Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa
File: pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa (raw, json)
Hash identifier: 8qojOgWb70IVU0ElW5/Sut6REATPavh52G81zhsEHj4=
Subject key identifier: A5:7E:04:52:07:83:34:D5:A2:DB:88:46:6F:B5:6C:D4:B4:B0:54:55
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019426D9C7DD847971E20B7783F40076E6AE
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 95.142.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c7:dd:84:79:71:e2:0b:77:83:f4:00:76:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a57e0452078334d5a2db88466fb56cd4b4b05455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:a2:1f:59:f7:78:11:3d:b0:d1:1c:a4:02:
19:b0:d7:e4:04:5d:01:2a:ab:ed:f6:77:f3:80:eb:
2d:c3:4f:19:12:f6:70:55:28:a0:a6:c8:29:50:0c:
e4:fd:72:9b:36:2a:28:7b:da:60:f5:96:de:9f:70:
9a:26:a4:34:0a:9b:ab:14:d1:af:4a:8f:e8:5c:21:
98:0e:48:fd:22:51:1f:42:fa:f6:c5:98:8e:9e:94:
7c:be:0d:89:e4:ae:cb:28:26:08:67:17:f9:9a:09:
44:3e:ed:ca:d7:d7:d6:82:b5:89:aa:ab:8f:b7:63:
8c:0d:e3:b8:b3:d0:4b:28:45:38:a5:79:c3:0c:29:
77:63:e4:4d:6e:4a:45:5c:6d:48:95:71:54:21:85:
d5:f7:7a:35:e2:85:3d:ea:16:6a:07:ed:d5:20:29:
6a:02:f8:fb:ee:3d:1e:3c:13:bf:3e:c0:ef:8d:00:
a9:d6:2d:e1:ce:47:92:f7:26:01:dd:01:f8:de:1f:
b4:5e:59:7b:3c:99:fe:c4:ff:22:c7:5d:fc:f5:3b:
d1:de:87:18:03:ba:f7:63:f9:da:0d:49:63:a9:87:
a9:b5:29:b8:37:63:62:ce:bf:48:85:42:18:75:e5:
75:c6:18:4d:43:87:5c:6f:ef:89:db:6a:93:fb:3b:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:04:52:07:83:34:D5:A2:DB:88:46:6F:B5:6C:D4:B4:B0:54:55
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b2:63:df:48:39:71:ef:8a:8c:24:c9:ac:94:36:d9:64:6c:
d8:43:dd:29:ca:50:97:3d:77:80:6d:55:ec:a4:d0:07:5c:52:
53:f7:e5:11:5b:b6:4f:e5:86:7d:46:b9:59:e7:0a:f5:6c:ac:
37:bb:fc:b9:b7:a4:4e:38:3d:cb:2a:11:71:9b:ba:cf:7e:b6:
b8:a3:6e:61:c1:df:8d:9a:bc:69:a7:fb:fc:2c:e0:37:6d:e1:
ff:4c:ea:ce:e4:8b:62:74:52:3b:ff:ef:ef:ce:e8:6a:40:f0:
76:90:0c:05:fe:d9:38:20:26:4a:44:96:97:a9:a2:78:ff:a7:
a9:1b:aa:09:49:8a:d5:9e:e4:ee:e0:26:0f:a2:c0:73:ed:b3:
ca:a6:74:49:d0:e9:6f:ac:9a:6a:64:ed:44:11:56:fb:7c:89:
0d:0c:40:5f:9e:a9:42:51:cd:c2:43:6c:4c:12:5f:e5:c2:db:
46:ef:63:36:0d:7e:68:f0:6c:b0:9a:67:54:08:28:b2:69:30:
16:b9:da:36:e3:ff:37:a2:28:ad:ca:f8:e3:7f:d4:8f:1a:a2:
47:ec:5f:c4:af:18:f6:a8:c5:46:f5:28:85:c2:45:1c:c1:54:
0d:4e:ee:78:6a:38:a3:18:57:3a:23:6e:ba:f3:a1:ce:49:a5:
55:c1:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:26 2025 by rpki-client