Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/j-betU5F3fuYYNREFl5I-_t74ng.roa
File: j-betU5F3fuYYNREFl5I-_t74ng.roa (raw, json)
Hash identifier: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=
Subject key identifier: 8F:E6:DE:B5:4E:45:DD:FB:98:60:D4:44:16:5E:48:FB:FB:7B:E2:78
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 01942823E0C62A2B5901239410509C50C2AC
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/j-betU5F3fuYYNREFl5I-_t74ng.roa
Signing time: Thu 02 Jan 2025 17:50:27 +0000
ROA not before: Thu 02 Jan 2025 17:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48966
IP address blocks: 95.130.88.0/23 maxlen: 23
95.130.88.0/24 maxlen: 24
95.130.89.0/24 maxlen: 24
95.130.90.0/23 maxlen: 23
95.130.91.0/24 maxlen: 24
95.130.92.0/23 maxlen: 23
95.130.92.0/24 maxlen: 24
95.130.93.0/24 maxlen: 24
95.130.94.0/24 maxlen: 24
185.88.80.0/23 maxlen: 23
185.88.80.0/24 maxlen: 24
185.88.81.0/24 maxlen: 24
185.88.82.0/23 maxlen: 23
185.88.82.0/24 maxlen: 24
185.88.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:e0:c6:2a:2b:59:01:23:94:10:50:9c:50:c2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Jan 2 17:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe6deb54e45ddfb9860d444165e48fbfb7be278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:d4:21:5f:b6:8e:fb:36:fe:e6:38:ed:32:
5f:60:d6:b1:69:90:82:fd:c3:e1:27:7b:69:3f:9e:
32:43:7e:85:4e:cf:c3:37:66:41:67:7d:0d:e8:fc:
da:77:3f:93:4c:aa:fd:18:86:1a:e9:2b:ea:82:5d:
09:b9:29:17:9a:87:e9:37:8e:d2:9a:24:24:2e:e1:
e5:f7:98:f8:f1:4d:c8:50:e2:37:cd:b0:74:c2:50:
4c:c1:b8:d7:bd:a3:c2:58:9d:e4:5f:f6:e6:35:75:
77:88:00:0d:e7:17:a2:26:30:a0:ad:cc:de:a6:19:
e9:4b:4a:ae:44:13:da:4b:ba:71:ce:b0:97:7d:95:
9d:ec:b2:e1:06:f2:f9:32:19:96:1e:7f:65:aa:6e:
41:2d:ae:81:d0:9f:74:09:55:b9:75:e7:a6:58:99:
2c:af:e3:5a:5b:bd:68:25:a7:2b:b4:56:ed:00:3b:
c0:ea:76:a6:5c:15:dc:1c:c0:67:53:cd:f4:40:4f:
0c:39:cc:5d:3d:24:a4:0f:c5:1a:5d:cd:64:37:ca:
b4:67:ab:78:5e:91:88:05:65:b7:f8:72:2d:49:fa:
1f:2a:44:3b:c2:1f:51:91:4d:fa:37:50:b4:8b:d9:
50:6d:ba:4e:0c:6e:5b:51:b5:d1:37:60:26:9a:bc:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:DE:B5:4E:45:DD:FB:98:60:D4:44:16:5E:48:FB:FB:7B:E2:78
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/j-betU5F3fuYYNREFl5I-_t74ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.88.0-95.130.94.255
185.88.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:8d:21:78:32:3a:75:96:0a:6c:1e:a6:51:64:8d:c6:74:2a:
c9:91:b6:7b:0d:11:d0:2e:37:fd:f2:a6:3a:1d:f8:14:5e:aa:
c6:c5:93:b5:a9:c3:df:39:4d:43:79:f3:35:9f:49:87:a1:18:
2f:0f:db:29:72:42:bd:43:66:73:8e:eb:61:b1:89:ab:2b:f4:
23:09:35:79:6e:b9:15:1e:41:0b:60:ad:76:b7:74:d3:da:34:
b3:77:25:61:e3:96:d3:f1:41:36:e4:e4:48:fe:b5:4b:7d:70:
e7:62:62:3c:4e:49:21:eb:ff:29:1f:b7:bd:70:78:f8:bd:3a:
91:0f:07:26:63:b6:6f:db:ba:88:80:02:dc:fe:be:d3:ec:32:
c9:0b:fe:fd:8e:1e:d5:aa:90:8d:bb:e7:8e:12:a7:d0:30:19:
30:4d:14:32:df:bf:76:a6:97:e5:4d:5b:20:62:95:1d:82:9c:
35:5b:d7:98:2a:d5:de:bf:18:3b:5f:bb:5f:7d:48:05:e9:53:
33:b6:b1:6b:81:ed:1b:4f:47:d1:b0:9e:22:f4:ff:91:36:75:
b6:d7:9e:36:89:ba:fd:02:b1:77:3c:45:db:23:6b:40:d5:6f:
22:ad:3e:78:bb:e2:e2:d2:5c:f2:90:88:e5:bf:95:fe:ca:7c:
61:ef:d8:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:37 2025 by rpki-client