Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa
File: 36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa (raw, json)
Hash identifier: SQ9ogBKHb+rGHe3BXgCbUKWuF1/SVTNnqc7Qrrn9o88=
Subject key identifier: DF:A9:09:65:35:1D:FE:C5:AA:E9:71:98:68:EE:CF:E5:18:68:35:84
Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial: 0194228E0AA2A13906C622AE0464AE0644D7
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57326
IP address blocks: 95.128.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0a:a2:a1:39:06:c6:22:ae:04:64:ae:06:44:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa90965351dfec5aae9719868eecfe518683584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:76:a3:b9:ce:d2:85:51:dd:12:55:63:09:
56:b4:95:0e:64:98:cf:8e:40:71:78:14:45:a6:46:
09:75:21:b4:34:a8:8b:75:c6:4c:f3:9f:41:65:2a:
99:34:ac:fb:de:59:d1:53:4d:7b:30:89:35:d2:ef:
20:9e:2c:80:b9:da:33:e4:38:0f:42:8c:dc:56:92:
1c:86:c6:00:8d:cc:8c:fd:9f:71:9f:64:a3:f0:60:
25:75:74:fd:e7:cc:d5:42:23:9d:3d:20:2d:31:fb:
83:9f:ca:cd:a7:da:60:f0:94:d4:fd:35:df:46:99:
2f:50:73:c1:ca:db:c4:4a:97:8e:81:a4:7b:5f:d0:
16:72:a8:3e:fc:91:ea:98:50:1e:b4:a5:91:79:77:
c2:6f:a9:96:9e:42:84:42:a2:f5:c4:1f:2c:cb:02:
26:3a:6b:76:73:5b:d9:57:1e:c9:4c:a6:2b:3e:94:
4c:82:97:93:34:b5:c6:34:3a:fb:1f:ec:2e:3e:75:
77:a1:55:f9:4a:04:49:77:48:ab:c3:3f:49:25:be:
49:e2:0b:b6:2d:ff:5b:7d:16:f0:ee:68:0b:50:53:
38:ba:63:2a:69:7e:d3:13:c3:03:06:0e:28:30:46:
bd:4f:0b:ca:cc:79:83:89:5c:1b:95:cd:1d:c0:ea:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:09:65:35:1D:FE:C5:AA:E9:71:98:68:EE:CF:E5:18:68:35:84
X509v3 Authority Key Identifier:
keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.172.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ff:be:9e:e6:5d:0b:26:0a:67:1a:90:47:1e:b0:b1:ee:13:
d7:ab:6c:70:ea:9f:81:f9:c0:33:45:ff:b0:c6:7e:94:34:36:
3c:9b:3a:66:bf:ad:82:45:0f:e3:8a:3e:87:db:f2:67:4d:57:
32:f7:94:47:d1:48:01:ec:0f:13:8a:ac:ee:3f:0a:58:1b:8d:
75:6c:11:06:8e:0d:3a:39:0c:d7:0a:e0:3c:ca:ad:08:fa:a3:
42:8b:50:77:5c:8c:a9:16:df:5d:98:5c:44:ef:e7:70:d3:61:
b7:f0:52:8f:08:ae:4f:80:00:f1:b5:82:33:70:81:93:2e:c9:
00:a0:19:b5:8d:ba:7f:62:93:51:83:92:5b:5c:c2:74:d0:55:
37:55:42:68:96:e3:ca:fd:c4:59:2b:d3:34:b8:d7:98:d0:c8:
be:36:92:4c:eb:cc:15:06:40:c8:2f:6c:68:c4:8e:ae:ee:14:
52:4b:19:eb:84:01:d2:53:47:2e:9f:47:ad:9b:e7:3f:be:fa:
55:31:0a:13:f0:f5:23:c7:59:5b:ac:e8:0d:b1:3d:1e:0c:ee:
8a:b3:df:0e:78:36:b1:30:a0:a7:13:28:32:a0:56:b2:ee:4f:
6b:37:75:a4:8a:51:fa:e9:fa:b1:2b:97:00:ab:be:7b:4e:8b:
35:3f:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net