Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa
File: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (raw, json)
Hash identifier: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=
Subject key identifier: E7:06:7E:B8:1C:D0:DB:D9:8C:FD:07:F3:0D:C7:0C:36:AA:9D:35:8A
Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial: 01941FFA12F99A8CFD40BB0585D4F7933FB6
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215700
IP address blocks: 95.128.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:12:f9:9a:8c:fd:40:bb:05:85:d4:f7:93:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7067eb81cd0dbd98cfd07f30dc70c36aa9d358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:23:14:55:45:ac:7c:e1:0f:9f:a0:5f:b1:
69:54:e8:b1:34:42:a0:d2:3e:b5:28:35:7a:cf:fe:
04:4d:27:13:43:53:58:9b:46:87:69:b8:f1:c4:54:
45:a4:ba:10:76:ef:81:01:52:35:e8:13:8c:75:a6:
9f:38:e6:c4:12:9f:c1:d6:ff:6d:2c:f0:97:94:fb:
1e:a2:96:51:f7:79:88:c1:2d:de:70:74:07:7c:27:
89:bd:87:0e:b2:2e:b2:c9:c3:3e:9a:46:34:05:f1:
94:a9:b5:c1:97:e7:82:6b:a3:b5:df:35:81:8d:24:
17:2b:a9:b3:3b:d4:f5:fd:44:30:0b:6e:b8:82:90:
21:79:91:e3:be:e3:65:49:97:3a:fe:94:59:d8:1a:
e3:5a:b1:10:d0:88:27:e5:51:38:20:6b:6b:b3:c8:
d2:0a:51:5f:9d:d8:66:e6:ee:c0:5f:56:42:df:c1:
54:74:a3:cd:3a:d3:f1:99:77:10:73:cd:84:bc:35:
a5:35:b4:87:97:ec:3a:d2:40:80:41:0a:4b:78:b0:
d7:14:f7:c7:1a:b1:04:f5:ae:06:29:50:6f:81:23:
e7:47:11:5b:a6:ad:ec:16:d0:b0:e8:e0:15:4b:36:
1d:89:70:24:94:3a:eb:bd:18:07:81:8b:a6:1a:fa:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:7E:B8:1C:D0:DB:D9:8C:FD:07:F3:0D:C7:0C:36:AA:9D:35:8A
X509v3 Authority Key Identifier:
keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
64:88:88:60:04:80:b5:c6:ad:20:09:17:aa:d7:21:90:f2:e7:
03:4b:d2:5c:0b:30:74:23:7e:e1:1f:81:20:b8:be:27:e0:0a:
a7:a9:31:e7:c7:f1:f9:46:69:6c:ad:f7:09:6d:23:1d:2e:53:
5a:cc:bd:3b:43:a3:f1:61:a1:82:6c:52:e2:0b:19:29:1f:7d:
72:41:23:43:c8:a3:0d:ab:21:15:14:23:12:3e:f4:8f:6d:3d:
3e:bb:bb:8c:2f:59:cb:64:2c:66:46:82:ef:7c:95:fe:de:b0:
72:bc:ec:0f:c0:13:80:d6:a7:bb:3d:5c:df:2f:de:93:ea:a8:
94:1c:74:9a:c1:d7:0d:e5:58:e5:d3:a7:f7:f1:31:88:63:13:
a7:5b:e1:62:ad:ff:ac:c8:37:c4:85:77:9b:4f:a8:1d:85:f3:
ce:dc:bf:ca:ae:1e:42:df:e3:6b:8c:12:23:62:68:a9:6b:6c:
eb:61:1f:c7:8d:c0:27:7f:47:6d:a9:95:cc:31:63:20:b7:81:
5c:6a:91:65:b4:00:4e:32:9b:5f:e8:d5:8e:b9:f7:1c:06:ae:
d2:fb:70:67:9c:c7:03:bb:a6:0b:57:71:5f:41:f9:11:37:c9:
00:91:f8:0e:b1:04:5d:84:9e:dc:47:f4:64:35:ec:76:6e:aa:
11:ba:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:10 2025 by rpki-client