Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20115.roa
File: AS20115.roa (raw, json)
Hash identifier: 664YX8H9cx51zvrU5K/pp3m3K25HtPGHL903Mn8MWuc=
Subject key identifier: 7C:A7:83:5F:D4:A5:0C:28:9B:99:18:97:06:F1:90:8E:49:CF:C7:27
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 200085D685677F17CA05604C2B131635C79FC354
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20115.roa
Signing time: Fri 11 Apr 2025 03:54:16 +0000
ROA not before: Fri 11 Apr 2025 03:49:16 +0000
ROA not after: Fri 10 Apr 2026 03:54:16 +0000
asID: 20115
IP address blocks: 95.134.48.0/21 maxlen: 24
95.134.64.0/21 maxlen: 24
95.134.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:00:85:d6:85:67:7f:17:ca:05:60:4c:2b:13:16:35:c7:9f:c3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 11 03:49:16 2025 GMT
Not After : Apr 10 03:54:16 2026 GMT
Subject: CN=7CA7835FD4A50C289B99189706F1908E49CFC727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:f4:a4:e8:5f:e1:93:1f:6c:af:24:72:7b:
34:b8:2f:ce:21:c2:c8:e3:60:e7:d2:85:97:81:b6:
d3:ec:d1:8b:f9:c7:51:0c:b4:42:5b:44:3d:30:a4:
47:cb:68:ac:cb:f9:7f:c1:86:49:d4:17:d7:fc:cf:
8d:1d:56:7a:57:ed:9d:39:eb:ea:b8:28:6e:e6:39:
fc:70:c0:76:d6:35:e8:f8:ef:c7:83:90:02:2e:8c:
97:6a:25:5f:65:9f:fc:24:68:c3:b6:8b:43:20:b5:
e7:1f:a6:0e:a6:14:22:3b:88:75:de:78:11:73:48:
95:ff:83:10:23:3c:8e:9d:56:ee:1a:c9:01:35:8e:
1c:bf:28:ed:be:58:75:93:9e:5d:b9:4d:47:ff:02:
ec:83:f4:63:25:9c:e3:8f:ee:aa:60:a3:8b:bc:81:
a8:ea:41:77:fb:17:c9:e1:ec:5b:31:bc:87:87:84:
37:ca:aa:93:48:32:86:4e:19:53:57:98:f8:45:35:
0c:e7:0e:68:52:11:6e:02:09:2f:50:9f:21:6c:d6:
04:73:12:cc:9b:da:1e:6b:d5:a1:03:b2:13:7e:fb:
3e:a9:e5:59:8a:ec:48:5d:82:09:d0:99:66:df:bb:
2f:55:a4:18:d8:60:e3:24:fa:62:ff:f9:88:25:61:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A7:83:5F:D4:A5:0C:28:9B:99:18:97:06:F1:90:8E:49:CF:C7:27
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.48.0/21
95.134.64.0/21
95.134.96.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:a2:19:5a:48:90:fb:67:ae:f5:61:ef:31:40:12:03:f8:e4:
c4:3f:5e:6f:63:92:74:0a:33:8c:a1:0e:88:7d:09:31:d9:b6:
e4:f9:df:26:0c:72:6f:d6:b0:3b:c4:21:48:c3:81:cf:1c:cc:
6c:06:21:54:6a:29:45:62:f4:2a:38:d0:5f:ea:d5:ac:cd:55:
ff:e7:8f:7b:6d:cf:8b:a4:ce:4b:7d:ec:b5:8c:05:16:24:84:
a5:28:2c:c9:f1:56:c3:14:9f:bd:ec:d4:85:73:ad:04:77:b6:
58:29:64:93:c9:a8:0a:a1:f1:16:f4:59:e9:78:2b:c5:8b:a7:
0c:7d:66:bd:3a:29:09:d0:4c:3a:07:38:e4:5f:62:d7:e0:47:
01:61:35:51:95:d7:05:b2:34:a8:48:0f:81:fa:17:6b:0b:96:
23:50:e7:1c:38:29:96:48:7a:14:7f:48:88:4d:08:80:88:a2:
85:41:58:36:23:25:70:0c:c9:2d:78:e1:cb:dd:5d:fd:78:8e:
2a:68:ad:fd:f9:54:e5:8f:bf:16:c3:55:9d:86:b4:b5:e3:88:
6f:8c:18:1e:cd:69:b3:3c:f3:11:10:e3:b1:f9:d8:a5:5f:93:
1c:8f:e3:e3:57:63:d9:6f:89:68:c9:f8:d0:17:08:9e:b1:cd:
94:af:9b:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net