Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/tudIVgcptSwqj3f5EGeHuf41taQ.roa
File: tudIVgcptSwqj3f5EGeHuf41taQ.roa (raw, json)
Hash identifier: C3GuaI9nRlw3j0RMH940x9S9b42OKdLh+CMCdQStqCw=
Subject key identifier: B6:E7:48:56:07:29:B5:2C:2A:8F:77:F9:10:67:87:B9:FE:35:B5:A4
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 019427B548BA0083D8A4B0F66D89474AA8C3
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/tudIVgcptSwqj3f5EGeHuf41taQ.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61218
IP address blocks: 95.128.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:48:ba:00:83:d8:a4:b0:f6:6d:89:47:4a:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6e748560729b52c2a8f77f9106787b9fe35b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:46:ad:a7:5d:4a:b5:f4:3f:50:31:37:89:
f1:9e:60:53:c2:bb:a4:bb:04:40:56:b4:ee:45:6a:
3c:6a:7f:7c:3f:dc:d2:77:15:ad:b3:80:a9:17:eb:
bf:ce:15:e2:1e:1d:7f:ac:d8:57:d1:e6:12:cd:08:
6f:0f:83:f6:ea:50:26:85:5c:50:36:b9:c3:8b:71:
d5:b3:4e:02:81:c2:aa:46:ac:d1:af:1a:06:32:42:
42:a1:d9:be:60:83:66:8e:c1:1f:b6:ad:6a:a4:6f:
4c:d0:b0:bd:e6:48:2b:f1:fc:75:5a:54:69:32:1d:
bd:4f:6c:0d:f3:32:18:4e:81:07:fd:6b:64:aa:48:
cb:d6:db:42:93:ac:9e:e9:21:91:80:ed:a3:89:43:
35:0d:0f:72:96:87:2c:13:db:af:bc:77:17:a1:b3:
a4:2d:bc:e8:75:88:19:af:52:d2:fd:f8:66:7d:94:
b2:48:c4:1f:5d:a0:92:33:10:c3:79:04:e1:e0:6e:
12:4c:77:a4:95:82:00:1e:97:2a:18:d0:79:e1:70:
6d:22:cf:c3:71:91:be:39:c4:24:02:a6:6e:2d:f7:
fd:0c:3e:7a:a6:b7:9d:5b:c6:69:2a:12:80:04:8e:
54:10:7d:be:58:69:07:9c:7e:10:e0:ab:c8:20:0e:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:48:56:07:29:B5:2C:2A:8F:77:F9:10:67:87:B9:FE:35:B5:A4
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/tudIVgcptSwqj3f5EGeHuf41taQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7c:7e:3a:3b:bc:22:ba:d6:61:fe:dd:b4:d0:84:ea:d3:59:
63:70:bc:55:9f:e3:e2:8b:37:1a:6d:2a:7e:2e:63:c9:0c:be:
68:5a:ae:dc:d8:f5:d0:78:85:ba:49:00:69:e5:61:bf:a7:3b:
ae:97:7c:88:ed:24:44:e5:a5:4f:1c:00:07:2f:fb:00:05:fe:
2f:18:5b:ed:25:91:c8:79:00:da:55:fa:ec:49:cd:7c:dd:ef:
b2:67:ae:fe:e3:70:c1:4a:52:f3:58:8e:97:d2:0b:1b:e9:0e:
0d:97:71:07:e8:c3:2c:90:56:f7:d9:d9:75:41:f9:0b:37:75:
d3:40:f5:64:d3:63:68:30:1e:a9:87:62:93:70:3e:4a:9c:17:
51:e6:7a:6e:03:96:6d:35:66:f7:97:18:57:03:0e:ba:ef:08:
db:0e:21:3a:43:bd:65:f1:9b:81:5d:79:60:64:de:d4:20:47:
af:18:2f:6f:f6:3b:fb:b6:49:ae:4c:aa:d1:83:54:82:23:fe:
a1:e8:25:01:3b:67:37:db:19:a9:85:e7:6d:f5:3d:40:a1:d8:
c9:ae:ca:aa:3d:b4:20:fb:23:ae:7c:c1:cf:87:7b:26:1b:56:
f4:6e:3d:3c:02:27:d1:4f:91:eb:e3:97:11:17:92:e2:a6:0b:
2f:ee:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:28 2025 by rpki-client