Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/wrK5q_yhp6CSYsOOeb2tBzjXlME.roa
File: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (raw, json)
Hash identifier: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=
Subject key identifier: C2:B2:B9:AB:FC:A1:A7:A0:92:62:C3:8E:79:BD:AD:07:38:D7:94:C1
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 019422FBFC9B62975451A08F2579C091A9A5
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/wrK5q_yhp6CSYsOOeb2tBzjXlME.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198138
IP address blocks: 95.130.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fc:9b:62:97:54:51:a0:8f:25:79:c0:91:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2b2b9abfca1a7a09262c38e79bdad0738d794c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:10:d1:a6:76:84:fb:df:8a:de:ac:3a:79:
35:69:3e:ff:8b:62:cf:f5:88:7a:d2:ed:5a:7b:4f:
ec:32:ad:95:16:ae:76:bd:cd:ba:7b:9e:f9:a7:97:
73:d0:f5:66:1b:d2:56:a2:b5:e3:b7:53:5a:9e:db:
39:cb:74:2b:15:8e:68:cf:06:2c:fe:67:9c:7b:d7:
cb:11:88:f9:a5:05:0d:f8:a7:37:63:e0:63:75:c7:
b1:e4:4b:41:60:a5:3a:a0:e8:2a:a0:c4:06:fe:27:
75:c0:8f:30:96:38:71:e6:81:4b:50:04:68:38:e8:
3b:5c:64:1b:c2:13:f5:5b:fa:0d:f5:65:a3:be:01:
c5:fb:09:25:24:b1:ab:55:41:89:39:9b:17:14:25:
92:0d:27:12:dc:ea:e9:85:4c:72:22:ca:e7:6b:3f:
b9:d6:2a:29:32:68:40:8c:28:02:b8:ab:5a:8f:08:
4d:61:65:8f:3d:0c:d5:1c:1b:0e:95:4d:f8:df:e3:
01:9b:c1:c4:9c:17:1c:39:8e:13:8c:f2:12:1a:52:
10:15:1c:9a:b7:71:48:db:f3:24:37:02:d0:d1:c5:
11:69:b8:00:63:0b:d7:16:ce:af:62:33:09:b8:9d:
56:2c:9c:89:8a:d0:2b:95:b5:5b:87:fc:89:0a:16:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B2:B9:AB:FC:A1:A7:A0:92:62:C3:8E:79:BD:AD:07:38:D7:94:C1
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/wrK5q_yhp6CSYsOOeb2tBzjXlME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.39.0/24
Signature Algorithm: sha256WithRSAEncryption
98:80:0f:02:3c:dc:cc:e3:18:26:f5:be:ed:75:52:53:38:2d:
ce:d9:68:e3:41:3f:9e:4d:be:dd:77:8d:15:93:25:6b:70:dd:
41:be:6d:55:07:17:5d:00:22:cb:7a:d1:92:cf:5e:c9:1a:0d:
a5:fa:c9:fd:55:53:26:a8:9e:24:0b:36:33:fd:03:7e:33:74:
6d:f5:7c:9e:de:90:36:63:0f:ef:e3:8d:b2:64:7a:fe:55:d4:
3e:bf:eb:35:d9:66:87:01:bc:67:ce:37:9d:aa:1f:37:72:b7:
4b:b5:46:3c:97:4a:56:03:1a:96:cf:0a:aa:44:f6:02:ba:10:
62:fa:ae:7a:56:c9:70:d0:5e:15:ed:33:2a:fb:99:18:99:b2:
02:0c:b8:04:91:4b:4f:95:04:ed:84:23:5f:20:9c:d5:3c:9a:
65:a8:fa:91:c2:30:b6:60:84:3c:09:5b:75:18:e6:77:4d:b5:
c6:35:55:fb:6a:1a:c4:58:15:19:f0:45:8c:06:29:fd:29:43:
06:22:58:e5:f6:e0:b8:54:2b:32:54:d8:a7:45:8c:40:e7:9b:
ca:f0:eb:33:cd:4a:c7:d3:21:54:29:73:05:a2:d6:c1:7b:04:
df:26:65:c0:43:89:55:08:af:1a:0c:83:4c:80:02:c4:26:db:
f2:df:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:08 2025 by rpki-client