Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa
File: bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa (raw, json)
Hash identifier: fSbKrEDwgOdPjCAnblJniiQxtJvOzvNWIo+25OG2EEM=
Subject key identifier: 6D:72:78:42:D6:21:7D:6A:75:46:7A:53:40:28:40:A7:87:14:C2:25
Certificate issuer: /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial: 019428236191FED267B81B99B398764ADF31
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 95.128.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:61:91:fe:d2:67:b8:1b:99:b3:98:76:4a:df:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d727842d6217d6a75467a53402840a78714c225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:16:e4:eb:71:93:53:04:96:07:84:56:1c:
55:8f:d7:9b:07:2b:24:6a:c9:16:f8:fc:78:65:14:
f3:0c:68:db:94:65:57:eb:29:48:b0:7c:d0:90:f6:
95:2f:d8:d9:b3:b0:5c:98:34:ef:e5:2d:15:1a:49:
90:58:86:25:b7:bc:5a:6e:47:cf:23:16:6c:ed:ca:
dc:96:14:44:37:91:d9:aa:09:2d:c7:b4:6c:ea:b0:
9a:cb:97:ba:70:f8:07:81:10:19:30:f4:79:d5:1f:
f7:88:f3:cd:d3:10:58:f1:fa:85:b7:cb:94:06:18:
81:3d:4d:8c:3f:15:5c:5a:f8:bc:ee:9c:09:eb:e4:
72:a0:8f:6d:7f:10:8e:4b:6f:05:95:72:63:25:36:
f3:96:44:21:22:dd:98:b1:f9:ad:c9:ff:bd:3e:0f:
c3:f0:0c:d5:b0:1c:15:d6:80:97:75:98:e9:f5:6a:
cd:0c:14:6f:53:a9:6f:43:76:a7:10:bc:1d:fa:c0:
81:46:1b:27:26:f8:f0:bc:ca:0b:ba:62:d0:e3:54:
8c:18:54:00:08:27:96:96:3c:80:01:83:d8:55:92:
64:ac:03:d6:c4:5a:9c:5e:f1:3f:4d:53:91:c4:02:
25:b0:b0:c6:70:7b:30:f8:da:b1:e1:d0:f0:3c:33:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:78:42:D6:21:7D:6A:75:46:7A:53:40:28:40:A7:87:14:C2:25
X509v3 Authority Key Identifier:
keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.155.0/24
Signature Algorithm: sha256WithRSAEncryption
19:29:67:f4:bd:76:84:bd:64:23:d0:44:d9:a9:eb:91:58:78:
14:63:bc:2f:7d:06:fd:a7:a2:eb:86:73:8e:28:86:30:a8:25:
83:dd:32:72:19:1f:e0:13:a9:1c:3e:46:11:f2:c8:ca:08:02:
80:72:ce:2c:82:30:5d:3a:cc:64:66:dc:6f:0d:e1:b7:d9:b1:
86:a7:e0:3f:be:50:3a:48:58:74:cb:db:86:30:48:07:56:2c:
5d:73:3f:33:da:40:1c:ff:19:8f:a7:76:03:5a:d7:c9:75:3d:
5f:1f:c7:19:25:7c:d9:d8:c4:1e:f3:77:e3:33:79:cc:64:5a:
ba:0b:d6:90:fa:52:66:95:36:71:29:fe:fb:2e:ff:d7:2d:da:
5f:f5:ed:34:17:36:43:24:3c:38:85:13:8a:02:0e:c6:17:8f:
b6:6c:d5:d0:ae:40:aa:f6:71:28:20:2c:13:e3:15:bd:99:89:
ce:c6:8a:c7:2b:fa:be:3c:50:83:73:6b:28:81:22:8c:04:db:
65:aa:48:4d:c4:49:5f:13:27:1f:72:58:21:bf:1c:41:db:fe:
dc:2d:74:5d:5f:69:72:f5:77:47:3c:af:e0:99:55:01:dc:0a:
77:71:e5:9d:ab:d1:da:7c:a5:fa:83:c7:47:f8:4b:7d:41:17:
d2:d1:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:46 2025 by rpki-client