Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3144.roa
File: AS3144.roa (raw, json)
Hash identifier: rnI4JXCxh9kcvFPgaUWHWokkCjGv77l+H0RNfdZ2pYI=
Subject key identifier: F1:95:B3:AD:4E:EC:0C:BF:1D:7C:2C:91:D5:18:D3:6B:B6:1B:B0:B5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 442CD450F14A57695415B56FED5C5BBC3C917064
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3144.roa
Signing time: Mon 17 Mar 2025 07:06:10 +0000
ROA not before: Mon 17 Mar 2025 07:01:10 +0000
ROA not after: Mon 16 Mar 2026 07:06:10 +0000
asID: 3144
IP address blocks: 95.135.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2c:d4:50:f1:4a:57:69:54:15:b5:6f:ed:5c:5b:bc:3c:91:70:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 17 07:01:10 2025 GMT
Not After : Mar 16 07:06:10 2026 GMT
Subject: CN=F195B3AD4EEC0CBF1D7C2C91D518D36BB61BB0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:15:4a:f7:7c:db:8c:4b:42:3d:ad:70:22:
f8:ce:18:98:d6:10:26:db:0f:36:c4:53:8f:58:73:
67:3d:d8:85:f3:31:1e:b1:e2:b0:96:8c:d5:8c:cf:
ca:5d:3f:c4:d2:1f:e4:36:fa:b7:14:01:6a:bd:3a:
17:fa:5a:b6:f8:d9:e1:95:c0:fe:6e:70:b6:a9:2f:
36:53:71:ee:f3:5b:3a:05:49:e2:a7:24:dd:db:ec:
a2:d4:c7:60:0c:b7:3e:e9:92:30:f9:77:c2:a1:ef:
30:e4:db:76:97:3b:7f:c3:cf:ff:5d:5b:b5:f0:46:
81:3e:51:ff:27:c5:73:d2:b1:c0:c5:26:42:b3:b4:
c7:74:9c:7f:b5:d0:c2:ad:19:76:8e:8b:19:77:77:
d5:f1:f9:aa:b4:37:26:44:88:18:c5:4a:22:44:8f:
a8:64:c4:24:17:0a:10:c6:eb:e8:9e:1c:78:f1:22:
cf:18:89:31:48:83:a0:56:64:d8:02:7d:36:a8:cb:
35:10:26:f0:b8:a8:36:5a:19:70:10:d3:0a:5c:15:
ef:4f:7e:12:6f:b1:f0:7f:0f:ea:e2:23:66:96:f0:
97:fc:90:69:82:b2:e5:3a:61:07:8b:4e:ab:22:54:
10:e7:c6:52:2c:9a:14:ec:36:59:91:c2:9f:54:e7:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:B3:AD:4E:EC:0C:BF:1D:7C:2C:91:D5:18:D3:6B:B6:1B:B0:B5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3144.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
28:76:05:93:a4:69:8a:8a:f0:f5:c5:4b:3f:ce:f3:fe:21:d0:
b8:b3:ca:6a:68:c8:05:fb:d6:5a:9c:71:d0:1b:96:85:b9:51:
fd:db:47:65:f2:cb:73:76:59:c8:e1:d8:17:37:f5:6f:ab:ec:
f9:fc:3d:b6:5a:0b:3a:1a:d6:06:ed:c4:2c:75:be:59:62:4d:
53:49:26:ef:91:b6:80:68:a8:15:a7:6e:83:7a:c9:b3:15:04:
8e:35:e6:62:e9:6b:66:96:6b:72:c3:1d:45:94:98:e8:f1:99:
0d:71:3e:e9:de:e1:c5:a6:46:a4:df:cc:08:18:fd:3b:15:0a:
7b:8d:84:ea:1f:89:78:6f:43:fd:48:e6:51:2f:e7:16:63:3e:
0d:f1:07:cd:1f:f4:96:78:2a:da:9e:79:0a:1c:af:27:f8:4d:
d4:00:cc:ce:80:31:75:4a:4b:8d:be:58:5b:30:15:38:27:17:
3a:de:f9:26:dc:6d:87:3d:94:3a:d7:d2:77:8a:c3:5e:67:c5:
66:91:e9:67:85:18:e5:f9:51:89:6b:d4:89:a4:99:dd:2e:15:
db:2e:9f:0b:5c:25:95:77:0b:6d:07:c6:6e:6f:e5:73:3d:fc:
6a:2b:c1:5b:d7:d4:10:f2:f2:61:34:a3:74:52:57:52:e8:1c:
13:46:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:03 2025 by rpki-client