Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/NO2hwXxk6AiYVNho9DdnmakKibo.roa
File: NO2hwXxk6AiYVNho9DdnmakKibo.roa (raw, json)
Hash identifier: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=
Subject key identifier: 34:ED:A1:C1:7C:64:E8:08:98:54:D8:68:F4:37:67:99:A9:0A:89:BA
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 019420685629BBDB7304E1E58F7E9716FD0D
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/NO2hwXxk6AiYVNho9DdnmakKibo.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210536
IP address blocks: 25.129.198.0/24 maxlen: 24
25.129.199.0/24 maxlen: 24
2a08:600:ee::/48 maxlen: 48
2a08:600:ef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:56:29:bb:db:73:04:e1:e5:8f:7e:97:16:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34eda1c17c64e8089854d868f4376799a90a89ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:19:a6:2e:86:a9:cb:01:5b:bf:4b:48:ff:
48:a5:b2:a9:97:5f:c9:e9:2e:20:46:1a:5d:63:e8:
6a:ab:ac:2b:b6:ee:60:1e:2b:76:c8:ac:23:ec:f9:
14:b4:98:12:95:09:b1:de:1e:e4:c0:56:03:5e:34:
c2:68:bd:67:f8:19:00:31:77:8d:ee:f5:c6:7e:a2:
9c:80:4b:03:b5:be:51:be:c8:7c:35:05:0a:08:f1:
92:c3:c8:9f:ad:72:2c:b7:c8:54:16:8a:0b:09:3f:
34:e8:c0:92:d7:8a:3e:57:c6:f9:02:8e:d8:81:b7:
b3:2c:47:8c:d6:18:e0:9e:a2:8b:5d:ba:35:c5:7c:
a8:e8:54:02:2b:85:de:d3:26:a2:3c:be:25:2b:1a:
c7:bb:7e:6a:c4:38:8d:7e:bf:89:73:af:e9:89:cb:
42:ee:b8:eb:81:d2:c2:89:0f:1f:86:57:ca:aa:ca:
26:01:a1:e3:e2:a7:44:f6:f6:f6:80:64:ff:a1:80:
4f:4a:d5:5c:2c:7c:52:8a:77:64:99:58:3c:28:f3:
fa:33:a6:5f:7a:32:1d:10:36:b7:0f:91:fd:7b:c1:
f7:03:40:59:e5:7f:b7:85:c0:39:19:d4:63:ec:78:
6f:0e:ca:fa:45:e0:e8:ec:8a:78:29:1a:9c:ee:cc:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:A1:C1:7C:64:E8:08:98:54:D8:68:F4:37:67:99:A9:0A:89:BA
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/NO2hwXxk6AiYVNho9DdnmakKibo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
25.129.198.0/23
IPv6:
2a08:600:ee::/47
Signature Algorithm: sha256WithRSAEncryption
3e:bc:86:49:65:2a:b8:41:68:c1:28:9b:cd:87:28:82:84:ef:
ae:bc:7f:40:68:d5:ef:a1:15:7c:08:43:8a:0a:22:96:9e:dc:
36:22:c4:40:bc:65:b6:0d:be:65:56:72:9b:e6:56:a7:38:ca:
92:41:4c:1a:7d:6d:1b:9c:74:b1:74:8d:d4:08:fd:4e:d7:ad:
d2:d0:ae:a0:28:76:c7:58:44:28:30:27:b5:b6:29:c6:72:2d:
2c:c1:5f:d3:26:82:10:74:91:b6:60:33:00:af:af:2c:4b:6b:
bd:4a:40:8d:ff:54:17:27:2a:6c:f4:ed:25:8f:cc:6b:69:61:
e7:f2:e4:d1:ee:28:ba:08:a9:37:d8:cd:5a:33:b1:ce:51:ab:
5e:6e:0c:b2:a0:5c:4b:3e:04:da:6d:d9:8c:bc:dd:9d:73:d4:
e9:cf:a9:cc:15:60:c5:a4:83:10:7a:d4:23:0a:c1:2c:7a:dc:
62:50:4f:11:34:b2:71:e3:ae:a8:e9:af:1e:5a:1a:7d:1c:74:
56:7c:22:89:0f:fe:50:c6:7d:6d:1c:8f:dc:b1:c2:c7:19:b0:
0f:e2:e3:0f:35:78:5f:f3:b8:43:c6:6b:c1:4c:81:93:e6:b9:
55:13:3e:d9:0e:5b:90:9d:bd:4a:5f:4f:36:ed:a7:88:9c:7b:
f7:35:5e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:02 2025 by rpki-client