Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nLEQnA0hUKCS7YFGaw_mGQ2Ievw.roa
File: nLEQnA0hUKCS7YFGaw_mGQ2Ievw.roa (raw, json)
Hash identifier: Za/MlCF8GtdurGG0da0g9GHADP2tfli82FHE53Zdevs=
Subject key identifier: 9C:B1:10:9C:0D:21:50:A0:92:ED:81:46:6B:0F:E6:19:0D:88:7A:FC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019588DF992D881E7FD81B2DDC33E5BECE0D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nLEQnA0hUKCS7YFGaw_mGQ2Ievw.roa
Signing time: Wed 12 Mar 2025 05:41:49 +0000
ROA not before: Wed 12 Mar 2025 05:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134465
IP address blocks: 94.249.150.0/24 maxlen: 24
94.249.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:df:99:2d:88:1e:7f:d8:1b:2d:dc:33:e5:be:ce:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 12 05:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cb1109c0d2150a092ed81466b0fe6190d887afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:89:22:93:46:cf:92:51:d3:39:21:bf:9a:
ac:5c:c9:e0:32:b6:56:a0:88:71:f3:a8:15:46:f9:
07:a9:5a:3c:56:5c:1f:58:e7:ee:ba:10:b2:73:d2:
9c:b1:fa:8a:13:6b:25:8b:c6:b6:cd:a5:61:6a:e1:
ec:7c:fd:15:b5:66:70:e4:af:85:3f:8a:e4:89:9a:
69:f5:de:e9:e2:a5:44:23:37:06:95:cd:f7:33:98:
66:42:41:16:f1:94:42:2a:88:71:57:01:f9:09:b7:
57:fb:c2:24:ca:0c:65:f5:a0:5b:9e:dd:d0:c9:9e:
dc:0d:8d:c0:88:39:64:35:73:85:d5:a5:56:8d:59:
c3:c3:03:ef:7a:a1:a0:91:68:99:48:21:b0:11:6d:
b4:e3:3d:ec:5b:c5:da:1e:03:cf:7c:34:86:ab:e4:
43:c7:11:ba:5a:8f:27:6b:be:e2:0b:f1:20:25:5b:
18:48:7a:2a:12:0a:35:cc:1a:1d:23:b9:07:2b:d0:
2f:19:e0:d6:fb:62:a9:e8:fc:c2:70:19:29:ce:ed:
75:54:88:57:e7:3a:75:22:7c:0a:70:a4:77:11:38:
dd:fa:b3:89:ad:88:58:9b:ec:cb:9a:be:a4:ff:13:
4a:af:16:7c:ba:65:6d:14:d1:8a:fb:21:5d:5f:b6:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:10:9C:0D:21:50:A0:92:ED:81:46:6B:0F:E6:19:0D:88:7A:FC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nLEQnA0hUKCS7YFGaw_mGQ2Ievw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:f5:2d:e0:9e:2b:21:ce:83:93:c8:b3:19:2c:5f:ec:ec:22:
ed:02:6f:9c:60:99:6f:20:3f:79:c7:22:22:b0:e8:26:0f:1f:
8c:f7:31:4b:d0:7e:63:2b:7b:4d:ea:eb:b8:bf:76:28:44:a9:
80:5d:13:49:d3:0a:a1:39:e1:9e:f0:ad:1a:38:42:b7:4e:72:
0e:f7:d1:6e:d9:29:d5:f5:cd:aa:c9:97:20:93:88:fc:5b:2f:
4f:93:49:de:34:a4:e8:d1:b9:07:c9:3b:d3:2d:40:ea:68:ba:
fa:00:0a:c0:b6:46:a2:87:da:f3:be:2e:2d:b7:1b:f9:e9:86:
8b:ab:51:e7:14:a8:d5:5f:36:22:53:e3:6c:f1:e8:92:cb:17:
59:b4:ce:f9:2c:e9:ca:c9:b5:a9:f8:4a:83:be:53:f8:be:ef:
ac:b9:c7:01:1b:ee:3b:37:9a:f2:59:c9:01:4d:b0:55:2f:a5:
9e:81:d7:6e:43:ea:e3:89:d1:7e:b8:09:da:45:5a:5e:87:9d:
39:d2:0b:c7:1b:3c:57:59:f7:d2:d7:b4:64:c8:2a:36:9b:4e:
46:d5:b9:2e:da:16:17:48:63:90:ea:55:b6:04:09:bf:2d:b6:
5f:60:83:32:44:0c:ab:85:71:1a:82:06:1a:94:f8:18:ca:4f:
28:2b:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:33:38 2025 by rpki-client