Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/NITbO875mrdOpyy2Oub1WjTXRME.roa
File: NITbO875mrdOpyy2Oub1WjTXRME.roa (raw, json)
Hash identifier: LUV+8QWyYohosH2BSjrDYqaOBTKxIPY7rWYdd7sEw7Y=
Subject key identifier: 34:84:DB:3B:CE:F9:9A:B7:4E:A7:2C:B6:3A:E6:F5:5A:34:D7:44:C1
Certificate issuer: /CN=f2fdf5e388e90672ecfd28bd868e2e1d40a54535
Certificate serial: 0A222AB8
Authority key identifier: F2:FD:F5:E3:88:E9:06:72:EC:FD:28:BD:86:8E:2E:1D:40:A5:45:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v3144jpBnLs_Si9ho4uHUClRTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/NITbO875mrdOpyy2Oub1WjTXRME.roa
Signing time: Sat 01 Jan 2022 03:53:37 +0000
ROA not before: Sat 01 Jan 2022 03:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 193.176.78.0/24 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170011320 (0xa222ab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fdf5e388e90672ecfd28bd868e2e1d40a54535
Validity
Not Before: Jan 1 03:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3484db3bcef99ab74ea72cb63ae6f55a34d744c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:b9:91:d9:70:9f:80:d1:ac:c5:f7:b8:51:
8c:68:93:cc:c0:12:0b:3d:55:ac:10:5b:94:8e:a6:
0e:90:aa:c8:b9:13:a1:4f:93:dd:e0:aa:21:7f:58:
08:c0:1c:b2:52:b2:8b:fb:f2:3e:80:77:ba:83:29:
4e:a7:7f:aa:16:75:4a:98:e8:fd:5b:b4:aa:d9:41:
6f:67:53:57:4e:fd:08:b3:ab:ca:26:40:74:5b:27:
40:b9:c5:f7:f8:62:98:07:73:7a:d1:91:40:c8:ce:
6a:91:32:62:21:2d:71:ca:84:d6:30:a6:06:bc:7c:
36:95:24:7f:9a:0e:79:09:e1:46:30:70:b2:38:d5:
c1:89:8a:9f:22:7c:c4:84:3f:7f:8c:b2:01:ee:5a:
b8:27:15:ff:5d:75:3a:c7:b6:90:7e:d6:8e:0f:c4:
84:ee:fa:2c:e0:8d:2e:67:93:50:b9:49:c7:99:35:
da:4a:5e:6e:75:a5:71:0f:9f:55:39:f2:d3:a9:99:
db:dd:13:89:9f:84:63:ad:6a:85:6e:77:e3:4b:70:
59:97:fa:e6:3c:ac:1d:25:03:62:0c:76:61:49:c3:
49:e9:36:11:a3:b2:91:35:a7:0f:62:e4:61:fe:27:
ca:e2:5f:d1:2c:14:c9:5c:af:ad:5b:fb:e2:98:06:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:DB:3B:CE:F9:9A:B7:4E:A7:2C:B6:3A:E6:F5:5A:34:D7:44:C1
X509v3 Authority Key Identifier:
keyid:F2:FD:F5:E3:88:E9:06:72:EC:FD:28:BD:86:8E:2E:1D:40:A5:45:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v3144jpBnLs_Si9ho4uHUClRTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/NITbO875mrdOpyy2Oub1WjTXRME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7effeb-4f45-411a-ab66-cbe0c252b598/1/8v3144jpBnLs_Si9ho4uHUClRTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.76.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:0e:78:81:e7:7a:93:de:27:89:0b:8e:b2:f8:79:ee:48:e8:
32:3f:11:7b:cb:d7:97:d4:9b:68:f1:b2:f4:24:88:56:0c:d8:
c6:f7:0f:7e:4c:14:e4:67:a9:6a:60:79:c1:d9:8a:98:87:36:
3f:8f:5f:30:9d:b9:59:18:1b:14:bb:7b:42:ff:b7:fd:5f:63:
85:11:5f:92:17:84:c4:7e:ab:f3:23:b9:06:69:71:c8:2f:3d:
bc:18:97:94:46:67:58:1c:a9:40:9e:8c:ef:11:a3:dc:da:47:
0e:44:83:3d:31:cf:df:c0:e4:8e:91:39:f5:e5:21:04:31:ac:
1a:3c:6b:09:b2:d9:bb:2e:36:82:e4:14:d6:2b:dc:50:39:fe:
8f:1e:7c:2f:98:70:9a:3a:07:ac:36:9f:5f:68:2c:be:c5:e7:
a4:fe:95:00:4b:89:35:b0:6d:98:c6:fd:5a:dc:54:79:49:00:
6a:9f:f6:81:18:a4:62:a4:db:7c:51:ea:24:54:27:bd:31:a3:
61:66:d2:d7:68:68:81:7c:c7:b4:a3:b7:bd:fe:a6:83:c1:68:
9b:e6:90:e0:f6:20:f1:b3:84:58:2f:f3:7c:b9:98:d3:de:f7:
f5:82:b1:66:a5:06:27:07:cf:c6:cf:1d:0e:06:95:9f:09:fb:
29:48:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:58:07 2025 by rpki-client