Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/pV9NJLxdi4jqw_UmIw3qNFIfWPE.roa
File: pV9NJLxdi4jqw_UmIw3qNFIfWPE.roa (raw, json)
Hash identifier: JcjmMNBvioeNG+wkxM3r1KDyWfSA64pDYh6jv6Qb2JI=
Subject key identifier: A5:5F:4D:24:BC:5D:8B:88:EA:C3:F5:26:23:0D:EA:34:52:1F:58:F1
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 01942825E1ADED6EE4EBD2203D3EB89FC1C4
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/pV9NJLxdi4jqw_UmIw3qNFIfWPE.roa
Signing time: Thu 02 Jan 2025 17:52:38 +0000
ROA not before: Thu 02 Jan 2025 17:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51844
IP address blocks: 95.128.158.0/24 maxlen: 24
2a13:3c0:101::/48 maxlen: 48
2a13:3c0:102::/48 maxlen: 48
2a13:3c0:103::/48 maxlen: 48
2a13:3c0:104::/48 maxlen: 48
2a13:3c0:105::/48 maxlen: 48
2a13:3c0:106::/48 maxlen: 48
2a13:3c0:107::/48 maxlen: 48
2a13:3c0:108::/48 maxlen: 48
2a13:3c0:109::/48 maxlen: 48
2a13:3c0:110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:e1:ad:ed:6e:e4:eb:d2:20:3d:3e:b8:9f:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Jan 2 17:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55f4d24bc5d8b88eac3f526230dea34521f58f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:66:0c:d9:4c:5f:76:b1:9b:bb:40:07:d1:
4d:db:74:17:75:b9:54:46:c1:6b:5c:ae:d0:e8:53:
ab:0c:d2:6f:9b:78:0c:39:5f:73:af:e6:1d:85:82:
70:a0:c9:65:b8:d8:36:63:91:09:4d:15:ef:bd:85:
fe:bb:b7:76:8e:f4:0b:7e:3f:e8:36:34:36:f8:15:
b5:3e:00:c5:2e:fe:64:15:94:c0:77:33:ca:98:af:
2a:e4:b4:f2:59:c3:dc:b9:4e:a3:2c:bd:ca:a2:6c:
28:9e:f7:c3:6c:2b:57:9b:02:b3:d4:3f:1a:c5:a1:
a0:c3:fc:52:74:6f:77:df:e4:37:86:59:18:fb:14:
e6:1d:c9:4d:10:f6:0f:b8:6a:8b:cf:dd:30:7c:de:
07:2a:0c:51:5e:71:29:96:e8:1e:d0:ec:9c:fb:7f:
5b:6e:41:2c:20:cc:a6:9b:61:15:1d:04:99:0f:e7:
63:94:d3:87:5d:a3:cb:7f:bd:8f:d1:ef:4d:87:93:
10:fc:0c:98:e5:4a:27:af:f7:e7:4a:4e:72:23:ab:
13:c4:85:a9:6f:e5:1f:f4:64:1f:97:9b:34:fe:60:
80:1f:f6:7b:43:47:ec:fb:65:53:f9:44:ce:09:dc:
47:14:9d:6a:8d:ce:92:8d:bb:74:2f:1f:a6:1e:73:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:4D:24:BC:5D:8B:88:EA:C3:F5:26:23:0D:EA:34:52:1F:58:F1
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/pV9NJLxdi4jqw_UmIw3qNFIfWPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.158.0/24
IPv6:
2a13:3c0:101::-2a13:3c0:109:ffff:ffff:ffff:ffff:ffff
2a13:3c0:110::/48
Signature Algorithm: sha256WithRSAEncryption
48:aa:87:06:b9:91:6d:89:30:f5:5a:6c:d5:06:c6:98:83:c4:
a1:08:85:88:91:24:fe:1c:2a:9d:42:c9:8e:ea:62:2a:10:9b:
6d:13:fe:27:70:66:91:74:f9:cc:c2:27:23:f8:b8:a1:5b:d9:
05:65:60:51:ed:b0:9b:3b:1b:0e:3d:ab:5f:e4:92:cf:d4:7d:
8b:ef:b0:2a:8c:84:b1:f8:2e:36:13:49:cf:f9:70:d1:ce:46:
4b:49:cc:ff:71:27:20:26:58:73:b6:99:54:57:6d:1c:5f:be:
53:27:f9:03:71:35:40:3f:a2:12:48:cf:8a:fc:6b:a7:62:42:
b8:54:32:e7:19:58:5d:02:87:7a:5e:8d:8d:eb:37:53:08:06:
2d:f1:f3:39:bd:e7:8a:2e:9c:ab:ca:b3:6d:d2:a4:93:41:e6:
eb:2f:d7:83:5c:f0:80:e3:1c:42:34:26:af:6d:90:3d:91:09:
e0:e7:61:44:6a:8a:5d:79:ff:88:a2:3a:2d:a5:03:32:ba:a0:
71:21:85:d1:86:21:e7:c2:05:79:84:a4:90:3d:90:03:b9:f9:
a8:9b:4e:17:23:96:e6:c7:4c:cb:02:b2:e3:13:33:54:48:cf:
9a:3a:03:5d:2b:8d:79:c7:de:d8:87:bb:78:f7:8e:1c:94:63:
be:b0:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:29 2025 by rpki-client