Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/CIPFq7e9mRJrTf6hOqMahKTGq0g.roa
File: CIPFq7e9mRJrTf6hOqMahKTGq0g.roa (raw, json)
Hash identifier: r/c+deZGPsqa7heZ0tGAqnaJp68TNpPwYqzqHWCTViU=
Subject key identifier: 08:83:C5:AB:B7:BD:99:12:6B:4D:FE:A1:3A:A3:1A:84:A4:C6:AB:48
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B88EAE19EBD911E284ADB870A91807365
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/CIPFq7e9mRJrTf6hOqMahKTGq0g.roa
Signing time: Wed 01 Nov 2023 03:26:16 +0000
ROA not before: Wed 01 Nov 2023 03:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 95.214.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:ea:e1:9e:bd:91:1e:28:4a:db:87:0a:91:80:73:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 1 03:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0883c5abb7bd99126b4dfea13aa31a84a4c6ab48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:a2:d8:e6:6f:78:f1:62:eb:6e:f8:55:1d:
4d:b5:4d:89:0a:26:d5:7d:8e:b3:bd:26:58:d4:b0:
7c:ba:62:82:bf:35:79:d6:64:67:12:43:ce:55:5a:
e2:cc:05:96:35:fe:e9:ac:eb:31:8c:aa:76:33:fc:
f1:46:15:bf:fe:2a:aa:1b:c5:fe:4c:41:ed:2e:b0:
4d:4c:13:e2:7e:55:34:51:19:5e:09:3e:ad:1f:97:
79:25:0f:4d:59:f9:dd:61:23:17:67:fa:dc:a3:b0:
8f:30:a0:33:f4:2f:06:3f:5d:c1:2b:67:bb:38:9b:
1a:3c:53:12:1f:37:bb:0e:44:33:61:f4:a0:13:5f:
f8:15:36:78:de:7e:2c:00:47:68:42:46:80:1d:96:
8d:1a:7e:10:b9:6a:42:9b:ec:85:5b:be:81:0c:da:
f1:08:c6:a3:a3:2a:90:0d:a1:e6:25:6c:e3:26:a9:
54:ee:16:3f:01:78:c1:ca:6f:a9:14:21:87:c9:17:
f2:40:aa:f6:2a:ec:30:ba:0b:08:c1:b5:49:32:46:
2d:0e:7b:59:75:c1:66:bb:cf:d2:65:ca:5b:b3:8a:
0f:7b:33:ed:be:77:8c:9f:b8:b8:89:42:c2:49:b9:
21:dd:dc:e9:f7:7f:da:2f:49:20:43:fa:88:31:f3:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:C5:AB:B7:BD:99:12:6B:4D:FE:A1:3A:A3:1A:84:A4:C6:AB:48
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/CIPFq7e9mRJrTf6hOqMahKTGq0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
36:86:71:79:cd:01:8d:8d:a4:74:19:25:72:89:c1:0b:68:2e:
5e:a0:c8:76:58:94:08:e4:ab:0f:a2:6d:53:90:0c:ae:d5:2b:
0b:07:aa:e3:6c:52:7a:58:02:c9:1f:83:10:a3:01:7e:82:46:
12:8c:6f:fd:55:e8:d9:32:20:32:a7:f0:0e:e5:a2:5d:ff:bd:
8b:b8:3c:32:12:e4:70:97:bb:bd:e7:50:58:89:5c:e7:5a:77:
2a:ff:7a:b1:e1:98:97:6d:7f:b6:cb:df:6a:90:7a:82:f1:9c:
89:d7:4d:87:b1:8a:f0:58:52:88:d2:3b:cd:78:86:83:ea:2f:
f1:ef:3a:75:14:52:df:e6:ba:df:ec:09:18:c9:18:ca:4b:ae:
bb:77:50:a1:9f:90:d2:9e:e9:12:39:78:04:b5:97:bf:a1:00:
ae:f7:17:1a:f7:05:82:02:58:08:4e:27:93:b2:3e:9c:1e:91:
21:2c:72:54:10:40:5b:d6:2d:a2:36:8f:95:4c:a0:17:7b:84:
04:7e:4b:a9:11:04:31:fa:ab:ab:99:10:f9:b4:f1:b7:e6:13:
2c:68:16:20:ac:29:1b:d4:cb:e0:7c:bd:fb:f0:9d:b5:a5:3b:
02:f4:be:3a:89:3f:36:fc:d4:8a:8d:64:01:62:a7:d1:65:ac:
05:b0:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:28 2025 by rpki-client