Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nINlEIQqMmVaNv72OW6huskoSSs.roa
File: nINlEIQqMmVaNv72OW6huskoSSs.roa (raw, json)
Hash identifier: Mu0Am+HUx8kKqSqiNCQ0+KSgYZr00b0aJ147qJ+jh+c=
Subject key identifier: 9C:83:65:10:84:2A:32:65:5A:36:FE:F6:39:6E:A1:BA:C9:28:49:2B
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942144101DA9330D39EC2F90402DFF4374
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nINlEIQqMmVaNv72OW6huskoSSs.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64429
IP address blocks: 77.72.86.0/24 maxlen: 24
78.24.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:10:1d:a9:33:0d:39:ec:2f:90:40:2d:ff:43:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c836510842a32655a36fef6396ea1bac928492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:a6:6a:51:24:ad:b0:01:13:af:ac:98:ce:
fd:b0:1b:85:e4:58:77:22:1b:28:64:69:b4:51:79:
44:4a:5a:81:93:b6:cd:d1:e9:31:78:b6:8c:95:fb:
ef:d9:a5:f3:e3:bd:c2:21:b5:96:76:a5:c0:c3:6e:
8b:94:fd:fa:33:f6:05:8c:8f:64:ef:75:37:97:9d:
fd:49:79:a3:c7:88:0a:da:77:b8:63:f3:20:4f:21:
80:31:f7:31:0b:71:4b:b6:40:e2:d9:a4:89:ca:b1:
1c:b1:f4:d1:f8:5e:94:40:f0:ec:1d:a0:82:83:28:
33:26:c0:cb:c1:eb:77:f3:dc:39:0e:2e:be:59:5c:
29:51:15:2e:ca:c6:0c:8a:bf:6a:37:40:10:e9:71:
dd:ef:5b:f5:3e:3a:bc:66:83:d5:55:49:2f:25:60:
65:b3:ff:c9:1b:d4:1a:14:35:18:eb:88:36:3e:17:
13:16:e2:1a:15:43:00:6d:08:f6:da:36:d4:79:70:
34:97:fb:d6:3a:bd:4a:7a:9c:ea:b4:6b:62:73:10:
b1:a8:e5:03:3f:56:43:5f:49:ca:ad:c8:c7:c0:cf:
42:87:d8:09:7a:1d:3a:aa:b2:81:43:0b:d8:08:9c:
9a:38:0d:21:e0:7e:08:12:b9:bc:13:05:ac:e8:ec:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:83:65:10:84:2A:32:65:5A:36:FE:F6:39:6E:A1:BA:C9:28:49:2B
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nINlEIQqMmVaNv72OW6huskoSSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.86.0/24
78.24.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f0:24:ef:ae:d9:97:2d:fb:ab:d4:96:d7:75:a6:1d:3a:f5:
85:3e:f4:51:ce:51:17:75:37:35:5d:dd:85:52:9b:e5:97:1a:
2c:69:5c:21:ea:e7:1a:1b:66:a4:88:56:71:ad:03:52:af:d1:
3d:2e:50:b7:fa:3e:d9:38:ad:4c:7e:3b:f8:4b:c3:c1:8c:5f:
a4:af:3f:2d:52:2b:f3:36:2d:05:4e:05:01:7c:80:6e:7d:9c:
a8:de:fe:e8:82:b0:29:bc:35:ac:b6:bf:11:ac:6e:b1:46:20:
b7:2a:d0:7a:21:7a:c9:d4:34:57:10:37:65:1d:b8:96:6e:0a:
5b:17:de:3e:c9:5a:d4:b9:ab:7f:66:28:43:03:d8:96:98:6d:
07:50:2c:90:9e:da:f7:0a:a6:9d:43:32:9e:c6:ec:4d:c9:41:
11:c4:10:45:ac:55:d3:d8:0f:9a:09:d4:d4:86:69:48:37:30:
b0:e3:23:78:fe:59:cf:17:92:28:2a:91:4f:da:8d:47:b8:33:
db:59:c0:ec:dd:a6:87:2f:5d:c5:5c:a5:de:cc:c3:73:8d:2e:
ba:6d:7b:71:be:96:9a:70:e0:61:3d:13:36:c4:c7:31:db:a9:
1f:09:94:20:80:be:5e:ad:b6:ea:63:58:01:d4:a0:a1:26:bb:
e4:ed:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:10 2025 by rpki-client