOMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvcXNqN1hmRUMzSHhydEs0eVp5YlFBa0tsUjQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXytyMA0G
CSqGSIb3DQEBCwUAA4IBAQCsajiEXuCFWe7wATOd9PkYmU2sDTqNpq0HLR4DLS20
V5BFyetudhEpxXoYPg5MR/jfiBTJVGBuOQbmZP/Cw2UTXGkAD1Xso2Oq2/WD8OKI
01hm1XNlc11+UbNXwEOKynEnwowljJ7sjn7upCZF4hg9urjLAzh2as41hyMRUuxK
+QCYtHy7feu4lZa+CA0fYQKsX0BJD/PeqWMPdq11GtsW/PuV5e19CeDfBpnmam+Z
mjq188wMEuXvpZqGL//5cmzeDGQMPBGhEMn9QWoPtR5zL+AoFz/YfCprl1TBFVY5
KEIr4dM91cOer2P13QLtP4eJL8WTZYgsvfvXdZTIQTgU
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:34 2025 by rpki-client