Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/iT5JpsMQzoMkf4XPO_VvntnOa0w.roa
File: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (raw, json)
Hash identifier: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=
Subject key identifier: 89:3E:49:A6:C3:10:CE:83:24:7F:85:CF:3B:F5:6F:9E:D9:CE:6B:4C
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019422FBA2F8230D51D34E4C386A9CFA9CDD
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/iT5JpsMQzoMkf4XPO_VvntnOa0w.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9
IP address blocks: 95.141.135.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a2:f8:23:0d:51:d3:4e:4c:38:6a:9c:fa:9c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893e49a6c310ce83247f85cf3bf56f9ed9ce6b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:84:bb:48:46:58:03:40:ee:c3:f0:37:ef:
21:9d:af:c9:92:de:17:38:5c:8d:ad:f4:88:22:54:
fc:76:d2:e5:31:98:0a:ce:b9:03:e4:72:f7:78:09:
62:f2:e2:5d:fd:7d:eb:b4:41:4d:8d:b7:4d:5e:85:
ac:81:fb:d6:0c:5d:0e:5d:15:aa:ec:c0:e6:f7:4e:
fc:e3:11:c3:6d:0b:a2:05:36:86:9f:d5:2c:73:1d:
ec:54:e3:aa:f4:bc:bd:fb:7f:ff:d6:5a:ff:38:cf:
e2:1b:2e:e6:86:24:fe:68:05:40:fb:29:e0:4c:8c:
7f:83:2d:8b:32:4b:f5:4e:96:e3:6e:45:5f:86:79:
5a:d6:ef:ab:9b:8f:16:9e:59:60:ac:bd:91:57:a0:
f9:9a:25:7f:e8:a1:79:2f:8b:1a:86:fd:ab:e2:2d:
42:eb:79:e1:f0:0c:84:bb:71:be:d4:fc:1f:96:23:
8e:72:44:83:6d:6d:e0:f0:3a:8c:3f:3d:b3:d3:c4:
8f:0c:f4:ef:6d:da:44:05:fc:9f:22:e2:fa:79:b7:
80:d0:5b:8b:29:4b:bd:ff:16:bf:cb:95:37:f6:a5:
e0:06:32:09:bc:61:2d:c3:ab:aa:c6:cc:3b:fc:4a:
9f:46:df:3f:a1:d6:d9:db:96:ec:41:ac:85:de:f6:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3E:49:A6:C3:10:CE:83:24:7F:85:CF:3B:F5:6F:9E:D9:CE:6B:4C
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/iT5JpsMQzoMkf4XPO_VvntnOa0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.135.0/24
188.0.131.0/24
188.0.144.0/24
188.127.37.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6c:41:dd:ba:5a:3f:e4:da:09:33:ef:76:43:20:2c:f8:27:
08:2f:ae:ed:06:29:19:61:3d:20:a4:d3:9c:ad:b3:98:19:b0:
cc:ab:65:b7:6b:80:ab:ec:da:ba:af:b3:ea:8c:93:f6:d3:be:
78:93:76:5b:c9:64:6e:46:a7:9f:f8:92:3e:90:f4:a1:d4:ad:
cf:ad:5c:9f:38:45:f0:99:f1:0b:76:75:3a:30:7f:b4:95:b7:
78:6b:cc:29:9c:5a:14:ea:0f:88:7b:d8:26:8d:65:a1:53:a8:
f3:34:af:e4:d1:3d:c3:0e:ac:ae:0e:7d:ad:0c:7f:44:55:47:
d1:fd:b9:23:81:c2:94:f9:94:01:ea:de:ce:fb:f3:a8:85:38:
d9:b2:e2:85:36:6b:51:3d:99:79:78:5f:e5:33:6d:57:d5:3b:
49:b6:2a:95:ef:9d:ee:f5:d3:e7:8e:5f:0b:90:99:02:12:cb:
09:88:ea:6d:c8:21:01:1d:6f:34:7d:70:85:18:63:02:9d:f1:
22:7e:6e:75:4d:4d:71:35:43:a6:2c:2c:68:7a:24:e2:56:9b:
50:02:09:6c:fa:ec:25:e7:3b:1e:a0:c8:18:f0:96:52:b7:2a:
ca:17:ce:70:34:c8:06:ac:91:74:63:ee:06:4b:16:81:0f:d0:
3c:7c:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:30 2025 by rpki-client