Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/AIQGxZR891rSmBVRWPkroU6qIS4.roa
File: AIQGxZR891rSmBVRWPkroU6qIS4.roa (raw, json)
Hash identifier: tOfNhd24yOv+46VKBC0lmSjrIB+LKTxW7Tn9fRNCeag=
Subject key identifier: 00:84:06:C5:94:7C:F7:5A:D2:98:15:51:58:F9:2B:A1:4E:AA:21:2E
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 0194C6A6798406C7B9FAB93832B1A35FC645
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/AIQGxZR891rSmBVRWPkroU6qIS4.roa
Signing time: Sun 02 Feb 2025 12:33:06 +0000
ROA not before: Sun 02 Feb 2025 12:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 95.128.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:a6:79:84:06:c7:b9:fa:b9:38:32:b1:a3:5f:c6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Feb 2 12:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=008406c5947cf75ad298155158f92ba14eaa212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:97:11:c7:21:aa:cf:d1:20:36:84:76:5c:
39:53:0d:bb:4c:c6:31:2b:c3:1b:15:0b:64:66:2c:
30:e6:b8:4b:ef:6a:8a:a3:b2:1d:21:76:ca:10:39:
a3:a1:d0:55:69:67:44:01:a8:df:aa:4a:a0:e9:38:
e1:01:31:ef:dd:cb:0d:ea:ef:d7:89:4f:44:2e:d5:
4e:b3:2a:11:fc:49:f3:7a:ec:c0:9c:3b:3f:36:99:
c8:d1:4d:e1:a9:48:ba:c1:a6:27:f1:36:0a:06:41:
75:7a:b5:ca:1f:b5:7e:69:8f:09:58:d5:d8:21:41:
76:75:eb:08:29:d7:ee:1e:df:8d:0b:4b:38:02:84:
9d:c5:ba:56:35:39:2c:92:5a:ee:bf:ef:61:b5:63:
1e:fd:5a:c3:0b:ff:ba:3c:a7:ee:48:f6:b2:27:88:
d1:fb:ab:91:a7:0d:dd:4b:46:df:b1:7c:ac:c2:ba:
27:4f:90:1b:9b:a4:e2:a3:e5:58:a4:db:bb:6b:0d:
36:01:f8:51:d8:79:b1:90:09:09:a2:d0:c7:cd:8c:
b4:97:e8:29:12:ba:f0:66:a9:56:27:9c:ad:7c:9e:
fd:7c:fd:8f:0f:7b:68:ba:50:cf:a4:97:61:3c:67:
df:56:c0:13:a8:3e:bf:4f:0b:3f:89:88:f5:fe:70:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:06:C5:94:7C:F7:5A:D2:98:15:51:58:F9:2B:A1:4E:AA:21:2E
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/AIQGxZR891rSmBVRWPkroU6qIS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b4:6b:0d:30:96:4f:8c:7a:ac:9f:87:24:c8:6d:02:56:90:
bc:bc:e2:43:f6:74:fc:1b:3a:cd:f1:7d:18:65:86:40:6f:00:
b4:75:56:cc:73:08:e9:1c:08:0a:0f:4a:90:86:ee:eb:a9:ea:
e1:58:c6:ff:31:23:88:46:99:48:f6:dc:17:4a:5c:04:fb:52:
ea:40:d9:ce:83:30:38:6b:4c:70:a4:10:1a:fc:98:e3:66:aa:
27:32:13:fb:66:14:c9:14:97:8b:8c:c7:84:3b:11:c1:de:75:
5b:65:12:a5:2b:58:22:b2:c6:06:42:32:34:bc:50:97:fe:2c:
f5:d8:f7:f3:a7:15:3f:3e:e3:38:05:00:51:a6:56:65:c4:52:
48:9d:39:66:f0:fb:02:ee:f9:e6:ad:a1:81:07:93:3f:ba:a4:
51:2b:46:f4:86:90:c6:28:c4:8e:ab:2c:4a:58:e1:96:9e:32:
1a:d7:de:60:71:3e:03:54:de:2f:83:7a:99:9a:45:62:47:6e:
82:74:d0:5c:ac:5e:e3:e8:f1:3c:b5:2d:b0:fb:7f:e0:a7:aa:
3f:43:c0:ff:e5:ae:5f:91:1b:3c:36:b3:19:60:78:2c:f6:2f:
ff:c0:05:ea:57:2f:e0:a4:06:69:a8:45:25:ec:c3:45:da:c4:
6a:53:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:28 2025 by rpki-client