Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/nR__W6eKmJDCSQ-Ve5BuBqRgj1w.roa
File: nR__W6eKmJDCSQ-Ve5BuBqRgj1w.roa (raw, json)
Hash identifier: ZNjHEO/Wo6ExM8zMnQZKVmVx5Txz3u+vK2dWd4D/o1U=
Subject key identifier: 9D:1F:FF:5B:A7:8A:98:90:C2:49:0F:95:7B:90:6E:06:A4:60:8F:5C
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019420687108B898EF605930D0A0CD885E89
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/nR__W6eKmJDCSQ-Ve5BuBqRgj1w.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 109.75.100.0/22 maxlen: 22
109.75.105.0/24 maxlen: 24
185.8.84.0/23 maxlen: 23
185.65.196.0/23 maxlen: 23
195.178.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:71:08:b8:98:ef:60:59:30:d0:a0:cd:88:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d1fff5ba78a9890c2490f957b906e06a4608f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:0a:a2:59:cd:6e:7c:2a:95:4d:e9:9b:3b:
e0:40:47:84:81:bb:f9:d0:b3:e9:32:04:4a:da:0a:
ef:fb:43:ad:b1:77:45:5b:91:c7:31:e7:85:95:3f:
71:94:0d:51:1b:0e:e9:a1:f6:86:ab:c1:ce:3b:d1:
2b:c6:77:97:10:72:be:5d:f3:0e:c4:32:14:92:24:
60:dc:d6:34:23:87:3a:50:6d:5c:00:ee:2e:a5:f2:
80:20:55:df:f0:f0:72:15:ab:7e:b7:89:53:59:92:
8a:fd:c3:30:9c:c4:6c:3b:16:ab:a6:42:e4:d4:a6:
81:8e:29:c0:25:78:15:13:24:2c:d2:4b:b3:8f:ae:
c3:50:8e:85:fa:09:08:f8:c7:97:82:c7:a5:c4:64:
3a:b1:22:af:c2:9d:21:f6:47:22:89:b2:02:13:ce:
8b:82:6d:de:e9:35:d1:92:82:b4:36:cb:85:ad:1b:
9a:73:89:57:03:cc:65:63:bc:0e:e5:e4:5e:6e:63:
b1:24:95:a0:e2:66:2e:da:9d:fc:0a:06:82:ae:bc:
8d:b2:f3:72:cb:b7:f0:2c:a3:d2:b6:7d:de:10:88:
c1:c4:d2:ea:ca:0f:fb:6b:87:b1:3c:f3:d5:a8:bc:
3d:77:46:d7:20:a4:36:08:e9:fb:3f:35:75:82:70:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1F:FF:5B:A7:8A:98:90:C2:49:0F:95:7B:90:6E:06:A4:60:8F:5C
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/nR__W6eKmJDCSQ-Ve5BuBqRgj1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.100.0/22
109.75.105.0/24
185.8.84.0/23
185.65.196.0/23
195.178.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:02:88:c0:7d:5f:67:83:62:5f:b3:d4:b8:5e:ba:85:17:bb:
07:18:ac:f0:95:8d:77:b8:9e:86:6d:fe:75:23:ed:82:7f:16:
84:fd:8c:22:f5:84:48:3c:25:c4:74:31:f3:42:b6:f7:63:9c:
24:16:a1:29:86:ba:d0:e2:4f:e8:7b:20:05:9c:f2:76:51:9f:
4e:c2:69:2c:cd:b2:09:a6:84:f9:e4:3a:8a:3b:a4:24:42:38:
86:22:b2:d5:bf:9f:ec:d1:bf:51:1e:e0:e3:ae:be:fa:b2:8d:
44:f5:23:5f:30:37:46:8c:f3:a8:4b:93:02:04:10:f7:34:dc:
a3:e2:28:0f:4f:26:19:9f:16:0f:e0:9b:4f:b4:16:c6:ab:20:
fa:66:4c:15:c9:9a:c9:4c:55:36:27:dc:b3:7e:e8:9e:42:b7:
4d:52:bf:c0:79:50:3c:98:4c:0c:b6:88:75:8a:1a:8b:ff:9a:
6a:ce:6e:09:33:af:c5:74:a4:b4:56:ba:8c:37:a1:7f:d3:20:
15:1b:f5:1e:d2:21:20:6d:e7:d5:fb:66:1d:3a:e1:95:bc:50:
98:20:7c:72:3f:f0:e2:94:74:a9:2c:8a:21:ba:d5:8b:4d:1a:
a5:72:08:5a:9c:10:94:c1:eb:d8:e1:22:4a:98:c7:20:d4:72:
7b:62:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:41:11 2025 by rpki-client