Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RlTK1kSbhinLKGkFi_4yQpdkss0.roa
File: RlTK1kSbhinLKGkFi_4yQpdkss0.roa (raw, json)
Hash identifier: +EEgjEkk8bkuNrAQ6j/Cot8zTY7fMcu9eVumo5Q/4Do=
Subject key identifier: 46:54:CA:D6:44:9B:86:29:CB:28:69:05:8B:FE:32:42:97:64:B2:CD
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C70DB13DA0D670AA933289A4E2C9D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RlTK1kSbhinLKGkFi_4yQpdkss0.roa
Signing time: Thu 02 Jan 2025 09:50:28 +0000
ROA not before: Thu 02 Jan 2025 09:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35125
IP address blocks: 95.158.192.0/18 maxlen: 18
212.3.128.0/19 maxlen: 19
212.3.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:70:db:13:da:0d:67:0a:a9:33:28:9a:4e:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4654cad6449b8629cb2869058bfe32429764b2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:9e:73:f5:eb:2b:0d:d4:6b:1a:02:d8:ff:
dd:28:5d:00:50:15:6a:29:4e:f9:6a:a8:34:bc:47:
93:b2:56:28:82:ef:b9:7d:31:c7:5f:04:e3:11:1f:
17:c4:b6:fe:26:21:09:25:21:7b:c4:67:6e:35:8e:
cb:f5:95:41:e3:4c:3c:3d:8b:a0:f4:c8:4c:62:64:
d0:b0:b6:e3:50:d1:e4:a9:85:b3:76:8a:0f:82:7b:
ba:e0:6b:1c:26:b6:c7:84:a8:54:2b:7c:dc:00:4e:
81:0d:90:9d:41:51:cf:06:86:d7:2d:1a:b9:84:5b:
13:00:d4:52:e1:6c:b2:8a:74:71:be:ad:7b:2f:ba:
36:d7:ae:50:1b:34:ac:d5:34:b2:c6:ae:86:f2:49:
17:a8:9a:0e:b1:0c:52:63:91:e6:15:fd:09:1d:7c:
7c:7d:d5:c3:08:c2:0e:87:2d:81:5b:8c:5c:c5:c3:
39:04:95:8d:f7:35:4a:d9:16:d2:c4:f7:bf:12:73:
21:ab:b4:2b:d1:07:c0:02:86:13:31:b1:9e:fd:d2:
84:35:35:2a:47:e8:b6:4b:ad:47:bc:5f:35:df:78:
61:34:72:1c:54:ee:6a:75:29:9a:09:a1:a7:2b:53:
c0:45:a3:81:64:71:0f:44:44:6e:ae:1e:d8:94:14:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:CA:D6:44:9B:86:29:CB:28:69:05:8B:FE:32:42:97:64:B2:CD
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RlTK1kSbhinLKGkFi_4yQpdkss0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.192.0/18
212.3.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:2e:5b:b9:d8:2f:74:96:01:0c:f3:40:61:eb:04:7f:45:d4:
c2:d1:90:52:40:42:ef:0a:ec:33:ef:fd:a2:75:53:83:ee:69:
59:1e:b3:8f:0a:7c:c1:7b:61:a8:b7:75:c7:db:19:d5:d1:c3:
ac:51:c8:ba:88:b4:49:ea:9e:48:82:c3:4b:29:33:6c:e5:cd:
30:85:f1:6a:16:c7:d0:57:3f:18:a3:b4:88:8c:59:fe:61:06:
19:a4:dc:19:5b:4a:c6:0d:20:7c:77:5a:37:2f:dd:13:2f:54:
21:c6:df:b2:fa:7c:6f:b9:c4:d7:55:fa:87:52:92:75:c7:cb:
cf:de:9d:4e:c6:8a:83:29:49:45:b4:c9:a1:8b:c6:01:54:47:
78:bf:20:67:57:a4:d7:e0:cb:3d:20:da:b5:8e:b8:44:09:fd:
e7:e8:3d:85:17:eb:ac:ef:dc:15:93:eb:89:84:d3:40:f7:f4:
ff:af:1b:d7:1b:9f:34:7b:e6:92:6a:82:b6:70:64:be:eb:0c:
1b:04:cc:00:bb:7e:a0:d2:76:1e:34:30:6d:83:5f:60:1a:ea:
e7:02:d5:c4:ab:22:d9:74:b6:00:5a:ed:c4:f2:ae:77:a6:eb:
4e:52:fb:3a:ba:e0:ab:0f:ad:d6:fb:a6:62:4e:77:93:1d:69:
7d:37:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net