Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/nikI6XTmNMIUEKKUIOhaKpaRfTY.roa
File: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (raw, json)
Hash identifier: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=
Subject key identifier: 9E:29:08:E9:74:E6:34:C2:14:10:A2:94:20:E8:5A:2A:96:91:7D:36
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019427B531E76516B9C985D9DE9D9D70B3FB
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/nikI6XTmNMIUEKKUIOhaKpaRfTY.roa
Signing time: Thu 02 Jan 2025 15:49:33 +0000
ROA not before: Thu 02 Jan 2025 15:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20845
IP address blocks: 185.79.92.0/23 maxlen: 23
185.79.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:31:e7:65:16:b9:c9:85:d9:de:9d:9d:70:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 2 15:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e2908e974e634c21410a29420e85a2a96917d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:2f:9f:1f:22:f6:01:18:b4:71:6d:44:41:
c5:92:03:72:84:38:55:38:62:6e:9d:b2:e3:2a:0b:
04:aa:e0:46:dc:87:63:8e:6f:28:55:c9:3c:f8:7e:
2f:08:6f:27:5c:91:d2:63:bd:b0:20:05:c3:9d:5a:
fd:b5:02:ae:a2:f4:2b:7b:71:28:b5:65:5c:8c:8a:
b8:ad:fa:7c:a2:ae:d1:1a:89:b0:34:ee:fd:64:46:
ed:0f:ef:d9:bf:f2:7c:20:06:1f:5b:89:ef:70:36:
d6:3a:08:3c:e4:fa:a9:8a:74:d9:44:db:d3:99:cd:
7e:10:67:c1:37:5a:aa:ee:c0:89:65:01:14:f2:e9:
ce:8f:1e:02:ef:bd:05:a7:0b:b0:29:13:58:f5:91:
5c:c9:70:f2:41:bd:42:41:ac:81:f7:e0:d0:40:9d:
5b:67:6b:34:e7:51:3f:19:d4:c4:08:4a:d2:a7:29:
31:31:34:62:28:9a:8b:05:c8:25:8c:d8:88:7d:db:
e9:39:e7:2e:57:eb:fd:c3:ce:db:da:31:dc:40:5b:
76:ae:4a:e9:f1:9f:ba:bb:85:7b:97:28:a7:f4:8d:
6c:f2:5e:93:1c:4d:37:80:67:9f:96:11:b5:35:8c:
84:70:b3:14:4f:81:30:72:f4:77:4f:cf:de:77:56:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:29:08:E9:74:E6:34:C2:14:10:A2:94:20:E8:5A:2A:96:91:7D:36
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/nikI6XTmNMIUEKKUIOhaKpaRfTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.92.0/22
Signature Algorithm: sha256WithRSAEncryption
67:8a:ac:32:ee:b9:10:e9:2f:f1:44:78:cd:d5:25:d1:eb:bb:
22:ce:fe:e3:ac:2d:52:72:2d:28:44:38:d0:da:e3:05:a4:8e:
73:4f:6e:4d:23:e2:df:8b:8e:56:e4:65:1a:e2:d3:bb:fd:8c:
77:2e:f1:0d:42:f6:88:5b:ba:ea:bb:a4:41:77:16:ce:ad:73:
8a:3e:5e:c4:a3:6c:f3:70:b6:69:9d:c6:29:d5:6b:de:24:1b:
72:3a:48:d9:1f:95:5c:54:5f:cd:8c:b7:26:e0:76:a5:33:36:
95:12:b0:98:39:32:83:f9:bd:82:85:c7:10:06:3d:91:cc:9e:
14:b7:e1:ff:8e:57:90:77:2f:2c:b4:4a:18:ec:5c:e1:29:d4:
1b:73:9b:09:35:08:97:d9:41:64:ef:1e:96:96:11:a1:5e:cb:
18:d9:77:77:fa:b1:01:ca:4d:98:92:bc:b7:0a:78:60:48:bb:
71:ec:97:86:37:6a:8d:c3:ca:5f:ea:f8:e8:ec:bf:ea:f4:0b:
3a:f9:fc:b3:dd:1f:6f:84:c2:1e:ed:0a:53:aa:8d:7a:4b:05:
b3:18:29:74:da:da:a5:6b:9f:fa:62:b1:8e:d6:86:3a:e0:e5:
cd:a2:d7:31:87:88:92:c6:6a:9c:0e:ce:b2:96:95:39:95:8d:
de:0a:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:29:30 2025 by rpki-client