Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396246.roa
File: AS396246.roa (raw, json)
Hash identifier: p7s91mxuPY6Xc1aU0lNJfsCus+Z4iucwvApsvABZ12U=
Subject key identifier: C1:AF:64:ED:A1:3B:F8:B9:96:7E:B7:4B:DC:75:0B:AD:83:1D:98:D5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 06D788ABD8BA82242D77FA3AAE7C83EB7A42473B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396246.roa
Signing time: Sat 05 Apr 2025 14:04:41 +0000
ROA not before: Sat 05 Apr 2025 13:59:41 +0000
ROA not after: Sat 04 Apr 2026 14:04:41 +0000
asID: 396246
IP address blocks: 95.134.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d7:88:ab:d8:ba:82:24:2d:77:fa:3a:ae:7c:83:eb:7a:42:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 5 13:59:41 2025 GMT
Not After : Apr 4 14:04:41 2026 GMT
Subject: CN=C1AF64EDA13BF8B9967EB74BDC750BAD831D98D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:fa:08:01:05:14:0a:83:59:bc:99:95:98:
d5:58:68:ad:52:02:ad:7e:db:78:a9:44:43:29:37:
72:3f:48:70:37:eb:69:c8:35:09:73:d7:ac:15:63:
f2:5c:f5:b5:28:31:ff:e0:f7:66:17:c7:f4:0f:d1:
d7:2b:77:e9:76:bf:01:fb:67:a2:d8:b3:33:14:e7:
69:a5:b3:87:99:95:d3:02:8b:0d:20:25:32:0d:ee:
38:c0:1f:d8:48:9b:7c:b7:4b:90:ba:6e:14:dd:6a:
e0:4c:9c:ff:5c:f7:85:2c:49:fa:16:c8:50:85:9d:
95:b1:0c:27:92:2b:0d:cf:57:c8:93:4b:ec:b6:3a:
e6:54:b9:64:f8:e3:29:35:6c:d5:0c:83:26:0c:55:
57:23:0c:24:bc:b8:73:9f:3b:e7:94:61:33:b0:f2:
4a:5a:7c:59:ca:34:c4:d8:30:23:d5:f0:f2:8e:4d:
57:1b:66:c3:58:5d:19:69:1b:55:6e:8c:39:a2:88:
5c:b4:8d:db:f3:04:42:4c:38:b8:55:d8:ff:e5:98:
e6:ce:1d:58:1f:19:33:6b:17:e6:c7:82:f5:49:d5:
3e:3f:d7:30:de:00:20:fd:28:86:0f:2b:34:32:1d:
0f:c6:1d:57:1a:5b:57:da:e1:e1:e8:6e:21:5f:01:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:64:ED:A1:3B:F8:B9:96:7E:B7:4B:DC:75:0B:AD:83:1D:98:D5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396246.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:47:f9:cf:dc:f7:6e:c5:f2:b5:44:fa:6f:27:c8:8e:a2:79:
c3:e0:4f:b1:45:1b:ba:29:9c:48:68:c2:66:4b:1c:62:df:9d:
ca:8d:55:ef:a2:53:47:ff:4f:56:cc:49:9e:48:08:ff:e1:67:
79:95:8b:61:84:d2:83:f0:61:4e:8f:24:fb:d3:94:8b:5f:41:
bd:97:3f:0e:23:46:79:d4:98:62:ab:6c:34:5b:a8:da:77:e1:
82:c6:2a:41:9f:a5:f7:65:88:3d:88:18:ab:54:f6:d9:3b:fb:
8e:6d:87:81:67:ac:48:92:0e:e0:c7:5b:9c:4b:76:5f:4e:7d:
61:e7:9b:05:83:c8:74:ec:d8:70:3e:10:b5:aa:14:51:2a:63:
87:27:49:b0:1f:42:22:fe:f0:6c:11:b5:99:66:bb:75:41:ae:
5c:6d:c5:95:4a:44:f6:e0:81:71:81:41:bc:39:78:35:42:4c:
fb:f5:d1:2b:af:87:8b:30:4a:ab:df:50:5d:a5:00:fa:06:09:
5e:87:b9:37:3e:d8:a5:ff:79:e0:ef:cd:b5:2c:88:0e:4e:49:
4e:74:7b:e1:6f:95:09:4d:28:81:4d:f2:cc:5b:4f:a9:8c:f5:
8e:70:7a:f8:46:3e:8f:93:ae:b8:94:71:c3:62:3b:df:18:28:
db:10:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net