Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/Myd15gMrCliz6UcSUIWdQJsW6Z0.roa
File: Myd15gMrCliz6UcSUIWdQJsW6Z0.roa (raw, json)
Hash identifier: KNSAanuPg0NI3AJP/E/C6OAIqMKQEnFg1+ec0Jx1Kuo=
Subject key identifier: 33:27:75:E6:03:2B:0A:58:B3:E9:47:12:50:85:9D:40:9B:16:E9:9D
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019424B281B871BB68D8D1BC33D1399A8F8B
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/Myd15gMrCliz6UcSUIWdQJsW6Z0.roa
Signing time: Thu 02 Jan 2025 01:47:45 +0000
ROA not before: Thu 02 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 95.128.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:81:b8:71:bb:68:d8:d1:bc:33:d1:39:9a:8f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=332775e6032b0a58b3e9471250859d409b16e99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:c5:d6:78:6a:67:e7:38:54:5d:49:f7:57:
35:a0:ee:89:41:8d:28:aa:aa:09:6e:d5:99:59:fd:
03:55:e2:b7:ae:7b:82:5d:08:1f:88:cb:6f:01:1a:
4f:20:cd:ed:18:13:13:ad:b8:77:86:69:2b:34:d4:
f2:d1:d2:be:5b:0a:08:c5:53:70:c7:74:c0:3f:47:
af:4a:4f:8f:6a:08:11:40:97:d4:0d:ba:f5:70:9d:
78:b3:0c:3a:53:85:2a:33:6d:ee:81:98:1d:ad:25:
51:3a:15:58:19:cb:6e:49:fc:b2:fd:78:52:45:42:
e6:7c:91:9a:41:30:be:d8:3a:a7:1c:95:51:10:f4:
e6:87:c2:da:41:ca:65:ca:84:a8:34:90:93:30:d4:
6e:bb:7d:f0:02:c3:67:75:b8:29:82:08:56:9b:3a:
0d:35:0e:9f:ca:51:a4:6a:d1:14:48:97:f4:e7:4a:
5b:f4:c2:5b:f0:ee:66:96:3e:27:2d:0d:e4:50:9b:
ca:b8:e1:1b:13:32:d7:fc:a1:8f:96:21:df:93:ea:
2f:94:2b:ef:57:f3:eb:fe:b0:72:63:7c:68:15:1b:
b1:a2:6e:4a:5b:c9:5b:20:0e:fd:7f:a5:8c:9e:a1:
0a:c1:12:43:95:92:b0:46:56:30:70:1c:71:42:a6:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:75:E6:03:2B:0A:58:B3:E9:47:12:50:85:9D:40:9B:16:E9:9D
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/Myd15gMrCliz6UcSUIWdQJsW6Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.198.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f7:37:f8:b9:02:3b:88:43:58:80:b0:5b:21:7f:dc:3f:28:
d8:69:55:e0:0b:31:6d:ce:2e:b7:bd:8f:c4:c2:d7:42:de:e7:
3b:b7:ae:e7:5f:20:0a:3c:dc:60:df:5f:64:96:11:ce:ab:fc:
b7:48:26:3d:98:22:9f:7d:a4:16:5e:32:26:1b:11:af:b7:87:
bd:e3:a0:3d:52:6c:b1:ed:7b:f1:d2:ed:ca:d6:ac:83:ae:ba:
e7:d1:2b:e6:b5:a3:e2:ea:ac:46:b1:6d:f8:2f:45:82:20:53:
e3:c2:ea:e9:b8:6c:a4:bd:be:50:9b:83:0d:11:72:32:53:e8:
17:67:16:63:87:c9:f9:29:c1:09:6e:3f:18:50:9b:47:41:75:
e8:9e:24:85:dc:cb:32:e9:e6:a7:f9:0c:08:66:ab:02:25:7c:
52:27:c8:57:5a:3b:aa:ba:ff:6d:80:5e:80:17:b0:0e:2e:36:
09:64:6f:83:2e:86:df:5a:9b:ff:0e:c1:0d:db:06:fb:40:be:
d9:5f:c8:0e:70:b7:03:81:02:cb:35:45:c0:7b:c3:b4:f6:0e:
73:d2:17:b5:60:fe:d4:fa:76:99:52:80:1d:36:53:20:7d:ee:
26:da:05:2f:be:dc:b1:61:b2:49:cc:37:0d:ec:0f:55:28:da:
ab:b1:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:21:58 2025 by rpki-client