Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/z7LjSY9IyoL53AOgGnV8Qaw97xU.roa
File: z7LjSY9IyoL53AOgGnV8Qaw97xU.roa (raw, json)
Hash identifier: a4jUunmGnlWbT5PrLHam5aU5VusrdNO2Ei+21JPpuWI=
Subject key identifier: CF:B2:E3:49:8F:48:CA:82:F9:DC:03:A0:1A:75:7C:41:AC:3D:EF:15
Certificate issuer: /CN=ae90bf67af3f93b3b37d4afc594ad57d25cfdd56
Certificate serial: 01259238
Authority key identifier: AE:90:BF:67:AF:3F:93:B3:B3:7D:4A:FC:59:4A:D5:7D:25:CF:DD:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpC_Z68_k7OzfUr8WUrVfSXP3VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/z7LjSY9IyoL53AOgGnV8Qaw97xU.roa
Signing time: Sat 01 Jan 2022 13:05:59 +0000
ROA not before: Sat 01 Jan 2022 13:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201211
IP address blocks: 95.130.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19239480 (0x1259238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae90bf67af3f93b3b37d4afc594ad57d25cfdd56
Validity
Not Before: Jan 1 13:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfb2e3498f48ca82f9dc03a01a757c41ac3def15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:ed:13:7f:e9:8b:45:5a:03:c6:a4:06:27:
8e:73:09:e6:53:e2:e3:3c:f1:1e:1b:d1:2d:6c:1e:
bb:bc:c0:32:ea:14:91:87:ce:ea:46:16:c6:23:be:
8f:da:60:a3:da:a9:fb:68:71:31:b4:a2:da:09:f1:
35:17:a6:dc:be:78:95:23:81:10:82:ac:9b:23:65:
2d:44:b9:99:35:c4:61:4d:34:a6:bc:23:e9:c5:a8:
df:e3:94:df:8c:08:51:a4:cf:09:de:95:ab:ef:72:
97:db:8a:ea:af:f2:63:42:07:a7:1d:e8:8c:89:db:
a3:f2:e4:33:9a:bb:18:95:e1:65:2e:01:89:6c:18:
4c:84:41:9d:22:4a:8f:be:bc:a4:d1:8b:19:64:b8:
3c:f1:c2:5c:e4:b0:92:bb:07:26:7b:c9:98:6c:1a:
b4:f7:7b:60:15:1a:db:d3:ed:4b:13:02:12:e9:91:
d4:6e:4f:7e:61:24:93:10:97:f4:cb:1c:30:6b:a9:
82:d4:64:30:fd:18:90:fd:05:ba:24:02:c7:88:f3:
bd:a9:a5:54:64:77:4a:e3:5e:f4:83:4e:4d:c4:c3:
db:28:ab:63:5b:87:d5:a2:31:a4:30:b3:58:aa:23:
03:3d:e6:a2:35:25:7a:6b:f4:4d:ce:b0:77:e9:95:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:E3:49:8F:48:CA:82:F9:DC:03:A0:1A:75:7C:41:AC:3D:EF:15
X509v3 Authority Key Identifier:
keyid:AE:90:BF:67:AF:3F:93:B3:B3:7D:4A:FC:59:4A:D5:7D:25:CF:DD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpC_Z68_k7OzfUr8WUrVfSXP3VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/z7LjSY9IyoL53AOgGnV8Qaw97xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/rpC_Z68_k7OzfUr8WUrVfSXP3VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.226.0/24
Signature Algorithm: sha256WithRSAEncryption
38:da:ae:3c:13:cc:39:b1:87:fc:24:7e:d8:51:f6:37:38:72:
02:ce:67:41:43:f8:ca:fb:12:30:24:80:59:ac:4d:40:6f:72:
b3:8e:6d:36:2a:4d:49:a3:bb:d8:18:10:52:09:11:8c:9d:bc:
a5:fd:14:6b:b6:1c:fb:d0:72:74:dd:05:a5:94:35:a3:81:e9:
86:3a:2f:33:39:b1:f3:99:a0:21:c8:83:59:82:a8:b8:84:d8:
a8:ca:18:2e:4c:84:42:27:3b:92:74:2b:46:d1:fb:76:f9:ed:
81:2e:c5:3a:3b:e7:83:88:a1:f4:ea:fa:f4:7e:f8:50:08:7b:
33:54:5d:ec:b5:77:ed:2e:20:18:ae:34:f5:36:d1:ad:c8:48:
03:62:1f:14:b2:db:9b:7b:60:24:14:2a:ae:dc:31:f9:11:4e:
79:e9:a4:d9:7c:d7:d3:87:ca:f2:57:c2:0c:9a:77:93:7b:b2:
59:33:f1:61:b6:47:84:13:b1:0d:b3:3d:f2:fd:dc:8a:ff:bd:
31:be:de:45:84:ee:19:77:8c:8d:23:87:b5:6d:38:c6:2d:d6:
a4:99:cc:0b:e8:57:56:6f:f6:36:bd:50:d9:69:9a:99:6a:ec:
07:04:31:fe:05:73:65:fc:7e:17:84:ad:54:8f:57:04:97:33:
1f:87:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:35 2025 by rpki-client