Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7843.roa
File: AS7843.roa (raw, json)
Hash identifier: mAiGhz90kYhcpEWDZ/k+ikbYK1BEGcSnUnTAV/4Mv9Q=
Subject key identifier: 2C:04:08:B5:03:CC:90:55:43:CB:77:F0:C4:90:D1:5D:BD:72:4C:E5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5B5EB7BB894B9E975F0B8BCB2AA79D548E265D99
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7843.roa
Signing time: Fri 11 Apr 2025 03:54:16 +0000
ROA not before: Fri 11 Apr 2025 03:49:16 +0000
ROA not after: Fri 10 Apr 2026 03:54:16 +0000
asID: 7843
IP address blocks: 95.134.48.0/21 maxlen: 24
95.134.64.0/21 maxlen: 24
95.134.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5e:b7:bb:89:4b:9e:97:5f:0b:8b:cb:2a:a7:9d:54:8e:26:5d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 11 03:49:16 2025 GMT
Not After : Apr 10 03:54:16 2026 GMT
Subject: CN=2C0408B503CC905543CB77F0C490D15DBD724CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:98:74:9a:b5:d5:11:45:2c:a5:ab:2c:59:
2a:9d:7c:24:0f:9c:b5:74:ed:2f:d7:a1:f7:ac:8f:
fd:4a:3a:e2:f6:76:41:40:4d:0f:d0:db:ca:1d:f9:
5f:b2:4d:11:33:c0:4b:50:b7:99:ff:73:79:a5:2d:
fd:ae:09:c2:a2:9c:2c:f4:54:84:fb:ac:7a:30:6e:
46:14:91:92:17:9e:e4:6c:a5:4f:16:c1:61:82:90:
c9:51:3f:c7:69:d0:41:ad:ac:0b:33:6c:4b:eb:51:
67:df:ba:66:1c:95:51:a5:96:14:e4:e9:0c:84:3c:
ae:cb:50:09:b6:69:aa:83:10:9a:e6:af:eb:ae:3d:
fb:11:27:01:77:25:2b:54:05:a9:fd:98:ca:ca:5e:
90:d3:a2:5c:b3:b9:5c:8c:fd:08:11:eb:63:3c:f4:
bd:56:16:56:90:48:28:4f:9c:77:4f:2c:21:20:81:
32:02:1d:40:e0:82:8e:fc:a0:64:d2:95:24:26:2d:
08:c0:45:6d:db:c7:92:dd:24:47:1e:b6:48:5b:d5:
c3:df:13:49:ea:5f:ce:ee:a8:d0:d2:c7:1b:fb:79:
bd:d0:bc:7c:fa:f5:c0:c9:b5:ad:7c:32:31:01:84:
87:dd:85:7f:da:f9:da:c6:84:d9:a5:f5:55:72:17:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:04:08:B5:03:CC:90:55:43:CB:77:F0:C4:90:D1:5D:BD:72:4C:E5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.48.0/21
95.134.64.0/21
95.134.96.0/21
Signature Algorithm: sha256WithRSAEncryption
39:c2:07:cb:fc:39:03:fd:26:b0:2c:e3:0c:59:9b:e4:92:b0:
81:e4:37:df:5e:f6:f2:fe:6a:cc:c5:11:61:da:18:db:5d:a6:
62:53:4c:a0:82:b7:99:01:c1:34:a4:00:58:76:c3:71:46:3b:
35:14:9b:ba:d5:ce:1a:90:18:96:02:de:25:6a:9f:a0:c5:b9:
84:78:c2:5c:75:ef:6b:6d:68:4c:ff:ed:c3:e2:73:84:33:69:
17:db:99:0e:bc:8b:53:af:77:fc:4a:fd:df:8f:17:1b:a6:34:
a5:8c:59:50:c9:79:b7:85:5b:5a:b1:35:bd:5c:4a:14:a5:31:
f5:5d:18:47:12:c9:71:1d:b0:9f:61:39:ae:2f:c2:d2:f5:3b:
bd:11:2e:65:c9:5a:1b:bd:bb:1c:a0:24:82:42:88:99:85:e5:
30:09:af:1e:34:be:5f:6a:34:d0:ba:1c:05:cd:a0:de:15:62:
a7:19:d0:e4:56:92:61:1e:ae:c0:85:4a:60:0e:56:e2:09:e5:
db:00:3c:d7:7e:12:23:b2:eb:46:41:48:77:8f:6d:c2:6a:d5:
30:86:b6:33:85:2f:42:68:aa:13:c0:3b:d6:03:fe:42:62:05:
20:a1:89:14:7f:19:7c:fb:34:50:3a:f7:1a:2f:09:00:58:9c:
54:50:f1:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net