Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa
File: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (raw, json)
Hash identifier: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=
Subject key identifier: CD:50:F7:49:D0:9F:40:12:41:39:A8:16:33:91:21:7E:5D:70:3B:F7
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 019425FDC1A699E9FF1A89A4F92BF9654E2A
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35709
IP address blocks: 95.214.16.0/24 maxlen: 24
95.214.17.0/24 maxlen: 24
95.214.18.0/24 maxlen: 24
95.214.19.0/24 maxlen: 24
2a09:d380::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c1:a6:99:e9:ff:1a:89:a4:f9:2b:f9:65:4e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd50f749d09f40124139a8163391217e5d703bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:92:34:22:b1:51:d4:06:87:e0:d6:39:a2:
b6:83:b7:98:cc:9b:13:fb:85:47:52:e5:5f:08:80:
be:49:fc:6b:31:ce:13:cf:60:a1:b0:1b:3a:db:4e:
f8:13:ab:96:45:d7:aa:ad:fb:35:64:6a:d0:bf:15:
29:66:d9:d8:a3:c4:73:73:fb:0b:e2:39:78:49:8c:
5c:b1:c1:8e:1b:77:d2:f7:54:fc:bf:66:b5:8f:fc:
c6:ab:64:ba:1c:58:5a:30:2f:df:6b:c4:7f:2a:66:
56:b8:09:6b:6f:1d:a9:30:c6:d1:17:86:76:4f:72:
f4:df:93:ff:70:25:be:92:94:6e:cf:45:18:21:20:
34:2d:d1:08:da:dd:2f:3e:cb:a0:b8:5c:27:87:ab:
a9:4e:dc:9e:d4:4b:eb:6d:b1:be:f1:ad:eb:67:69:
fe:77:b0:d5:54:12:93:6a:64:67:16:09:37:e6:36:
a4:ca:13:45:15:65:b7:3f:6c:7a:38:59:3c:ef:16:
f0:00:48:6a:62:bd:9d:c0:76:7b:f2:33:c6:50:7e:
2b:99:ae:0c:46:a6:6b:1d:63:7f:04:02:c7:cb:42:
ed:27:82:20:6d:b2:cc:ca:c1:c1:64:97:db:09:56:
b6:65:39:6d:5d:a1:11:79:e2:ae:57:be:02:08:f5:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:F7:49:D0:9F:40:12:41:39:A8:16:33:91:21:7E:5D:70:3B:F7
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.16.0/22
IPv6:
2a09:d380::/30
Signature Algorithm: sha256WithRSAEncryption
85:ef:4e:e1:b0:3e:6c:b1:38:64:38:f3:c2:f0:d5:0c:b6:9d:
32:e5:dc:30:05:7a:5a:a5:9c:3b:2b:0b:f2:37:bb:a7:c6:72:
51:00:32:c7:a6:b7:f4:70:28:17:3d:e2:9d:86:ab:c0:ed:ad:
a9:27:e4:39:00:a2:4a:c5:24:ef:25:dd:64:f0:a6:aa:56:93:
fd:2b:ae:40:61:2f:c4:4a:11:cf:62:9e:a5:e5:8c:4b:0a:13:
5e:a5:4b:73:8e:e3:d8:a9:6f:83:6e:01:4d:64:7b:7b:54:34:
5c:7a:a9:bd:2c:3c:b0:88:49:73:3d:8b:a5:37:6f:d2:f4:fc:
1d:1c:c0:b1:8a:85:17:9d:99:c8:dc:82:d9:08:1a:d8:d7:d9:
c8:d7:26:43:85:af:c7:9d:5d:cd:64:90:0c:c8:64:fb:fc:27:
47:b2:a4:60:8c:d5:be:04:22:3f:63:c7:b2:fa:ab:56:03:6a:
1d:9c:f0:69:7f:f5:24:f1:34:61:d6:ac:8d:53:2a:b4:5a:e1:
af:93:9e:30:15:9b:3e:d4:ed:10:4f:aa:69:7b:98:c4:ae:d1:
a9:10:d8:49:df:3c:f2:f9:da:dd:84:91:1c:a3:f4:19:2e:80:
60:f1:57:45:35:63:25:5d:6c:32:0f:d0:b6:e5:79:f3:3d:77:
4b:a7:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:50 2025 by rpki-client