Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: yGw5PieenVSwhfm2Dth0BjA6HBI1XNHOQSz6wJLbLJ0=
Subject key identifier: 4D:0C:DB:E3:70:88:E3:47:C2:2F:70:94:27:94:58:76:E4:40:69:76
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7659B57D6D986251127F4B4C69F59129830B973D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135402.roa
Signing time: Tue 08 Apr 2025 06:18:59 +0000
ROA not before: Tue 08 Apr 2025 06:13:59 +0000
ROA not after: Tue 07 Apr 2026 06:18:59 +0000
asID: 135402
IP address blocks: 95.134.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:59:b5:7d:6d:98:62:51:12:7f:4b:4c:69:f5:91:29:83:0b:97:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 8 06:13:59 2025 GMT
Not After : Apr 7 06:18:59 2026 GMT
Subject: CN=4D0CDBE37088E347C22F709427945876E4406976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:3c:bc:03:b9:65:46:fb:39:95:47:a8:66:
5e:88:36:9e:43:f9:86:32:15:a9:6b:0b:bd:62:ea:
12:f5:d6:39:04:eb:47:62:e0:3f:b1:dc:5c:18:56:
f9:0d:8a:b0:fa:af:37:a8:2c:d8:0e:a3:48:9e:64:
db:78:54:b1:8b:81:5b:7c:9a:24:ba:3b:a7:11:9b:
49:2e:6f:23:bc:5e:22:b4:86:f3:1c:29:a8:e1:67:
f1:af:55:1e:d2:07:de:0c:fe:94:d7:f4:a9:15:64:
43:7e:24:a4:21:9e:fe:cc:e4:02:b9:9c:5d:cf:7d:
2b:00:52:82:f4:40:f6:ec:c1:5c:3b:0d:39:99:56:
9a:13:09:86:d9:ee:ae:e0:eb:f8:c1:ef:20:3c:12:
9d:a2:53:cc:4e:fe:b1:84:a8:93:93:7f:9a:d0:a4:
0c:60:5d:1c:4d:b7:99:22:fb:26:90:4f:20:95:e7:
4c:b1:9b:a3:44:37:07:4a:41:2e:eb:2f:d5:99:66:
a0:f3:33:bf:d4:80:01:94:5b:d9:fc:75:25:e3:ea:
0c:0a:e8:60:92:d9:72:05:2a:1d:7b:d1:ef:f1:8d:
12:07:6c:97:4e:ef:f0:fa:41:e0:3c:db:a9:23:25:
19:41:c7:bc:07:4e:c3:ef:62:42:df:11:85:eb:40:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0C:DB:E3:70:88:E3:47:C2:2F:70:94:27:94:58:76:E4:40:69:76
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.183.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f5:55:32:ec:05:75:14:51:65:52:fd:33:d5:dc:8f:c9:f0:
16:42:54:cf:ee:4e:50:84:66:6d:72:bf:65:6a:53:b0:96:98:
18:f6:da:b3:3c:2c:d2:47:16:1f:71:77:e5:4e:81:1a:db:a1:
1e:2e:3f:5c:e3:87:76:ab:6d:67:3d:7b:a0:b8:6b:27:c1:03:
2f:45:1c:db:11:42:4b:76:47:f4:d9:fb:a7:76:02:54:a8:4c:
8c:9f:f3:f2:43:cd:51:e3:43:ad:99:31:59:98:af:fa:f9:4a:
f9:62:78:fb:1b:77:c8:02:9e:95:99:83:93:b4:fa:79:b0:1e:
d4:03:70:9a:1f:7d:3f:11:a3:56:2d:f0:29:8d:0d:4c:f0:a8:
14:76:40:e5:25:37:2b:7d:d6:3b:57:ef:33:0a:ee:5a:c5:ce:
62:f9:b1:e9:de:cd:50:5b:a5:c7:21:d8:bb:ed:63:6f:14:ad:
08:29:03:87:ee:f4:27:eb:a1:6b:75:cc:1e:7f:6d:5d:5f:40:
df:46:b9:f7:fa:2c:26:7e:8e:4d:16:77:5b:60:36:69:14:d0:
e6:51:e7:37:80:6d:73:fe:12:76:12:63:47:19:0f:58:3c:ea:
15:83:9d:70:0a:7a:37:b6:67:4e:5a:2b:c3:65:bd:5a:5f:ae:
84:5b:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net