Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EpGUqveN8_iwqXtX3loQqZpefjQ.roa
File: EpGUqveN8_iwqXtX3loQqZpefjQ.roa (raw, json)
Hash identifier: BK7p4b3/2gbXuD0eD7vqsFTJ+r23upun/RghpY97TiM=
Subject key identifier: 12:91:94:AA:F7:8D:F3:F8:B0:A9:7B:57:DE:5A:10:A9:9A:5E:7E:34
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B5AE10E566DC087796C2445FDFA50
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EpGUqveN8_iwqXtX3loQqZpefjQ.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62386
IP address blocks: 95.158.136.0/22 maxlen: 24
95.158.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5a:e1:0e:56:6d:c0:87:79:6c:24:45:fd:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=129194aaf78df3f8b0a97b57de5a10a99a5e7e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:0c:b9:b6:11:70:33:ec:1f:39:f2:82:cf:
a5:f2:1a:f7:0c:24:e7:dc:70:4c:28:c8:84:27:1a:
95:4c:87:28:62:03:1d:4b:e4:3a:79:af:16:6a:07:
fc:f8:26:ff:d0:1f:7e:2b:38:b0:89:8a:ed:af:ea:
7e:67:d3:a2:d9:21:ef:ea:55:3c:a8:f5:ad:8d:9b:
a5:d0:ff:4f:fd:1c:4a:94:9e:39:5e:d5:26:f8:8f:
e3:56:bf:06:d2:90:e1:17:f3:f0:07:b7:69:e6:7f:
7b:66:81:55:14:91:80:77:dc:6a:b8:18:68:92:16:
64:2e:9e:87:39:b0:a5:ce:6a:36:05:f1:94:2d:c2:
8f:f5:21:5b:b6:80:ac:e7:c4:7a:55:a0:33:1d:64:
8d:b2:89:98:f8:16:58:80:5c:0b:02:46:3c:3b:fb:
c8:15:e3:26:df:a2:72:1c:fe:01:99:d0:e5:a7:ea:
4d:01:bc:50:96:fc:74:1d:61:d7:28:c1:1b:32:1b:
2e:25:47:b6:a8:ca:56:30:9d:3f:c3:1a:e0:8f:c0:
f0:4b:4e:01:4f:8f:56:a1:20:9f:3e:ef:2c:9b:eb:
e2:b6:bb:43:f8:d4:7c:6f:79:4b:5b:38:43:ec:d0:
cd:54:85:c0:66:48:02:59:93:e9:d8:da:72:2c:0e:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:91:94:AA:F7:8D:F3:F8:B0:A9:7B:57:DE:5A:10:A9:9A:5E:7E:34
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EpGUqveN8_iwqXtX3loQqZpefjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.136.0-95.158.141.255
Signature Algorithm: sha256WithRSAEncryption
5f:a5:6d:5f:7d:c4:1e:cd:e1:0f:44:f7:11:f2:18:45:f3:56:
de:43:59:8b:33:5d:94:10:08:89:da:f1:9e:db:87:ed:9b:77:
e6:21:74:8c:43:83:b4:81:bb:bf:af:98:0b:9c:25:26:ef:c4:
95:d9:05:09:47:42:66:56:2a:2e:f5:93:b5:24:ed:35:44:c5:
04:52:b0:70:1e:62:11:97:29:67:96:31:8e:cd:59:c0:72:ce:
5d:55:68:b3:36:f6:79:a0:82:dd:89:50:6d:45:c2:21:9e:8d:
d6:b2:ab:1a:6e:5a:cd:54:3e:b0:38:2d:d6:42:db:d8:7f:92:
15:bb:f6:54:7f:8d:5c:61:39:70:7d:0f:5e:bd:fc:4e:c6:39:
3e:69:6c:50:8f:b3:c7:d2:24:f0:7b:62:37:8e:64:be:57:53:
b0:1f:20:f7:eb:5b:f0:ca:99:db:80:7d:09:15:29:0c:0f:7c:
3f:84:8f:75:d3:f1:53:b3:4a:1c:2c:19:52:cb:a8:d6:f2:5d:
b5:c4:e2:e6:64:69:c3:d3:7b:4c:71:90:f2:f6:8f:c9:b7:ae:
21:9e:d4:0b:81:20:e1:4d:b2:e5:af:01:91:16:ac:9d:2f:3a:
d0:77:4b:64:c5:15:9b:30:4d:a3:f5:9e:fa:26:51:b6:76:0f:
3e:25:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:31 2025 by rpki-client