Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ngDGdtbDgWKKT_HswWBsarpcNIU.roa
File: ngDGdtbDgWKKT_HswWBsarpcNIU.roa (raw, json)
Hash identifier: c6PoeOSQpt513e4nFBgGESPiSVy3uUfGOhEaGHc4gXI=
Subject key identifier: 9E:00:C6:76:D6:C3:81:62:8A:4F:F1:EC:C1:60:6C:6A:BA:5C:34:85
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018FCC959C0633A999F0852ACDC56E9DBA6A
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ngDGdtbDgWKKT_HswWBsarpcNIU.roa
Signing time: Fri 31 May 2024 02:58:27 +0000
ROA not before: Fri 31 May 2024 02:58:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
176.222.48.0/22 maxlen: 24
198.145.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cc:95:9c:06:33:a9:99:f0:85:2a:cd:c5:6e:9d:ba:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: May 31 02:58:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e00c676d6c381628a4ff1ecc1606c6aba5c3485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:1a:81:2e:7a:82:08:f9:30:10:74:f8:1a:
95:b0:66:8f:2d:ae:bc:e0:f2:13:ad:04:45:30:d6:
59:5b:be:55:4b:50:cc:84:26:92:eb:8d:f9:7e:b3:
62:b8:6e:20:76:3c:cb:3c:ff:c6:ef:d9:47:29:25:
87:63:9b:92:b4:0d:37:6b:22:f0:c0:10:c2:9a:2d:
f9:60:c5:f7:be:b8:75:19:0a:b6:a2:7f:86:8c:36:
20:69:e5:df:22:aa:ff:6e:53:88:df:52:3a:07:cd:
b8:d9:8b:16:0c:25:a8:d1:e8:23:e2:be:f9:dd:fd:
fd:8a:48:d1:f6:18:7d:ec:7f:cf:4d:3a:0e:b6:e0:
d8:f6:5d:f8:b5:a6:e4:4d:ad:ee:99:66:8b:7a:d6:
79:41:a5:42:0c:b5:c7:3a:eb:64:8c:1f:dc:56:d2:
c7:66:fc:66:a5:38:fe:be:e1:03:e1:73:7e:8e:f9:
d0:59:49:cb:5f:ca:0c:04:1a:e2:e8:3a:1f:20:64:
31:eb:af:7f:fa:33:ab:1e:90:af:f8:8a:5f:93:45:
29:d0:72:0f:f2:f2:26:5e:b1:ed:c1:c4:18:e1:48:
7a:79:0e:75:1d:6a:0c:10:46:3e:9b:34:a4:ec:6b:
f3:ef:77:f0:b4:19:41:98:7a:43:0c:53:e3:75:ae:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:00:C6:76:D6:C3:81:62:8A:4F:F1:EC:C1:60:6C:6A:BA:5C:34:85
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ngDGdtbDgWKKT_HswWBsarpcNIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0-77.223.201.255
79.139.64.0/23
94.101.103.0/24
176.222.48.0/22
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
05:3e:87:e2:39:29:94:33:ca:8d:d8:f6:9e:7e:ac:d4:61:c7:
ec:be:82:ae:19:5e:bb:70:22:ff:18:62:e5:24:78:b9:2f:9f:
ce:4b:8d:32:15:86:6d:32:1b:02:16:18:43:1b:3e:9d:50:83:
53:55:53:96:57:ed:ac:9a:f9:ab:9c:cf:f7:1b:2c:6b:a5:94:
53:33:24:87:17:ee:ac:54:a1:df:77:79:66:ba:ed:87:63:c9:
3e:54:11:37:e3:63:99:cd:1e:c2:bc:08:26:75:cc:22:df:3a:
1a:e0:79:5d:07:1a:7a:30:05:65:7a:31:c3:41:4a:bd:34:9f:
7e:16:94:83:1d:b9:70:aa:ff:af:b3:c3:09:42:f3:8d:86:a7:
12:9d:ac:22:49:d3:78:a9:d2:14:64:d8:62:9b:f6:39:4e:2d:
b0:b3:d0:f3:85:ca:d2:b3:fd:de:b0:38:2c:49:a7:f1:f0:f0:
c7:10:fc:02:56:cb:e4:aa:0a:66:15:f5:a3:78:7e:b1:4e:0c:
b0:7d:cb:87:13:4f:74:7d:a4:5b:e2:80:fd:bc:4a:68:ae:9f:
7b:74:ba:33:a8:5b:18:d6:dc:91:84:65:da:9b:7c:02:3d:c1:
b3:96:d7:b1:f9:64:ca:82:9d:ce:52:04:1d:57:a1:a5:9c:9a:
6c:2f:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:04 2025 by rpki-client