Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa
File: c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa (raw, json)
Hash identifier: G3UZF7fxpF7R/IVnk9rPAZ+jjio/iwehlQmNNTZ8rAo=
Subject key identifier: 73:F2:31:73:70:18:3D:7F:DF:98:60:04:D0:45:1A:03:C8:82:68:26
Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial: 0194228E0ADBF5F65E42DA91695BD0ABC022
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202842
IP address blocks: 95.128.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0a:db:f5:f6:5e:42:da:91:69:5b:d0:ab:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f2317370183d7fdf986004d0451a03c8826826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:73:24:ac:ff:ec:03:89:3d:5d:fc:bd:ee:
e2:d9:49:eb:80:65:0d:a6:3b:87:d1:dd:3a:6f:cc:
60:95:8a:5e:40:9f:50:9e:ef:9e:04:ba:f5:d1:00:
53:f4:fa:ad:2c:96:e6:b3:f5:75:46:b3:7f:ef:f5:
60:b4:e6:c2:dc:ad:ee:bf:ed:6c:fc:46:e6:10:d6:
43:56:30:ac:e1:9d:0f:07:7c:a9:cc:42:3f:62:57:
66:9f:df:a5:5d:12:c4:77:29:21:98:cb:a0:fa:3d:
6b:1a:50:f0:e8:15:38:b7:04:ab:5c:12:97:cd:78:
8d:19:d5:da:fd:2f:e0:d7:2c:a0:6d:e2:73:3f:e3:
76:1a:b5:46:bd:4a:92:f6:5b:71:83:5f:8d:ae:24:
01:84:f2:69:a4:ae:80:be:2b:60:3c:4c:e5:52:c8:
93:ac:92:08:39:82:94:d1:86:75:ef:88:be:19:38:
ed:63:15:5f:51:e5:b2:7d:f4:8a:50:c7:c0:07:1d:
2c:71:49:84:0b:b6:4e:ea:cc:af:9b:23:05:f3:98:
7e:0d:d1:b4:da:e5:15:39:61:f8:b1:32:ed:10:9a:
0f:3c:7c:09:87:b9:cb:01:62:b0:c2:49:87:55:77:
c1:7e:bc:d4:fa:28:b2:fc:2f:00:ec:94:12:ca:51:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F2:31:73:70:18:3D:7F:DF:98:60:04:D0:45:1A:03:C8:82:68:26
X509v3 Authority Key Identifier:
keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.174.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6a:b2:8e:32:ca:c9:d8:c2:1d:e9:b4:23:b5:95:08:fb:7c:
79:6a:cf:ce:b2:dc:64:f9:b6:0c:88:5b:54:c6:f0:77:49:28:
64:21:74:ae:38:4e:ff:9c:81:e8:c4:7b:69:dd:ca:b0:ea:bd:
58:47:78:53:c0:5a:63:09:82:71:2b:7b:bc:2b:d7:6f:33:30:
a2:1e:31:91:5e:8b:a8:ba:80:58:13:b9:bd:89:46:7c:29:86:
82:5f:49:b6:07:be:6e:fc:49:56:69:0e:3a:22:4d:33:78:f7:
ad:c9:1d:65:16:c1:79:ac:ac:06:e0:be:40:56:d2:5d:a6:53:
ab:26:66:7d:e2:35:6c:b4:bc:58:d7:0d:0d:b8:ba:90:ac:93:
19:ca:87:fb:7c:f7:a3:b7:cc:c5:09:83:d5:dc:a2:03:d6:76:
73:9e:5a:70:71:07:d3:42:76:3d:92:a6:c1:5e:66:2b:41:62:
6e:f7:95:c3:4e:ad:27:c5:d9:36:71:2d:47:af:2b:03:11:8e:
d2:03:d7:1b:0a:54:2e:70:40:db:d6:12:5e:98:b5:e6:6e:c4:
81:45:8a:39:74:e8:e6:0f:38:03:85:80:2f:ad:48:cf:bb:4c:
b0:80:e5:81:54:b5:60:b1:cc:fa:c5:b5:f7:5f:f5:35:f3:3d:
18:aa:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net