Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/_KRug4UjC_BJD-8BnustHPPdTrM.roa
File: _KRug4UjC_BJD-8BnustHPPdTrM.roa (raw, json)
Hash identifier: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=
Subject key identifier: FC:A4:6E:83:85:23:0B:F0:49:0F:EF:01:9E:EB:2D:1C:F3:DD:4E:B3
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 0194252186C5CF0ACAF302DDAB6F66DC474B
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/_KRug4UjC_BJD-8BnustHPPdTrM.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49046
IP address blocks: 95.130.40.0/21 maxlen: 21
95.130.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:86:c5:cf:0a:ca:f3:02:dd:ab:6f:66:dc:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fca46e8385230bf0490fef019eeb2d1cf3dd4eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:14:77:03:3a:25:3a:43:2c:8b:1d:41:8b:
37:ad:fe:ad:1e:af:df:3b:8e:54:38:85:e6:35:31:
d2:cf:8c:bf:6e:ce:aa:61:66:3e:f3:df:c7:d5:a8:
9b:fc:4c:02:91:96:87:25:3d:a3:28:80:3b:91:d4:
5a:7b:35:67:54:40:57:b1:49:ca:e4:a5:1b:76:0b:
26:e4:c7:78:a0:18:86:da:f6:00:6e:ab:be:dd:d5:
29:91:f9:cd:7e:8a:fc:fa:a8:33:ca:c4:3b:a6:02:
94:b7:5c:c0:31:b7:4c:22:24:fb:94:a4:e5:52:47:
39:2e:ad:3e:d4:8d:29:2c:1b:14:d6:9f:4e:21:e6:
c4:ab:cb:a2:d4:b4:27:7d:f4:1c:10:53:2d:2b:b8:
ca:54:6b:3f:fc:28:0f:a5:00:1b:42:ba:85:30:a9:
d6:c7:5a:63:1b:1c:e6:00:7d:18:6a:33:0d:6d:3f:
8e:ea:53:9a:d3:f3:77:ea:71:c2:36:af:b9:84:36:
fa:bb:72:f9:94:e2:4f:c9:47:54:e4:71:59:bf:f1:
93:78:57:ee:b8:b0:ad:49:7e:04:2f:93:f2:16:dc:
3a:75:9f:f6:02:80:1a:a0:b5:04:5f:5c:19:2a:98:
40:71:38:e5:cd:06:cd:c5:39:79:01:1e:dd:a1:e3:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:6E:83:85:23:0B:F0:49:0F:EF:01:9E:EB:2D:1C:F3:DD:4E:B3
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/_KRug4UjC_BJD-8BnustHPPdTrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.40.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:6e:2d:b5:07:1b:eb:d9:ef:de:2a:a3:c8:41:80:48:23:7a:
4a:57:4d:e8:01:67:8a:b0:87:10:1d:59:48:06:1b:20:a5:82:
23:5b:a0:8e:87:de:6a:f1:cd:cd:ef:e2:5c:a8:08:d7:84:40:
3e:4f:01:4e:b9:73:24:ca:19:38:89:23:20:8f:6c:9b:fd:8b:
cc:d6:4e:c0:f7:23:53:db:fa:dd:0b:81:4e:0c:d1:0e:f3:97:
68:e9:ac:a6:cd:fd:64:6b:30:25:ca:39:0a:67:82:1c:e4:dc:
b2:3b:c1:ea:68:c5:25:0c:d6:94:e3:92:9c:ac:ea:be:58:f8:
1e:b4:db:65:cd:26:cc:7e:9c:2d:13:b1:a1:95:cd:59:47:a5:
a9:ae:a7:d5:a6:fc:d5:57:cb:13:27:7e:f5:13:93:17:6a:73:
6c:34:e0:f1:85:e4:89:c9:ea:45:88:9f:5a:47:d1:90:22:b9:
a0:5e:09:21:ae:62:2b:38:57:4a:14:47:70:53:ae:b1:8a:c8:
19:0f:d2:de:06:d9:9b:44:f5:e6:66:93:84:09:ea:d9:29:6a:
98:6f:7c:23:fd:49:df:8d:70:79:03:52:64:c0:04:94:4e:ac:
8f:5d:c8:96:ba:22:80:1f:f0:12:ff:77:8b:ce:f3:a8:f6:fc:
22:18:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:06 2025 by rpki-client