Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1-yC-3OHn3v-G1smlX40MjBLjtIk.roa
File: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (raw, json)
Hash identifier: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=
Subject key identifier: FB:20:BE:DC:E1:E7:DE:FF:86:D6:C9:A5:5F:8D:0C:8C:12:E3:B4:89
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 019428280429FD3D3F550E5DF76B61A0DE79
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1-yC-3OHn3v-G1smlX40MjBLjtIk.roa
Signing time: Thu 02 Jan 2025 17:54:58 +0000
ROA not before: Thu 02 Jan 2025 17:54:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 95.140.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:04:29:fd:3d:3f:55:0e:5d:f7:6b:61:a0:de:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 2 17:54:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb20bedce1e7deff86d6c9a55f8d0c8c12e3b489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:d0:0a:1a:57:e4:29:a3:f6:61:ae:70:b9:
61:e9:bc:fb:e3:b5:66:e7:c3:70:43:0f:c1:44:b0:
63:d6:3b:7d:49:7f:39:d7:b0:d7:05:d2:b8:75:d6:
3a:39:84:f2:5d:a6:8e:3c:1d:70:bf:cc:01:d7:7c:
dc:1a:6f:bf:7f:d0:56:6e:a9:97:c3:7a:38:82:30:
b0:c8:42:fe:77:bc:ee:fa:a1:bf:cf:9a:12:e0:97:
65:21:c7:b1:32:00:1a:ce:8c:20:91:96:12:a0:28:
9d:05:81:e1:43:3f:24:ed:28:58:08:fc:8a:8a:a8:
b2:dd:dc:a2:ed:5e:e4:3f:26:b5:e0:86:75:c6:53:
09:00:ac:f8:a4:aa:0e:1d:0b:03:8e:68:6d:0a:37:
56:4f:a1:15:b3:4c:a1:10:fb:d0:90:a8:f3:67:7d:
b4:29:52:7b:0a:af:ce:e9:69:0d:70:a7:2c:e1:af:
f4:7e:79:88:e3:82:9b:63:1e:55:0f:c8:53:ef:09:
aa:7c:68:89:cb:26:9e:13:8e:d6:3e:2e:18:cc:ff:
49:a0:f0:4f:23:be:cb:0e:8e:93:f0:30:96:a5:48:
e6:59:29:cc:bd:cb:56:c0:d0:98:3f:cc:76:d1:d4:
e9:40:ba:09:bd:aa:9e:67:c9:40:55:70:52:d5:64:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:BE:DC:E1:E7:DE:FF:86:D6:C9:A5:5F:8D:0C:8C:12:E3:B4:89
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1-yC-3OHn3v-G1smlX40MjBLjtIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.148.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:21:57:38:10:0e:dc:ff:76:2f:72:bc:a7:1e:41:12:7e:55:
6e:eb:2f:e8:ec:d1:c9:f6:a4:09:12:f9:32:90:ca:44:fe:e7:
0d:f3:4e:b8:48:b7:d1:cf:74:fd:64:ee:25:79:12:bb:9a:e4:
b1:58:4a:4f:1e:54:3b:3a:01:99:18:3f:62:2b:10:73:c1:d6:
58:3f:9a:7e:f4:eb:54:ef:f6:58:f5:09:ca:7a:11:ec:9c:92:
12:0b:f3:62:32:b2:e5:aa:8b:97:ef:4d:d6:6b:4b:8b:3e:b0:
55:5d:0d:63:aa:b3:09:73:f6:b4:9b:d2:54:fd:ca:76:e2:a7:
e1:89:90:66:a7:a1:6f:7a:8c:30:0b:bf:e3:4e:84:cb:29:ad:
7a:48:b0:55:8e:59:75:d1:71:09:16:7c:55:1b:e5:8d:6e:fb:
dd:02:a0:42:76:6a:93:b2:7b:70:15:e4:71:f4:c2:d7:cd:ce:
13:73:fa:b1:18:ad:a8:f1:7b:e5:ad:c3:b7:9e:a9:7e:23:d7:
e4:79:f0:3a:58:7e:21:26:d2:67:77:3e:35:6b:22:12:98:05:
0a:2b:6d:41:6c:53:e5:25:17:97:dc:70:d8:0f:08:9f:07:a2:
3e:8d:b6:a3:d8:71:22:d6:8c:a1:18:c3:e8:87:10:b5:76:de:
47:ee:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:44 2025 by rpki-client