Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa
File: AS138195.roa (raw, json)
Hash identifier: 3JPV7aj7sMoAp08W2Hn2XjZrO6glBrNx9NMgMmL7n+M=
Subject key identifier: 9D:33:71:AD:CC:48:F4:A4:A7:AA:09:B4:D0:79:F1:F4:31:01:B2:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4B8DC4447676D393E0C82AC9E7621F075B965A59
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa
Signing time: Wed 19 Feb 2025 09:01:56 +0000
ROA not before: Wed 19 Feb 2025 08:56:56 +0000
ROA not after: Wed 18 Feb 2026 09:01:56 +0000
asID: 138195
IP address blocks: 95.135.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8d:c4:44:76:76:d3:93:e0:c8:2a:c9:e7:62:1f:07:5b:96:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 19 08:56:56 2025 GMT
Not After : Feb 18 09:01:56 2026 GMT
Subject: CN=9D3371ADCC48F4A4A7AA09B4D079F1F43101B26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:5a:d4:88:ac:e8:3a:5f:56:b8:90:7e:e4:
7d:c7:ab:ca:dd:1a:5a:8a:32:8a:b3:c0:40:38:1e:
c5:86:ae:4a:5e:dd:15:ba:a3:3f:c5:f3:1b:ca:42:
77:93:55:d8:cb:3d:76:76:ba:67:83:53:bb:2e:4f:
70:d1:8e:8f:ed:e3:df:01:7f:5f:f8:24:75:1f:a1:
95:59:27:98:82:1c:ff:10:00:17:37:d6:98:38:ec:
12:9c:57:84:5c:38:60:30:78:d6:6b:ac:d6:9c:5a:
de:b3:62:56:8c:84:8a:9a:57:5c:b3:a3:cb:8f:44:
c3:96:6d:83:28:86:6d:c7:fc:55:69:cf:11:81:61:
51:6b:63:0c:7e:50:43:13:2a:6e:31:a2:ea:d9:a5:
6e:4d:2c:63:a7:e7:e3:8e:d0:44:4c:05:f9:8c:68:
eb:99:57:68:ad:c5:dc:45:df:1e:37:b4:ad:59:7e:
0b:e5:65:36:7e:4d:4a:1d:06:e7:7d:88:5a:40:10:
69:1a:ad:9c:d4:02:ef:05:cb:47:a0:64:00:82:30:
d0:d7:bb:e0:6d:ba:74:64:48:e8:ad:73:89:77:97:
f4:b7:bc:dd:26:3a:8a:5c:45:30:c3:e1:00:dd:91:
77:ed:52:7a:fe:11:81:07:4e:25:f3:10:46:4b:74:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:71:AD:CC:48:F4:A4:A7:AA:09:B4:D0:79:F1:F4:31:01:B2:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.61.0/24
Signature Algorithm: sha256WithRSAEncryption
77:65:96:31:ee:19:80:a3:0a:55:d5:47:99:52:5e:54:40:ae:
be:be:12:98:08:62:92:57:07:78:68:25:db:20:ee:8f:48:b8:
56:0c:29:84:06:47:68:94:00:a7:27:00:e0:64:86:6c:31:14:
3b:c7:b2:de:5d:c9:e7:9a:81:11:d0:86:17:f8:b0:a8:b5:b1:
28:ff:53:56:65:ba:3b:35:03:78:c0:33:de:58:96:a3:97:a0:
3c:8a:ec:a8:3a:ef:89:87:ce:a5:d2:6f:32:5a:f5:cb:ae:f4:
9b:7f:6c:ec:8e:37:18:de:10:ba:15:dc:61:30:3e:db:d4:2a:
b8:af:ed:6f:81:27:44:d0:7f:b9:68:79:6f:85:44:06:93:62:
bf:dc:46:13:06:0f:db:9a:f4:d4:d8:12:83:c0:c4:70:bc:fa:
f1:5c:a8:ad:d1:b5:81:c8:6c:d4:b6:40:10:10:26:33:49:0a:
77:a4:72:0e:4b:0f:27:55:b4:2d:89:f0:3c:b5:c5:48:e3:c2:
65:1c:91:7f:15:42:c1:34:b3:4e:39:83:41:cf:96:33:1f:46:
df:cd:4a:7a:38:a1:b1:91:86:8d:f4:52:e0:f9:28:2c:b7:5d:
51:d3:80:2e:c6:c3:a9:5a:ce:43:1e:3d:70:17:b2:87:fb:e2:
bb:04:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:50 2025 by rpki-client on console.sobornost.net