Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/rs3gWt450Dc5VAdX-LPh4FxzPfI.roa
File: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (raw, json)
Hash identifier: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=
Subject key identifier: AE:CD:E0:5A:DE:39:D0:37:39:54:07:57:F8:B3:E1:E0:5C:73:3D:F2
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 0194228E17A6AA1AB19797949A8506AF9959
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/rs3gWt450Dc5VAdX-LPh4FxzPfI.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215326
IP address blocks: 95.87.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:17:a6:aa:1a:b1:97:97:94:9a:85:06:af:99:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aecde05ade39d03739540757f8b3e1e05c733df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:6f:ca:f7:03:50:8d:59:2d:ba:88:b3:4f:
bf:e3:09:43:39:6b:55:7d:f9:dc:31:ed:f8:f4:b6:
98:5a:16:dd:27:bd:45:fe:c1:c6:14:48:d2:89:2d:
5a:5d:b8:a1:15:97:a8:d6:18:83:5d:36:1d:ef:ba:
40:27:9e:d5:a0:a3:07:88:7d:2b:e7:fa:8d:0c:28:
64:7a:b8:db:63:e1:46:14:66:08:45:71:ba:62:39:
54:37:76:97:2e:3f:08:a4:f4:0e:51:64:40:18:76:
53:f3:f3:5f:eb:b2:77:81:03:a3:4e:fb:14:66:d7:
aa:dc:f4:b1:0b:34:c3:e8:f9:1e:bc:6a:56:4c:a1:
ec:0f:11:81:09:9d:80:fe:15:44:f6:47:9e:60:ca:
88:a5:c1:5d:47:63:3d:39:97:f5:06:ae:e8:e3:71:
bd:c6:66:af:ab:56:87:df:f5:e3:60:95:38:86:ed:
dd:02:1f:a5:d8:cc:5b:24:c9:d3:06:c1:59:65:a4:
ed:97:cd:7c:bc:44:e4:51:d6:9a:30:ce:e7:b0:20:
fe:f3:26:59:d1:e2:ad:b4:dd:49:f8:7c:f2:d0:91:
a4:b3:6c:91:08:c3:12:b5:00:78:54:d0:1c:e8:44:
94:64:a6:60:51:62:56:1e:df:a0:c9:13:f5:b8:de:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:E0:5A:DE:39:D0:37:39:54:07:57:F8:B3:E1:E0:5C:73:3D:F2
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/rs3gWt450Dc5VAdX-LPh4FxzPfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.90.0/23
Signature Algorithm: sha256WithRSAEncryption
37:8d:46:17:64:0e:5c:0c:53:2e:b7:4b:cb:d8:16:09:eb:10:
c3:fe:1a:52:f6:7a:8f:40:99:75:b5:90:ad:9d:f4:3b:b2:75:
e1:4c:25:e8:95:fb:31:76:0a:06:db:f9:76:36:f7:0a:10:f8:
8f:07:74:39:80:8a:86:4f:2a:33:ac:0a:a5:aa:6a:4a:d0:2b:
1e:d1:93:dd:a6:8c:f6:dd:a8:87:fd:8b:46:db:e5:d2:85:65:
e4:cf:a7:68:7d:da:56:5c:b6:17:62:20:c1:b5:5b:fd:e4:61:
60:77:5e:7c:b2:04:b8:af:01:d3:04:c7:59:1d:98:b0:73:04:
90:91:2b:7e:1a:8c:47:d7:55:49:18:b1:18:db:2e:3e:ed:63:
d0:10:c1:66:20:30:40:ed:74:06:34:6c:19:4f:c9:4d:6a:b4:
30:5e:c1:b4:45:87:51:01:f7:08:33:3c:09:c0:21:a6:6d:74:
59:9e:0e:01:18:46:ea:4d:8d:2d:df:32:53:2d:78:dc:0c:8a:
a2:ef:a5:79:17:e2:f0:d2:38:9c:94:18:54:ab:53:6f:d2:74:
2a:fc:d7:e0:86:75:2a:9e:8b:5a:47:62:94:3a:19:0d:31:4d:
90:2d:fe:79:1e:be:7f:c9:5f:20:f8:3c:a7:be:a2:42:d8:df:
1a:b1:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:31 2025 by rpki-client