Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202662.roa
File: AS202662.roa (raw, json)
Hash identifier: 9ZZoaScE8mkdjQOn3KlO0XR+vDozfCqJ7jf1bDstjZU=
Subject key identifier: 9C:42:84:07:5E:2B:9E:B4:98:BA:85:6E:E9:F1:2C:A5:D5:5E:21:19
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6054FEBB17FD21AAAA11B8F897207D391124BB56
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202662.roa
Signing time: Mon 17 Mar 2025 06:00:42 +0000
ROA not before: Mon 17 Mar 2025 05:55:42 +0000
ROA not after: Mon 16 Mar 2026 06:00:42 +0000
asID: 202662
IP address blocks: 95.135.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:54:fe:bb:17:fd:21:aa:aa:11:b8:f8:97:20:7d:39:11:24:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 17 05:55:42 2025 GMT
Not After : Mar 16 06:00:42 2026 GMT
Subject: CN=9C4284075E2B9EB498BA856EE9F12CA5D55E2119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:ec:ec:ff:4b:58:40:42:8c:5c:ff:e1:7a:
a8:af:25:be:c5:8b:df:f6:e5:28:22:6e:12:24:a4:
ba:fd:e9:41:6c:b8:a1:bf:c4:d2:65:3a:13:3d:66:
68:5a:b3:fd:f9:ed:a7:ad:5d:13:0b:6e:3a:46:ef:
72:36:7f:4c:e8:41:74:ae:77:79:91:8a:33:d5:d4:
41:5f:5a:a9:0f:75:90:8e:0a:fd:6d:8e:64:c3:68:
a6:77:c0:c0:c7:af:57:ee:83:04:81:77:fa:c1:dd:
eb:30:12:4c:db:eb:7d:86:4d:89:4f:99:66:37:c0:
a6:85:bb:7d:0c:0b:b4:48:71:5d:bd:92:41:c9:ed:
a5:51:69:ad:30:3b:4e:2f:03:75:56:bb:4c:3f:db:
21:2f:9d:53:22:d0:20:99:cf:a1:23:00:06:d1:e7:
2b:63:3a:0c:49:ac:6e:00:80:e9:de:24:a0:31:26:
6a:c3:2f:46:18:0c:07:a9:d4:8d:fa:68:8c:f9:24:
31:83:bf:37:9c:f5:b7:bb:a2:85:1b:60:73:5d:a3:
b3:b7:14:39:d1:4e:24:46:c7:fb:87:c6:2e:8f:3f:
9a:f7:c5:99:49:09:4d:4b:fb:b5:f7:88:4a:dc:cb:
c7:99:2e:90:66:16:75:2b:e7:f8:e4:cb:ed:40:13:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:84:07:5E:2B:9E:B4:98:BA:85:6E:E9:F1:2C:A5:D5:5E:21:19
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:70:7c:a7:c5:63:51:f3:21:d3:df:2d:5b:07:3e:f3:01:f1:
0c:e1:a0:bd:c1:ae:20:10:1e:0d:74:aa:24:66:a8:eb:06:cd:
ea:da:b6:b2:a2:1e:d4:d6:03:63:05:c4:b6:2b:0e:d4:8d:ed:
28:25:13:83:7c:e0:73:a2:2a:9c:7f:19:fc:7c:8a:60:e3:18:
33:7e:5b:a3:f0:8e:a5:fd:cb:8d:91:39:ff:2b:7a:56:4f:7e:
3a:82:75:c0:b3:e3:3d:14:c0:78:67:f5:e5:8f:b4:52:56:85:
78:1f:a0:b1:7a:18:3b:e6:96:54:b9:37:2c:8f:9e:2a:ec:96:
a8:2a:a4:3b:7b:98:7d:71:9d:00:9d:13:4c:da:c2:0f:c6:5a:
9a:0b:fc:c3:b2:b3:cf:8e:d1:15:a1:b1:ae:d6:9a:22:a7:e9:
e6:bc:8c:7d:71:5e:60:08:ee:e6:f4:81:cb:1b:84:73:f4:f0:
4b:57:74:9a:5c:75:20:4c:dc:a1:ce:47:f9:b7:a2:c7:1b:5d:
0c:6c:22:ef:ef:31:74:ee:9b:c9:d9:34:86:3a:a5:c4:1f:a2:
91:bf:95:df:fb:0d:db:3c:56:98:74:8f:69:86:56:92:80:c0:
e7:3c:d4:52:be:9d:31:67:80:28:d1:26:d5:9f:6b:26:90:ab:
62:83:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:05 2025 by rpki-client