Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NdSzPA-aTlHeSah62RcwdtePR5s.roa
File: NdSzPA-aTlHeSah62RcwdtePR5s.roa (raw, json)
Hash identifier: SDkmlnbijgzkDrsoLc+rYpmAc9Vtg5DRxa7opHJDbGk=
Subject key identifier: 35:D4:B3:3C:0F:9A:4E:51:DE:49:A8:7A:D9:17:30:76:D7:8F:47:9B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246E1D333D2645E67CE9E0AA2182D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NdSzPA-aTlHeSah62RcwdtePR5s.roa
Signing time: Thu 02 Jan 2025 17:51:03 +0000
ROA not before: Thu 02 Jan 2025 17:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31404
IP address blocks: 193.148.48.0/22 maxlen: 24
194.11.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6e:1d:33:3d:26:45:e6:7c:e9:e0:aa:21:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35d4b33c0f9a4e51de49a87ad9173076d78f479b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:ff:34:9f:11:db:e3:98:51:cc:cc:04:98:
ac:07:77:a8:02:b1:83:8b:d7:fa:d6:cf:75:59:c8:
d6:ab:62:ad:4c:cb:34:ab:0a:61:65:cd:ec:76:73:
83:2e:48:35:1d:6b:07:36:4e:7e:99:59:ab:0a:2e:
a0:7a:cd:82:e3:47:b8:3f:19:7c:37:c1:96:c3:83:
71:f8:06:ea:a2:0b:8d:f3:75:d0:0a:6b:1c:73:2f:
30:d7:8b:cb:48:0d:3d:0b:ba:3f:a4:0b:ed:a2:80:
67:f6:f9:97:c0:83:c0:29:73:20:a3:71:76:b3:be:
ed:2a:c0:2e:18:37:e4:49:73:52:ea:5c:c0:90:80:
9d:cd:dd:2b:d7:97:da:57:d9:da:26:74:33:49:81:
13:00:1b:d5:f6:51:b5:25:29:be:25:99:1a:ce:6f:
c8:a1:f4:22:4d:e9:98:67:12:0b:b5:49:7c:3d:7f:
38:6d:5a:56:9d:0f:49:ec:ad:4f:c6:2e:4d:31:cd:
d5:17:f2:5b:2e:32:e4:0a:03:58:1e:04:0c:e7:11:
3b:f5:21:2b:eb:fd:91:23:da:d2:f3:64:c5:0a:5f:
ae:64:82:4b:3f:ab:2a:a4:f4:bf:15:0b:2d:4f:ac:
4b:92:cd:fb:cf:4f:c7:a6:d0:19:f3:30:9d:8d:5a:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:B3:3C:0F:9A:4E:51:DE:49:A8:7A:D9:17:30:76:D7:8F:47:9B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NdSzPA-aTlHeSah62RcwdtePR5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d7:59:1f:b2:22:de:d1:91:b3:73:5a:5f:bc:33:50:4d:76:
35:b8:bb:4f:34:2e:b6:b7:ed:b9:0c:36:5b:bd:4f:b1:de:b5:
23:39:e6:82:18:fb:d1:6f:58:9d:e3:f6:4c:1c:e3:78:3a:02:
b1:07:a3:05:33:10:32:df:c8:fc:97:83:93:05:42:d5:00:d5:
15:15:53:dd:56:0c:93:03:72:3c:94:39:c1:93:5a:be:ef:e2:
aa:11:22:ba:3d:11:ea:ad:b7:4c:0e:d5:ee:72:48:f8:72:b5:
de:10:b2:d3:16:37:db:40:09:c2:e6:77:97:94:ae:6a:bd:e6:
34:10:49:17:a8:6f:0c:16:06:2f:bd:bf:5e:40:74:7c:10:3f:
de:bb:50:28:72:c4:0b:52:9f:26:19:ac:dc:42:e3:1a:46:dd:
56:4b:ac:a3:a6:58:f2:f3:8b:cd:b0:a9:b8:9f:c9:59:be:15:
70:67:02:df:59:b0:6b:5f:74:16:c8:55:59:91:ed:9d:f7:31:
6e:b2:ad:fe:83:f6:cc:5d:b4:2f:25:40:ec:95:db:9b:ec:c3:
c1:8c:1b:cb:54:e3:98:1a:11:8a:1b:9b:74:3d:16:98:d9:12:
6b:55:77:9d:f1:eb:ea:06:5d:b7:fc:7c:6a:52:93:b7:98:e7:
f2:e2:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:01 2025 by rpki-client