Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/kGx75eT4M7eS0enP1xK2ETa0WM8.roa
File: kGx75eT4M7eS0enP1xK2ETa0WM8.roa (raw, json)
Hash identifier: ApEXjgHKCm6qPnP2HDLzkpL1va3q46Q0GqgxdoZcu4w=
Subject key identifier: 90:6C:7B:E5:E4:F8:33:B7:92:D1:E9:CF:D7:12:B6:11:36:B4:58:CF
Certificate issuer: /CN=a609c33af20168169031255daee2d83d2662c990
Certificate serial: 35D40B6C
Authority key identifier: A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/kGx75eT4M7eS0enP1xK2ETa0WM8.roa
Signing time: Sat 01 Jan 2022 11:02:12 +0000
ROA not before: Sat 01 Jan 2022 11:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 95.128.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903089004 (0x35d40b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609c33af20168169031255daee2d83d2662c990
Validity
Not Before: Jan 1 11:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=906c7be5e4f833b792d1e9cfd712b61136b458cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e8:2d:b2:45:48:fa:9e:b6:52:a6:67:de:66:
9f:81:5b:c5:85:f4:66:dd:fd:c7:d8:57:a5:c5:9a:
8d:15:52:b4:26:b1:b1:b7:24:3b:22:a3:4c:85:76:
ec:15:10:7a:8c:85:33:42:34:87:80:39:f3:93:b5:
30:20:06:62:26:4e:2e:19:56:37:6c:66:d4:ee:ad:
84:08:61:c1:f8:88:26:27:72:83:5f:bd:52:bb:f9:
4a:a9:bd:6f:f8:42:57:22:79:5b:36:59:24:ad:b8:
84:3a:80:b5:d5:0b:2d:7d:62:fd:0c:15:f0:4a:a5:
5b:1d:37:7a:95:19:c0:57:3d:37:ad:46:68:ee:f8:
c7:39:d3:5e:fd:c0:da:04:b1:82:6a:7d:ee:02:1f:
56:8b:bc:5a:34:90:d7:8d:3d:29:8d:e5:10:ff:fc:
47:03:84:3a:b8:ee:c9:52:95:fd:fd:26:e2:ff:da:
d0:22:d6:34:55:68:d6:fc:f7:8b:56:b5:13:62:e1:
3b:5f:d6:ce:a1:3d:d7:6d:86:ee:7e:62:6c:b3:e6:
90:d5:77:f6:f9:3f:cf:20:be:8d:d0:6a:c9:7d:d0:
47:92:05:45:f1:a6:e7:a9:87:f0:fe:17:97:20:c2:
9c:88:63:4d:25:bd:22:ae:fc:70:c8:37:df:76:2c:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6C:7B:E5:E4:F8:33:B7:92:D1:E9:CF:D7:12:B6:11:36:B4:58:CF
X509v3 Authority Key Identifier:
keyid:A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/kGx75eT4M7eS0enP1xK2ETa0WM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/pgnDOvIBaBaQMSVdruLYPSZiyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f7:25:fe:e3:2d:39:4a:84:f0:c0:e9:6b:1d:88:2c:e9:03:
85:5d:49:0a:91:a7:9f:53:b4:94:53:88:bf:a5:b3:f5:db:07:
b8:1c:47:d6:b6:a8:19:6d:8e:2e:6b:a4:51:ad:be:3e:8c:67:
bb:c1:17:f0:c5:50:84:7b:c2:08:fc:4d:a1:9c:47:e3:96:ac:
c4:73:a2:b9:2d:c1:cd:76:f0:67:e0:c6:d5:26:49:bb:8d:4d:
aa:2b:f7:7e:52:bf:7f:7b:15:1e:b7:af:73:31:0d:23:55:29:
90:f0:ff:16:8e:2f:05:5e:4f:45:f9:9e:53:a7:f7:bb:36:ff:
56:2c:e0:7e:db:59:10:37:f6:c7:47:5b:fe:d2:8d:03:26:03:
1f:1c:c5:ec:77:fc:4b:42:3c:bf:dd:80:50:27:cc:43:a7:2c:
8b:84:38:6a:85:27:a5:01:10:8b:9e:11:72:c2:d8:9d:c8:f6:
9c:a8:84:51:1a:62:cf:53:b8:55:a0:72:6e:22:2a:67:fe:ba:
28:d8:86:ba:b4:5d:4a:5a:cc:12:0c:fe:d9:91:b1:f0:a2:ae:
bc:66:64:c9:31:ca:27:93:0d:8d:df:d0:ae:c4:cc:a5:54:b6:
20:01:71:44:63:60:b8:7d:35:71:9f:d8:a2:da:e5:bb:ac:16:
34:7b:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:35 2025 by rpki-client