Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa
File: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (raw, json)
Hash identifier: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=
Subject key identifier: 4C:F2:E6:56:1C:04:C3:A8:E0:AD:D3:2D:52:E8:66:CF:FD:1D:05:BA
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 019420D66403F4A7900C175C35D9AF2E51C4
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216287
IP address blocks: 95.130.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:64:03:f4:a7:90:0c:17:5c:35:d9:af:2e:51:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cf2e6561c04c3a8e0add32d52e866cffd1d05ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:45:92:bc:1e:45:87:8e:e1:b1:2f:c5:40:
f1:86:f8:c0:1a:98:b3:76:87:14:af:25:ee:4f:78:
22:0f:30:55:93:be:d9:61:f4:b7:9c:19:df:94:6b:
ae:3a:e3:94:5a:59:4a:e9:6d:ee:44:ab:b9:95:27:
19:b6:10:a2:1d:40:82:f1:fd:d9:df:fb:a7:d8:1f:
11:40:27:5b:52:9c:95:be:38:15:d5:1e:01:bf:d3:
a7:79:f1:e7:4b:dd:58:6e:54:a8:ae:e7:6f:70:cc:
3c:94:c8:e4:9f:1c:12:f8:71:92:05:99:eb:0a:a1:
dc:01:92:3b:3a:5b:08:aa:cb:71:9a:6e:0d:e6:66:
90:93:db:cd:e4:fe:3e:69:6e:f2:6f:b0:ed:e2:43:
4b:07:f0:21:25:42:12:d7:29:96:3d:be:46:86:5c:
eb:3d:88:af:0b:b0:a4:19:15:5e:77:3a:76:e2:00:
9c:f5:df:ca:c3:cd:8d:a7:91:36:f0:0f:3d:32:98:
db:89:c4:f3:58:3d:f3:0a:db:b1:eb:da:92:8e:61:
ba:69:d9:55:a9:d7:98:f3:58:74:2c:14:b3:2e:f0:
52:60:b6:3a:38:a7:d0:72:e8:4b:c3:7f:b2:db:cf:
9a:09:98:aa:ba:1b:31:e6:10:cd:f6:6c:46:77:9a:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:E6:56:1C:04:C3:A8:E0:AD:D3:2D:52:E8:66:CF:FD:1D:05:BA
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.231.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f7:78:26:5b:5d:b4:d4:d1:c6:e0:de:6b:bb:54:75:d2:ae:
1c:79:d8:b7:49:73:27:92:f9:3f:15:b5:18:cb:09:f1:db:ae:
c1:9f:26:c4:3e:ef:69:ce:f3:b6:46:a0:f9:65:c1:19:0c:03:
d4:75:92:79:91:f5:72:5d:de:8e:58:08:6b:69:51:00:ce:b1:
00:4f:37:9f:e9:82:27:63:3a:03:bc:5c:f4:02:5a:6f:72:4e:
3b:44:96:dd:61:98:28:b5:68:28:aa:45:bb:99:99:ff:b0:21:
0f:72:5e:98:9c:b0:f2:65:58:1d:83:af:20:12:ad:1c:08:b4:
dd:8e:22:65:92:f2:fd:62:65:f3:66:2f:e6:0a:65:80:10:3e:
a6:80:02:c1:37:15:5a:4d:03:15:e2:f1:b9:6c:6b:9e:7d:2d:
59:ef:c6:d2:23:b6:51:5c:8e:c2:ca:da:80:5f:90:28:3f:96:
14:e0:f1:ef:aa:28:17:fd:fc:de:12:fc:1e:67:27:bf:e7:fd:
93:6e:a2:2e:03:2b:b3:a2:28:01:e0:9d:3a:8d:fe:1f:e7:cc:
4a:67:b8:2d:28:89:80:11:12:d9:df:9b:84:b3:f4:3d:f4:26:
a6:67:8a:d4:4b:52:b0:9f:e4:80:51:11:7f:21:ad:b3:4d:7f:
e9:ac:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net