Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/41khnizxBGanK3xTNiHjAvKipH8.roa
File: 41khnizxBGanK3xTNiHjAvKipH8.roa (raw, json)
Hash identifier: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=
Subject key identifier: E3:59:21:9E:2C:F1:04:66:A7:2B:7C:53:36:21:E3:02:F2:A2:A4:7F
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019518D1F2BA8AE74D912F4A96E7DFD47A76
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/41khnizxBGanK3xTNiHjAvKipH8.roa
Signing time: Tue 18 Feb 2025 11:29:27 +0000
ROA not before: Tue 18 Feb 2025 11:29:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198964
IP address blocks: 195.226.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:d1:f2:ba:8a:e7:4d:91:2f:4a:96:e7:df:d4:7a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Feb 18 11:29:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e359219e2cf10466a72b7c533621e302f2a2a47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:49:19:dc:32:27:87:cb:dd:8f:13:06:68:
01:7a:8a:e2:77:cf:3a:34:6d:35:d2:e2:f8:48:4a:
33:b5:8b:8a:ca:ee:ee:37:99:5d:10:de:80:b3:d2:
24:04:c1:a2:b2:bd:9a:ef:5f:f7:16:a6:1b:b4:82:
d4:9c:3a:4e:ca:22:9f:7c:78:bd:12:df:58:b9:82:
40:c4:cf:80:72:94:9b:86:78:43:a8:1a:6d:2c:54:
4e:6c:27:8f:db:b7:00:b5:3d:f0:5c:f2:44:60:c4:
cd:3d:e3:63:36:cd:46:e9:37:ee:63:5e:eb:e0:61:
9b:17:94:51:f1:80:13:5e:e0:8b:9c:18:d0:01:4e:
60:a9:9b:66:12:27:8d:21:c1:01:4c:29:cc:30:0b:
cd:c8:5c:4f:79:db:60:c6:7e:a3:3e:88:c5:26:81:
95:72:12:35:36:06:fd:1d:00:2f:a8:d9:16:1d:20:
3b:72:5c:5f:a5:4f:2d:cd:4b:20:af:10:a4:af:fd:
c6:6a:81:af:7a:e7:6e:67:35:02:08:60:79:03:ad:
5a:b3:53:d0:9b:ac:5b:97:c2:51:e7:f6:02:71:da:
c3:ba:82:92:86:cc:a6:3d:36:c9:0c:5b:05:b5:f3:
97:46:84:f2:88:78:88:3f:5c:3e:be:60:6d:ed:69:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:21:9E:2C:F1:04:66:A7:2B:7C:53:36:21:E3:02:F2:A2:A4:7F
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/41khnizxBGanK3xTNiHjAvKipH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:75:02:31:b9:c4:ff:e0:44:58:74:a5:99:39:b8:b6:5c:c3:
44:b6:d9:9f:fe:73:c6:9f:47:d2:e0:ba:0d:d1:f1:54:9d:7b:
bf:b0:f1:6c:c0:03:3e:87:a9:66:5c:de:df:d2:17:6f:1e:4a:
53:06:f3:7c:9b:c2:c8:e1:f7:7e:91:ca:0d:c1:b9:8e:73:7c:
c7:c1:55:38:ac:b1:36:e9:83:94:28:c3:90:9e:40:ee:de:1b:
50:cf:2b:f9:c0:2f:a7:a5:a1:14:61:98:50:76:23:cf:c6:c0:
58:56:90:4b:7d:f9:76:44:6a:ec:b9:1c:4d:7f:82:e0:73:34:
4a:3c:fd:2d:52:4c:59:f5:37:bc:57:e5:de:62:c3:7b:7d:7b:
1a:9f:68:56:08:a5:fe:43:2e:17:48:c6:c2:69:29:21:9b:ae:
68:c5:44:1e:bf:03:3e:08:01:04:23:3f:82:d8:45:08:ba:8e:
a1:95:cc:2a:ad:f7:6c:73:74:3d:6b:72:99:3b:9e:53:ce:85:
c9:e2:cd:be:0a:9f:c5:a3:10:d5:53:e0:b6:81:d8:6e:7f:3e:
06:25:a2:4e:bc:be:20:c0:1b:8c:a0:e4:d2:4b:b5:e1:4d:9e:
78:15:26:27:e0:dd:56:25:dc:9b:e4:56:43:e6:07:45:39:11:
e4:86:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net