Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa
File: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (raw, json)
Hash identifier: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=
Subject key identifier: 75:66:EC:DC:64:82:93:8D:15:A0:75:23:63:03:9C:9B:2E:DB:F9:99
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 0194258F9B3EECBF562A862FBD4F100EC1A4
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49083
IP address blocks: 95.131.240.0/21 maxlen: 21
185.147.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:3e:ec:bf:56:2a:86:2f:bd:4f:10:0e:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7566ecdc6482938d15a0752363039c9b2edbf999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:22:26:38:5d:3d:f5:b3:d2:1a:17:c0:77:
bd:7e:0f:c1:f3:e8:a1:61:49:ed:e7:63:1f:31:29:
41:7e:3d:9d:b8:2e:1b:da:90:53:2b:0e:9e:51:cd:
65:8b:22:c3:38:21:3e:77:bd:9c:6c:40:d4:f2:93:
57:60:a3:fd:0e:f2:46:38:29:ed:d4:f6:00:fd:96:
f3:1a:47:72:59:b0:8e:a4:98:df:cb:e3:ec:db:ae:
7a:8e:55:d3:96:06:8b:3b:9c:19:21:9d:71:a1:8c:
77:a9:03:e9:9f:36:7f:95:01:b3:cc:19:aa:34:7b:
e3:43:18:bd:43:6f:54:79:80:d8:c7:03:01:1f:00:
fe:e9:9a:71:fe:1b:37:61:1c:96:6d:25:ec:95:8f:
1a:21:c0:35:87:fe:ed:ad:40:7d:bc:7d:81:79:0c:
8d:87:25:0c:d8:d9:b0:52:3b:33:ed:7c:d1:6d:6a:
31:4d:6a:8d:80:b8:2d:1e:8a:6b:01:fd:b0:c1:26:
f9:2f:5d:1c:8e:c5:85:69:f6:e3:4c:1b:90:8e:63:
46:22:da:97:c3:b5:17:49:26:29:5b:b7:e5:58:4d:
29:3f:71:af:c0:10:3a:ab:57:3a:a2:be:6b:f9:a3:
4a:8d:93:28:4f:b8:36:f4:7e:0a:08:1e:81:16:45:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:EC:DC:64:82:93:8D:15:A0:75:23:63:03:9C:9B:2E:DB:F9:99
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.240.0/21
185.147.148.0/22
Signature Algorithm: sha256WithRSAEncryption
28:bb:4b:23:59:89:14:f0:36:3a:51:f3:10:f0:2d:12:37:cc:
23:5f:cc:f5:c5:c1:dd:69:7e:b5:f4:c7:79:2e:bc:88:02:b3:
1c:4e:1a:66:db:21:b0:79:3a:11:4b:ed:9b:51:13:9c:5c:8a:
3d:c0:48:69:18:83:c2:7c:66:cb:18:fa:f3:1b:f4:40:af:d2:
d7:cd:aa:42:36:e5:fd:43:89:0d:ed:6f:19:ea:6c:38:08:83:
40:1c:25:6f:73:f9:bd:e6:54:92:24:b8:ce:5d:5c:bc:01:dd:
37:6a:d8:18:74:0e:74:a3:60:c6:68:81:dd:66:24:99:5a:35:
ea:6d:d7:00:2b:7c:9e:07:8f:01:66:4f:e5:f6:4a:1d:ee:fb:
85:bb:30:56:93:da:cc:0e:8b:66:ab:77:43:95:a3:67:87:58:
cf:e0:5d:1f:48:6f:94:f4:58:1c:c6:ff:9d:7f:18:7b:8c:53:
b2:90:ad:78:38:8c:dc:6a:8f:18:c1:4f:fd:d5:52:d6:94:a3:
b9:2e:0b:dc:8d:43:00:df:f6:e6:53:79:a1:63:3a:d8:99:57:
8e:2f:db:46:f8:f6:43:2d:08:60:7f:66:11:85:35:d9:87:8f:
28:68:b5:4d:a9:93:94:3c:8c:35:cd:33:a4:ed:dd:70:19:9e:
50:45:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:11 2025 by rpki-client