Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa
File: Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa (raw, json)
Hash identifier: IEPnmuJHaBFNEPjVzbbu0LZ28Z15YinFb5L8V+9myGI=
Subject key identifier: 36:DB:FD:44:3C:83:9E:2A:68:4B:82:DE:31:E2:C4:8C:F1:F6:61:E1
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 019426D9D76E957DF02950ED1CA935B22371
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12727
IP address blocks: 95.131.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d7:6e:95:7d:f0:29:50:ed:1c:a9:35:b2:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36dbfd443c839e2a684b82de31e2c48cf1f661e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:09:df:6c:4e:8a:bc:29:6b:9f:50:b4:12:
ea:30:c4:48:a3:22:d8:4d:e0:ff:6f:3d:af:13:a8:
42:df:48:e6:89:ca:5c:62:27:2f:76:1e:4e:82:88:
7a:c3:a3:50:ad:88:c3:2b:3b:b0:11:47:72:29:1f:
13:fe:0f:dd:bf:5b:1a:c4:69:95:6e:be:4f:32:8b:
82:1e:f7:5f:09:76:d5:5a:1b:f0:90:9e:c2:73:c4:
e2:77:8b:e0:c5:44:5e:0f:01:74:75:da:e3:f9:a2:
a9:ae:35:19:ef:17:3e:a0:c5:d4:ff:32:3f:4d:af:
24:5d:01:46:21:02:a5:9e:65:4e:98:9c:c9:dc:2a:
6b:82:92:84:e9:bb:ca:84:0f:99:11:81:d0:d0:38:
9f:b7:3f:4e:ad:00:47:11:a3:58:b9:23:f9:fd:05:
d6:60:98:7b:17:8d:51:51:66:96:e3:71:81:69:03:
9d:29:a6:7d:f9:d6:76:54:e8:fe:9a:68:e3:49:97:
7e:87:bf:c0:c4:08:99:a2:9b:08:73:c2:0c:72:9d:
c5:2d:00:67:01:fd:b6:0f:c7:06:0b:c4:5e:a7:13:
84:52:b2:49:0c:96:99:3e:d7:8f:ab:5f:9c:6a:61:
b0:9d:77:9d:df:38:16:10:ab:cc:ec:9c:28:59:8a:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:FD:44:3C:83:9E:2A:68:4B:82:DE:31:E2:C4:8C:F1:F6:61:E1
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.18.0/23
Signature Algorithm: sha256WithRSAEncryption
86:3b:13:21:fe:d0:53:04:35:a1:f1:09:c0:6c:99:10:a8:cb:
c1:4f:a6:63:c7:5b:4b:a2:b7:76:17:8d:5a:4d:52:a5:16:2f:
ce:bb:c4:e6:dc:ca:11:49:c7:ea:d6:2c:cb:47:9d:90:36:26:
6b:a8:ca:33:76:d7:c6:a8:2e:cf:af:70:e8:b0:13:d5:54:8e:
9f:dd:5b:79:ff:ff:ef:af:27:33:0e:1d:86:2b:71:f5:07:c9:
12:ca:f0:af:3d:ab:15:78:ef:2b:21:da:93:67:84:ac:70:b0:
12:38:33:50:d8:4c:3d:c9:35:e9:70:1e:80:30:48:bb:6c:33:
90:7b:2c:84:2c:16:1b:0f:27:06:5d:83:c8:3c:5c:6a:92:18:
6a:10:76:84:40:e9:79:37:5c:81:fb:f1:79:79:32:a0:eb:59:
3d:32:db:5e:69:ce:dc:1c:e1:72:49:75:31:63:c9:1e:16:92:
c7:d0:0f:6f:d6:4c:fd:4e:57:7b:ba:08:87:28:77:97:75:b4:
8e:c4:4d:8d:5e:48:b2:54:0b:d5:0a:85:70:a9:29:aa:96:ec:
e0:b2:8b:0b:52:c6:4a:82:1d:f3:e4:e4:ad:6a:2d:59:3f:32:
81:51:5f:9a:e0:d8:d1:e7:a3:b7:cf:2f:d6:a9:fe:e6:32:ba:
c9:1d:a7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:35:41 2025 by rpki-client