Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PEt9_U-F1a1U00hrhlYlIGNC9gM.roa
File: PEt9_U-F1a1U00hrhlYlIGNC9gM.roa (raw, json)
Hash identifier: JucD7ZVCZvI2h4paNeXzKrCPNY9i8DGHtk+cCDFn/mY=
Subject key identifier: 3C:4B:7D:FD:4F:85:D5:AD:54:D3:48:6B:86:56:25:20:63:42:F6:03
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0194DA9FB36E5CFE8F23B42E1DCDCB7DA36D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PEt9_U-F1a1U00hrhlYlIGNC9gM.roa
Signing time: Thu 06 Feb 2025 09:38:06 +0000
ROA not before: Thu 06 Feb 2025 09:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205125
IP address blocks: 45.95.201.0/24 maxlen: 24
2a03:e2c0::/32 maxlen: 32
2a0d:8340::/32 maxlen: 32
2a0d:8341::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:9f:b3:6e:5c:fe:8f:23:b4:2e:1d:cd:cb:7d:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 6 09:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c4b7dfd4f85d5ad54d3486b865625206342f603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:c0:72:1f:a9:fd:34:ee:ef:a6:bc:71:4c:
26:d1:01:68:14:c0:4d:98:42:86:d1:08:74:4d:13:
9f:91:a9:5e:81:36:ed:4d:bf:b9:46:79:1d:7f:5e:
eb:a8:94:e9:26:b2:45:1e:2c:fa:ca:6a:52:30:54:
39:b1:c3:aa:d3:74:70:16:a0:8b:00:11:fa:f8:ff:
cb:a4:eb:69:ae:fd:18:95:0a:f6:41:18:e0:7a:85:
1e:56:06:84:ff:50:e6:33:11:d1:0c:09:c1:8a:78:
94:43:8e:95:ce:c7:3c:70:42:78:a1:3c:0b:1f:f7:
c6:42:ea:3d:53:41:6b:19:19:18:d4:cb:51:c5:c0:
c3:d9:d8:6e:c7:b3:02:17:32:40:98:26:a5:8f:01:
c3:e4:6c:b0:9c:67:28:7b:8d:76:4c:e9:50:6d:27:
11:8d:db:4c:b9:43:6a:c4:ce:3e:3f:d6:5a:b5:1d:
57:10:3c:03:d8:01:cb:8a:54:ee:04:05:c6:5d:c5:
67:08:ae:94:99:0f:4d:f5:fc:3a:0c:3d:52:e4:6e:
d6:01:36:1b:ac:7d:34:cd:41:89:86:06:86:5e:d1:
a8:6b:03:a7:89:09:43:74:6e:77:c4:34:02:0e:b2:
ae:06:aa:3a:41:1d:aa:7c:d7:c2:42:54:33:21:65:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:7D:FD:4F:85:D5:AD:54:D3:48:6B:86:56:25:20:63:42:F6:03
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PEt9_U-F1a1U00hrhlYlIGNC9gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.201.0/24
IPv6:
2a03:e2c0::/32
2a0d:8340::/31
Signature Algorithm: sha256WithRSAEncryption
6b:93:a5:e5:b8:55:44:84:60:60:29:2e:6d:dc:75:ec:fa:62:
b3:12:81:1b:01:0a:a6:a2:2a:c9:3e:20:79:6e:56:0f:e7:78:
dc:01:34:50:c2:90:88:97:45:8f:58:da:70:84:bb:8e:eb:98:
7a:e7:e0:73:4c:30:80:e3:a4:48:2a:63:d7:23:9e:98:b2:d8:
dd:c3:6e:dd:3d:c8:e4:d8:0f:48:73:31:d4:ac:db:b2:86:0e:
22:78:ec:1c:a0:91:eb:81:a7:b9:2c:c1:3c:be:7a:f1:7a:ac:
e8:ff:0e:04:0d:4d:13:92:52:98:10:a4:31:7c:27:ed:67:88:
d9:c6:dc:d5:93:a3:b5:c9:d5:ad:47:36:1d:c1:4b:aa:c1:1d:
cb:3c:06:1b:a8:78:5f:b2:de:b1:c0:53:db:5e:83:c9:84:c7:
51:f0:95:65:c4:7a:06:38:6e:6d:b5:a4:ad:cb:7e:cd:74:0b:
ba:39:cf:96:4e:e9:26:50:fb:3f:48:f5:c1:6c:48:97:f6:c1:
86:1a:8d:19:e7:21:52:c2:d1:c0:c3:37:ed:ae:a4:23:fa:1e:
23:4c:e5:b3:93:46:05:f8:3b:d3:bd:14:bf:e5:71:db:e3:e7:
b8:6f:e8:95:ae:71:d9:53:96:0e:09:d4:04:9f:4a:ba:26:8c:
07:b0:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:16:48 2025 by rpki-client