Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/nOavIXppWmDFhXdDEZ0V1cMIqeg.roa
File: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (raw, json)
Hash identifier: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=
Subject key identifier: 9C:E6:AF:21:7A:69:5A:60:C5:85:77:43:11:9D:15:D5:C3:08:A9:E8
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 019421B209027300EECAB4E51CAD3D3829C3
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/nOavIXppWmDFhXdDEZ0V1cMIqeg.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51955
IP address blocks: 91.198.156.0/24 maxlen: 24
194.0.8.0/24 maxlen: 24
194.0.48.0/24 maxlen: 24
194.0.49.0/24 maxlen: 24
194.0.50.0/24 maxlen: 24
194.8.2.0/24 maxlen: 24
194.8.3.0/24 maxlen: 24
2001:678:b::/48 maxlen: 48
2001:678:7c::/48 maxlen: 48
2001:678:80::/48 maxlen: 48
2001:678:84::/48 maxlen: 48
2a02:503::/48 maxlen: 48
2a02:503:1::/48 maxlen: 48
2a02:503:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:09:02:73:00:ee:ca:b4:e5:1c:ad:3d:38:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce6af217a695a60c5857743119d15d5c308a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:19:1d:86:da:ee:8a:4e:c8:3b:0c:d1:da:
ea:94:2a:be:3d:bc:74:c3:6d:3b:4b:66:d7:3c:7a:
65:30:1e:a6:58:d6:56:c8:b9:a3:13:41:60:cf:6c:
7c:56:bf:7e:f1:8e:80:ff:3f:c8:5e:24:99:13:40:
32:20:ec:99:57:1a:13:de:d6:a4:24:26:ac:16:99:
4d:31:0f:0b:db:cf:3e:a7:a0:22:da:d2:0c:86:66:
17:be:bd:0e:b8:11:13:7c:af:ac:7e:91:22:8e:99:
e2:20:02:8f:7a:a4:c2:15:1c:4e:9b:c7:7f:e0:a5:
1b:5c:b2:27:75:28:c6:af:70:e0:f3:7f:e4:10:aa:
f5:17:94:ae:53:36:4e:d2:ca:f6:fe:26:bf:5f:24:
af:0b:1c:cd:5d:45:94:70:d1:62:14:45:27:7d:c2:
f8:3e:95:2a:c3:99:9f:cb:64:ac:cc:54:d3:48:20:
25:c7:8e:1d:a2:d1:99:fb:36:8a:f5:ad:33:f4:20:
47:2b:f3:dc:4a:ef:89:dc:de:1a:ee:b2:6e:1f:38:
1b:49:37:65:19:8e:f7:df:f7:f5:9c:76:c9:13:96:
46:9b:1a:8d:70:f7:ef:e3:51:ea:58:65:45:45:30:
b9:e4:30:c1:5a:3b:42:dd:9c:43:5f:8b:03:ea:4a:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:AF:21:7A:69:5A:60:C5:85:77:43:11:9D:15:D5:C3:08:A9:E8
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/nOavIXppWmDFhXdDEZ0V1cMIqeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.156.0/24
194.0.8.0/24
194.0.48.0-194.0.50.255
194.8.2.0/23
IPv6:
2001:678:b::/48
2001:678:7c::/48
2001:678:80::/48
2001:678:84::/48
2a02:503::/47
2a02:503:8::/48
Signature Algorithm: sha256WithRSAEncryption
6f:cc:dc:0b:94:00:71:37:2b:12:6e:b5:6b:0e:6a:84:fe:d2:
d0:2e:fe:58:c6:f5:2a:79:32:50:a0:5d:2c:67:30:e9:c4:f9:
0e:4f:10:7a:36:f1:f4:d1:7d:71:95:e9:dc:93:5f:0c:7b:5a:
5d:c5:a6:56:8c:1d:78:3b:cc:9a:82:5b:1d:f9:0c:dd:c3:7a:
ad:87:55:1b:e6:59:99:22:97:86:46:54:2e:60:49:27:a7:45:
2c:57:3a:f1:f8:2c:aa:ea:36:a7:2f:22:27:7a:af:e7:36:02:
7f:a9:6f:c1:0f:0f:a9:8b:9d:7b:24:1d:ca:29:1b:d9:0b:00:
c0:bc:af:62:e2:5b:0d:c3:ba:3b:81:c1:d5:41:17:3a:54:b6:
69:fe:6d:a4:bd:c8:39:4f:cc:7a:dd:22:f3:07:3e:ff:22:b8:
f2:c5:a5:b6:ad:6a:57:54:46:b8:79:97:ec:91:19:7b:50:7a:
57:51:66:9a:a4:eb:6c:f5:c0:ff:46:1b:05:c8:06:a9:91:be:
d0:56:28:2c:17:98:91:d2:af:2e:8e:22:97:62:92:2d:f7:dc:
20:48:28:df:3e:47:fd:8b:c1:66:ae:c8:ca:1c:a2:ca:d3:52:
eb:dd:2f:44:03:95:c4:55:5c:13:a1:f3:4f:53:e9:d8:7a:2e:
33:f1:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:12 2025 by rpki-client