Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/lfJUEj9OpKtkyjj6xaEeSMukOrA.roa
File: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (raw, json)
Hash identifier: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=
Subject key identifier: 95:F2:54:12:3F:4E:A4:AB:64:CA:38:FA:C5:A1:1E:48:CB:A4:3A:B0
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 019420D6365D9B54EA3939D4CA496CB333F4
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/lfJUEj9OpKtkyjj6xaEeSMukOrA.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48757
IP address blocks: 91.215.172.0/22 maxlen: 22
95.128.176.0/22 maxlen: 22
95.128.180.0/22 maxlen: 22
95.128.180.0/24 maxlen: 24
95.128.181.0/24 maxlen: 24
95.128.182.0/24 maxlen: 24
95.128.183.0/24 maxlen: 24
185.17.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:36:5d:9b:54:ea:39:39:d4:ca:49:6c:b3:33:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95f254123f4ea4ab64ca38fac5a11e48cba43ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:52:1b:58:f8:9c:6d:8c:d9:dd:03:5d:91:
f7:09:cf:e1:67:6a:96:31:8b:11:02:60:dc:5e:a3:
35:c9:24:72:ef:58:32:7c:1e:eb:16:72:d9:f8:31:
ff:ed:98:59:a4:b3:cf:3b:e0:ca:f5:f0:f7:93:b7:
5a:0f:87:cd:ad:2d:8b:81:b0:46:eb:cd:57:4b:b6:
77:e9:48:3b:a0:4a:81:7a:1d:e4:58:6e:13:71:83:
a4:33:ee:ef:b3:b5:ab:70:ce:57:7f:29:26:77:d1:
a3:77:98:1f:74:ec:ed:dc:81:78:4c:db:48:a7:5b:
05:71:ea:6c:b6:cd:be:99:fa:51:9f:ef:f5:52:f8:
ec:e7:0c:30:a4:3b:eb:3d:9d:54:97:19:02:bb:25:
fe:5b:6b:37:e1:d8:90:58:bf:a8:84:74:3f:9b:0a:
f4:62:f9:d8:56:5f:98:0a:01:80:a4:b5:81:80:69:
f3:9b:64:01:65:de:38:44:b6:52:92:07:88:0f:ee:
f2:8b:96:44:ff:09:67:eb:86:c4:41:ad:68:e4:ff:
98:7f:0d:93:b2:39:ef:63:b8:d5:56:5c:75:8d:c7:
e0:65:43:04:22:4c:e3:0d:f5:31:bb:c7:1d:a7:c9:
9e:97:aa:17:58:a4:9f:2b:a6:02:23:ba:5c:0a:97:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F2:54:12:3F:4E:A4:AB:64:CA:38:FA:C5:A1:1E:48:CB:A4:3A:B0
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/lfJUEj9OpKtkyjj6xaEeSMukOrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.172.0/22
95.128.176.0/21
185.17.140.0/22
Signature Algorithm: sha256WithRSAEncryption
14:49:68:c4:4d:6a:f6:5d:27:9f:13:d5:6e:c3:9a:20:a2:f3:
0b:4a:88:4d:b4:a7:4c:4e:5e:9b:f1:53:5e:1b:25:1f:11:8c:
27:41:5f:b1:fb:01:f9:bd:4e:59:67:05:b8:70:92:50:01:13:
fe:15:c7:fc:59:00:a0:c3:04:a9:e9:8a:7c:b3:7c:75:bb:7e:
4b:0e:ba:6a:7e:13:9c:a3:15:f3:c0:88:c3:ab:cd:75:8b:a5:
19:26:06:1d:c3:99:42:27:d8:1b:02:56:2c:e5:95:66:1d:be:
f9:3d:97:8d:f8:e4:26:97:e6:68:c9:74:f8:6a:23:8b:fe:d2:
0a:e2:97:24:17:2f:26:0e:f9:b5:0b:77:21:80:43:bc:e0:ec:
0d:75:fb:27:0f:6d:05:0c:87:8d:d2:13:28:29:94:6d:99:8a:
5a:fa:95:6a:df:30:0a:18:ef:d6:d4:e3:2d:e0:e3:5a:c1:c3:
13:cc:ec:14:e4:aa:aa:87:91:78:82:3a:cc:18:79:26:39:7b:
32:a2:05:66:bb:32:c6:3e:79:a1:e0:83:ed:db:45:26:9c:b1:
93:d5:40:3f:cc:fb:41:a8:0e:e2:1e:c1:65:15:c9:d1:45:ef:
24:b8:1e:78:e4:03:16:92:78:ba:83:93:f8:b5:fc:64:ab:00:
4c:18:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:38 2025 by rpki-client