Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7bwXhpAggJ_eID4STuVsUUonWWE.roa
File: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (raw, json)
Hash identifier: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=
Subject key identifier: ED:BC:17:86:90:20:80:9F:DE:20:3E:12:4E:E5:6C:51:4A:27:59:61
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D718E9D48CA800D48B9EFBC0CF4AA0
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7bwXhpAggJ_eID4STuVsUUonWWE.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 95.172.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:18:e9:d4:8c:a8:00:d4:8b:9e:fb:c0:cf:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edbc17869020809fde203e124ee56c514a275961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:5f:20:21:b0:c5:cf:9a:72:37:ea:35:8a:
b3:bf:c0:2a:7a:3f:3c:cc:6e:84:1d:b5:98:4b:3c:
ae:0b:10:2c:01:00:9c:e6:4c:ec:55:2b:56:b8:3e:
cd:10:a9:94:40:c6:6b:00:4f:6e:9b:a1:10:4a:20:
ae:80:2d:fc:37:c2:47:ef:ed:1f:ed:54:ef:72:3b:
f7:7d:5b:46:98:bd:24:9e:f9:d8:3b:7d:89:a8:b6:
0f:0c:4e:5a:8a:69:3e:56:6c:fb:f8:1a:29:c4:15:
e3:45:a8:87:37:e1:a5:90:8d:21:fe:e3:31:24:d1:
c3:9c:12:df:fc:89:55:5d:1a:66:46:51:bf:69:11:
05:62:02:49:41:03:26:82:12:2c:9e:2f:d2:52:92:
2d:02:cb:19:a8:14:0b:0e:20:29:4c:f9:5b:80:31:
23:39:50:b2:d7:90:ac:c1:19:2d:ce:24:b8:ca:7d:
c9:40:25:33:89:7e:a5:ae:7d:69:3f:6f:aa:54:46:
95:b6:8f:9f:19:cc:36:e4:da:ab:4b:e0:7b:12:bd:
7b:1e:ba:dd:78:48:05:aa:cd:96:1b:ac:5a:ff:ce:
86:4c:36:8c:a6:54:8b:67:f9:49:df:18:88:cc:2b:
da:b7:14:f9:0c:ae:7e:8e:8f:ed:f5:88:1a:3c:86:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:17:86:90:20:80:9F:DE:20:3E:12:4E:E5:6C:51:4A:27:59:61
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7bwXhpAggJ_eID4STuVsUUonWWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.172.76.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b5:37:fe:95:78:66:0a:38:f1:f9:6f:a4:79:42:f1:55:86:
59:a2:1c:98:e8:02:2e:5d:a5:c9:af:42:dd:6b:2b:bb:db:d8:
4e:54:8c:a2:1b:2c:40:60:55:a5:a4:de:2f:1d:7c:ec:c7:78:
91:c4:17:1b:f9:33:61:d1:e7:62:27:b3:9d:13:c1:04:e9:bf:
db:30:3a:e2:ae:a5:b2:d7:b2:2e:8d:ac:9f:12:37:5e:20:62:
ac:af:01:9a:1d:c9:bf:27:94:9b:0f:40:95:e9:2b:18:b0:ee:
e2:69:8e:88:88:59:10:9e:9e:13:4c:e6:84:0e:2c:37:13:61:
54:c5:44:85:cd:62:95:59:8a:3a:95:1f:38:f6:b3:0b:68:aa:
45:13:4d:9a:66:4e:7e:eb:12:03:70:43:93:af:4f:89:6e:68:
fe:1a:43:09:d3:74:68:63:12:67:96:f9:d6:a5:1c:73:26:e7:
ca:6e:7d:49:ec:ab:75:6b:08:2b:d3:ad:e1:13:8a:68:68:a9:
20:1c:0a:49:e4:fa:29:35:3a:18:bf:db:60:c5:f8:d1:79:11:
1f:bf:59:af:cb:57:04:ac:29:08:62:2a:df:73:ea:0d:b0:12:
07:98:a9:98:9b:c4:b9:45:3a:8e:1a:1e:6b:20:62:6b:95:5d:
59:83:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:42:14 2025 by rpki-client