Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/NTRuSteXMEXLvayahODmi046fpw.roa
File: NTRuSteXMEXLvayahODmi046fpw.roa (raw, json)
Hash identifier: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=
Subject key identifier: 35:34:6E:4A:D7:97:30:45:CB:BD:AC:9A:84:E0:E6:8B:4E:3A:7E:9C
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 0194258EF430EB6AEC5D8737FA7C8789CFD6
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/NTRuSteXMEXLvayahODmi046fpw.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 95.128.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f4:30:eb:6a:ec:5d:87:37:fa:7c:87:89:cf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35346e4ad7973045cbbdac9a84e0e68b4e3a7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:c2:b9:49:19:7e:e6:8e:b9:e6:97:ab:ac:
70:6d:60:4d:88:7a:8c:7d:09:a8:3f:ce:05:54:65:
bd:16:f7:f7:f2:d2:2f:66:62:b7:4b:4a:a1:7d:be:
e6:40:d0:ee:6e:37:4e:15:ce:da:cb:7f:ff:8c:2c:
e5:90:9e:09:b8:55:62:fe:8a:39:bd:32:12:24:c4:
db:5e:c3:d8:f1:89:8c:ee:02:f7:85:90:37:1c:ae:
a3:1a:b9:a9:71:53:bb:82:24:f9:ac:f0:cb:38:00:
b7:cb:85:cc:17:1b:ba:cb:82:5a:f3:9a:f1:f4:7e:
b4:15:fa:24:94:08:f2:c5:34:f3:61:02:d2:f3:c6:
e4:e5:7a:d8:6c:c8:e0:38:db:8d:27:9c:91:a2:e2:
d2:97:5d:9b:7b:e0:36:ae:e8:0a:2f:41:54:fa:41:
6c:3e:9e:fc:8a:a0:2c:b4:c7:fd:b8:56:3c:ed:8a:
05:d2:12:02:4e:21:05:88:c3:f5:69:c3:6d:4f:15:
b9:ad:81:12:b2:12:a8:d2:45:b7:34:3c:d2:54:28:
36:13:07:51:5c:86:84:05:b2:72:15:62:3e:c1:ac:
8e:a4:86:db:85:d5:9d:09:3f:c5:3a:a6:a5:85:2a:
30:58:3f:52:26:b1:4e:09:47:6e:a4:e5:77:5c:8c:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:6E:4A:D7:97:30:45:CB:BD:AC:9A:84:E0:E6:8B:4E:3A:7E:9C
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/NTRuSteXMEXLvayahODmi046fpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.193.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8c:98:59:ce:97:07:8e:c4:26:67:3d:3c:c7:72:12:9f:e8:
a8:a1:26:8b:ec:74:70:bc:5d:f9:50:0e:f9:bf:22:9e:e2:90:
aa:c3:4f:93:92:5d:db:ac:2a:65:52:24:1d:fe:fb:77:30:99:
ae:28:1f:4f:0e:2e:a7:f0:af:40:c2:f1:0b:45:8b:1a:44:9a:
8a:29:65:95:58:b6:81:a8:62:47:10:9d:3b:e5:fd:30:ab:0c:
2f:af:db:f3:16:70:06:12:a9:b6:98:22:d2:f3:f6:f8:74:e1:
1c:43:84:d9:e1:aa:ea:7b:cb:cf:ee:bf:db:79:9e:a3:ae:5f:
60:b3:3b:52:a5:80:d3:27:43:24:1f:16:9d:56:47:a1:78:b4:
fb:6a:df:1e:1e:82:6e:74:a2:24:4d:01:7c:16:fc:0e:76:b4:
ed:46:7f:2a:3c:8c:db:eb:94:a2:7e:01:a2:79:0a:27:bb:e5:
2b:44:40:b0:db:4f:65:d1:cc:ae:cf:68:d1:3a:7f:f8:16:f8:
e1:3b:10:cf:64:3f:6d:97:44:c1:e8:de:60:cf:90:49:26:0b:
f1:c3:77:3c:c0:54:75:44:94:c9:16:68:23:fd:c1:9f:77:fb:
61:b6:a8:fb:f2:8e:ae:a0:39:f4:8d:a2:20:7b:6c:d2:70:67:
2d:b1:b1:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljvQw62rsXYc3+nyHic/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1
ZDRmOTIwHhcNMjUwMTAyMDU0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM0NmU0YWQ3OTczMDQ1Y2JiZGFjOWE4NGUwZTY4YjRlM2E3ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/CuUkZfuaOueaXq6xwbWBNiHqM
fQmoP84FVGW9Fvf38tIvZmK3S0qhfb7mQNDubjdOFc7ay3//jCzlkJ4JuFVi/oo5
vTISJMTbXsPY8YmM7gL3hZA3HK6jGrmpcVO7giT5rPDLOAC3y4XMFxu6y4Ja85rx
9H60FfoklAjyxTTzYQLS88bk5XrYbMjgONuNJ5yRouLSl12be+A2rugKL0FU+kFs
Pp78iqAstMf9uFY87YoF0hICTiEFiMP1acNtTxW5rYESshKo0kW3NDzSVCg2EwdR
XIaEBbJyFWI+wayOpIbbhdWdCT/FOqalhSowWD9SJrFOCUdupOV3XIxPHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDU0bkrXlzBFy72smoTg5otOOn6cMB8GA1UdIwQY
MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt
ODU4YzZmODgyOWViLzEvTlRSdVN0ZVhNRVhMdmF5YWhPRG1pMDQ2ZnB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi
LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DBMA0G
CSqGSIb3DQEBCwUAA4IBAQCAjJhZzpcHjsQmZz08x3ISn+iooSaL7HRwvF35UA75
vyKe4pCqw0+Tkl3brCplUiQd/vt3MJmuKB9PDi6n8K9AwvELRYsaRJqKKWWVWLaB
qGJHEJ075f0wqwwvr9vzFnAGEqm2mCLS8/b4dOEcQ4TZ4arqe8vP7r/beZ6jrl9g
sztSpYDTJ0MkHxadVkeheLT7at8eHoJudKIkTQF8FvwOdrTtRn8qPIzb65SifgGi
eQonu+UrRECw209l0cyuz2jROn/4FvjhOxDPZD9tl0TB6N5gz5BJJgvxw3c8wFR1
RJTJFmgj/cGfd/thtqj78o6uoDn0jaIge2zScGctsbGt
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:21 2025 by rpki-client