Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/NBg2wBdpLcXOryfTuGuYbmduFCQ.roa
File: NBg2wBdpLcXOryfTuGuYbmduFCQ.roa (raw, json)
Hash identifier: i3jI5h+WAhSCvphgbpJNehFD+sJVPyBlVaDJFJldziI=
Subject key identifier: 34:18:36:C0:17:69:2D:C5:CE:AF:27:D3:B8:6B:98:6E:67:6E:14:24
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019048FC55E7160965808EBE649CA11F5CBE
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/NBg2wBdpLcXOryfTuGuYbmduFCQ.roa
Signing time: Mon 24 Jun 2024 06:43:34 +0000
ROA not before: Mon 24 Jun 2024 06:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 89.249.200.0/24 maxlen: 24
185.21.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:fc:55:e7:16:09:65:80:8e:be:64:9c:a1:1f:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 24 06:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=341836c017692dc5ceaf27d3b86b986e676e1424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:92:9b:5e:4d:e3:d4:44:45:fd:5f:6f:ac:
17:04:7c:1b:13:a9:1e:f1:d0:5e:71:fe:3e:2b:f3:
c0:8f:58:09:ec:42:81:c6:29:f5:b9:2d:81:be:24:
7d:ea:e4:50:00:97:42:ab:84:a0:95:e9:66:89:fa:
55:95:55:fc:2f:d1:6d:32:4d:e3:c6:80:63:a4:e3:
b1:0c:fa:c2:07:2a:12:c7:d2:9d:e1:f6:5f:c5:85:
3e:09:2b:52:27:3a:3d:2b:fc:4d:cd:48:40:98:94:
d7:e1:c2:9e:19:16:11:0b:1c:88:8a:00:01:d1:34:
6b:8a:18:8e:ec:98:65:43:3a:18:5a:04:ad:9c:7f:
fd:45:31:c6:e2:15:a6:58:15:f9:22:e7:fe:d6:0e:
29:74:57:0c:7d:74:4c:13:7d:b7:b9:c1:3c:da:58:
2e:25:08:5f:62:f3:6e:7f:00:62:05:4b:c7:14:75:
eb:01:22:bf:d2:09:8c:4e:d1:06:cf:7d:bd:40:ed:
50:c5:24:bd:83:6a:07:9e:f2:21:b9:43:c2:e9:89:
bd:f5:29:44:23:2e:11:40:fc:34:63:a7:42:db:bc:
bd:b9:fb:0b:79:d8:cb:d1:38:fc:0d:0d:2c:f6:1a:
be:b5:2f:d9:6e:08:24:d9:d1:f2:7e:b0:17:87:72:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:36:C0:17:69:2D:C5:CE:AF:27:D3:B8:6B:98:6E:67:6E:14:24
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/NBg2wBdpLcXOryfTuGuYbmduFCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
185.21.255.0/24
Signature Algorithm: sha256WithRSAEncryption
93:92:b2:1e:15:83:82:00:8a:55:17:2d:22:fc:67:80:ba:36:
e2:aa:11:c6:5f:7b:fb:df:31:b1:a1:50:21:4a:39:25:f8:3e:
b3:ea:f7:66:47:86:2b:8c:b7:9a:32:0e:ce:50:09:a5:76:28:
6d:05:4d:c5:fa:d1:cb:f1:8f:e6:7a:0b:fd:17:09:a3:56:0c:
a4:00:b7:35:e1:7b:ce:38:d7:8c:bc:d1:85:29:43:e2:b4:7c:
2d:b8:07:7b:d8:e4:8f:d5:c4:2b:a9:8f:e8:94:89:4d:6f:7a:
4a:61:a7:55:7e:d7:29:f9:ff:14:d2:e4:a5:e3:07:35:6a:0b:
72:cd:77:be:79:d0:a3:a3:f8:0a:c7:a7:f9:fd:51:e7:e2:fc:
53:8d:07:e2:f3:f4:e8:c3:18:2b:4e:fe:72:da:2b:5d:1c:ee:
3f:2a:ac:92:90:71:7e:15:70:62:b9:c6:d6:69:59:12:a6:6c:
65:df:3a:eb:a6:68:a5:01:e1:0e:f6:8f:42:06:51:2e:c1:0c:
85:b3:66:77:00:6d:60:b7:1c:1a:a0:25:49:14:d9:4b:88:54:
cc:c5:bf:3c:dc:cd:b4:05:f9:0b:83:dd:d5:7f:a5:47:04:0f:
d7:ba:44:a7:b6:c6:4a:9b:1e:7a:f6:d3:5d:12:df:48:68:7c:
89:96:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:16 2025 by rpki-client