Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N2rdTeaDICWpVUyeu93dXOcCTew.roa
File: N2rdTeaDICWpVUyeu93dXOcCTew.roa (raw, json)
Hash identifier: 11jOKpQ351LZYvgp40H3xKCQTtf4O7OMKDSAj1bscIs=
Subject key identifier: 37:6A:DD:4D:E6:83:20:25:A9:55:4C:9E:BB:DD:DD:5C:E7:02:4D:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824806E15BD32D42A035562DCE0669C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N2rdTeaDICWpVUyeu93dXOcCTew.roa
Signing time: Thu 02 Jan 2025 17:51:08 +0000
ROA not before: Thu 02 Jan 2025 17:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 91.92.27.0/24 maxlen: 24
185.221.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:80:6e:15:bd:32:d4:2a:03:55:62:dc:e0:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=376add4de6832025a9554c9ebbdddd5ce7024dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:1e:0b:22:f3:fc:87:30:05:56:2a:6c:ad:
94:bb:40:85:22:2c:99:a7:13:5d:5d:8d:cb:f6:86:
9e:0e:fc:a1:2b:e2:e7:d2:1f:98:ce:b5:a6:d4:ef:
49:c9:19:6d:7e:5c:e3:99:1a:32:36:e4:2c:12:2a:
90:84:8f:17:2f:a1:63:3a:c1:02:9e:63:2c:ab:19:
a8:1c:aa:bc:a8:07:07:80:1e:70:7f:1b:f4:55:2c:
aa:03:8f:a8:2b:0a:16:58:98:81:0c:27:12:ce:21:
fc:0f:70:45:48:39:87:79:0b:5b:60:df:05:2b:1a:
ec:b3:ff:7f:b5:d5:33:90:fc:53:51:cf:90:e0:15:
60:49:8f:d0:4d:0c:93:60:f4:b4:3e:55:c0:8a:f5:
62:5b:db:86:dd:03:6c:80:00:ee:7d:96:5f:57:4e:
c3:a8:d1:e8:40:46:7a:39:55:32:9a:9b:e5:04:e2:
14:7e:a5:a8:06:68:03:ee:91:9a:48:02:96:a0:c7:
bc:80:8d:46:e9:87:dd:76:48:f8:9b:87:cf:fe:e1:
cd:86:ac:e6:b4:9f:65:8e:4c:93:23:5e:d2:95:76:
f2:8d:6a:46:88:6d:97:b8:a6:cb:0a:d6:17:de:ae:
03:5e:6c:26:b2:22:ea:6f:e1:61:8c:48:34:4f:6e:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:DD:4D:E6:83:20:25:A9:55:4C:9E:BB:DD:DD:5C:E7:02:4D:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N2rdTeaDICWpVUyeu93dXOcCTew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.27.0/24
185.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:75:46:b2:08:2f:a4:6e:a0:7f:cb:2f:77:86:3d:88:3f:dd:
ea:d4:33:4c:bd:c1:ce:b7:f3:7b:88:52:43:cd:fd:5a:86:03:
88:38:ff:f9:cd:cf:59:72:1d:3f:78:e3:b9:0c:80:36:af:f2:
51:cf:76:36:35:d5:71:84:a5:87:02:41:e3:ac:3f:46:5a:01:
1d:7a:ee:33:a5:b2:96:47:e5:9b:bb:7e:4e:fb:7d:bb:ae:80:
a1:c3:7c:1c:36:af:dd:76:ef:ff:2c:2d:bd:09:99:7c:29:7b:
93:4a:1b:bc:7e:dc:52:02:65:28:f3:80:02:8e:89:1c:83:fa:
bb:b6:5f:8e:c1:d0:56:4f:dc:54:81:4e:fa:c1:eb:02:d3:77:
b5:f6:6e:93:de:07:25:51:18:0e:fe:b9:db:1b:5d:d6:f3:c0:
94:7a:fe:89:82:5e:56:0f:54:6c:44:49:ee:fb:c0:b0:eb:12:
83:93:a4:09:22:41:f1:0e:2c:dc:4a:1b:d1:9c:13:58:d9:ad:
be:3f:25:0a:8a:26:6f:41:74:7e:aa:9d:00:b5:5f:6d:be:94:
13:37:bc:1e:eb:f8:46:27:20:2a:2a:5f:a3:0e:ad:5d:d8:a0:
f6:3a:73:10:81:70:ae:50:09:6d:8f:df:8f:0d:b7:34:0a:9e:
5a:a4:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:37 2025 by rpki-client