Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/tONpcnjfR_-MsVEafiNaGJ4uDm4.roa
File: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (raw, json)
Hash identifier: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=
Subject key identifier: B4:E3:69:72:78:DF:47:FF:8C:B1:51:1A:7E:23:5A:18:9E:2E:0E:6E
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 0194266BD9502F42055626687F90C3A0358E
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/tONpcnjfR_-MsVEafiNaGJ4uDm4.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 195.95.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d9:50:2f:42:05:56:26:68:7f:90:c3:a0:35:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4e3697278df47ff8cb1511a7e235a189e2e0e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:ff:8e:91:1f:20:21:1b:dd:0f:1e:ab:17:
a4:fe:ed:f6:ad:16:04:30:53:c8:ca:02:0c:ce:d8:
1f:db:9c:18:aa:65:9e:f8:31:01:3c:f4:6c:e5:e5:
30:7c:a2:1d:28:5c:26:25:af:d8:42:d4:22:a8:80:
2f:a0:a1:d1:72:34:3d:cc:c1:68:33:5c:24:2a:2a:
be:24:6b:b1:6a:60:24:e8:34:09:29:62:e2:91:8d:
96:81:d8:09:18:4b:60:bf:73:f7:9f:0b:75:72:cd:
fd:76:cd:42:46:27:5f:3a:31:f5:b4:f6:a8:ec:64:
63:d2:9d:c6:8d:d8:90:88:e3:d9:d9:b9:d8:0e:7c:
bf:3a:09:1e:0b:30:38:e3:4f:ea:6b:97:f5:86:b9:
b7:a0:29:85:b2:b0:cf:aa:ab:9f:70:b2:7d:08:7e:
b2:a7:45:b2:4a:f7:ac:8d:19:b8:be:5c:d1:20:07:
9e:ab:cc:10:8d:0a:59:1c:f8:d0:24:3a:81:42:c4:
62:dd:c7:24:95:e8:19:3a:19:d5:18:4c:4c:25:ae:
88:ee:f8:75:c4:03:24:e1:fc:33:8a:92:52:22:43:
3c:b6:f1:13:fb:6b:ca:6a:18:a4:08:58:79:db:e3:
8a:59:b0:16:56:4d:5e:76:0e:de:f6:f6:b5:4c:0f:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:69:72:78:DF:47:FF:8C:B1:51:1A:7E:23:5A:18:9E:2E:0E:6E
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/tONpcnjfR_-MsVEafiNaGJ4uDm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.135.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f2:57:31:b0:5b:5c:0a:24:e6:4c:2d:f4:9a:f3:d0:c9:be:
c4:7b:72:5f:45:ba:79:bb:44:14:6f:83:69:8e:b6:6a:72:91:
58:dd:f0:80:f5:79:99:99:16:52:da:2d:08:c2:5d:c1:85:1d:
11:ad:ec:7f:04:c7:8b:63:6f:95:82:a1:6b:c7:69:39:1f:f3:
09:d0:96:3a:a2:e1:e0:7e:8f:73:c1:05:92:b5:11:3f:2f:75:
8c:b5:d2:38:20:48:cb:5b:8b:9e:54:4f:c0:1f:6f:6f:49:50:
6f:df:08:7f:14:b3:6e:96:d7:aa:e1:9f:e3:e1:33:3b:0a:a9:
98:1b:58:ed:f5:f0:2e:57:5e:ff:6a:8f:f0:97:29:c6:e8:77:
27:9d:85:6c:08:d3:5e:7e:5c:d9:23:0e:8b:88:2a:0b:c8:a9:
ea:30:57:85:c6:df:ed:dd:aa:c2:8f:66:e1:b7:15:53:9b:aa:
aa:20:83:26:14:f8:7e:92:24:c8:a4:39:da:36:2a:8b:6f:ac:
eb:03:7b:90:a2:50:17:0b:cd:96:63:99:b6:b7:8b:e1:05:f0:
7d:59:49:9d:3e:48:c7:01:9a:7d:a7:b2:d9:56:b6:91:2b:b0:
bd:f3:d0:b5:31:4d:37:b4:9d:b2:c1:ce:c6:b9:3d:b0:50:ba:
32:05:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:16 2025 by rpki-client