Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/hN0z1_4mmxKbkIk8CqnnvzNahto.roa
File: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (raw, json)
Hash identifier: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=
Subject key identifier: 84:DD:33:D7:FE:26:9B:12:9B:90:89:3C:0A:A9:E7:BF:33:5A:86:DA
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019427B5EB9FD5206A26A42609D6BDFC5A87
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/hN0z1_4mmxKbkIk8CqnnvzNahto.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 194.125.232.0/22 maxlen: 24
194.242.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:eb:9f:d5:20:6a:26:a4:26:09:d6:bd:fc:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84dd33d7fe269b129b90893c0aa9e7bf335a86da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:86:39:0a:09:db:0b:14:7e:47:32:50:31:
e9:a6:41:a4:6f:b6:52:12:ec:12:f5:d7:01:bc:23:
8e:0b:44:66:ca:08:64:9a:ba:01:e7:32:6a:3a:bf:
fd:ef:86:fc:db:9f:b3:df:a5:d9:4c:65:ae:ab:97:
fc:0b:e1:b9:88:44:56:08:e9:8b:88:8f:6e:93:7a:
dd:b0:03:ed:49:7a:a3:c0:67:4a:a0:d0:c9:a2:53:
af:21:bb:34:71:f2:f6:1e:43:2e:24:fe:bc:6c:57:
dc:a4:e6:82:52:27:7f:5c:be:80:c8:cb:10:2b:16:
78:1a:dc:42:82:b9:41:99:ba:88:40:af:d0:a8:62:
f4:ff:43:b5:3a:20:2a:7d:6f:6f:d8:ad:ba:66:43:
1a:67:08:81:b3:77:13:74:88:78:25:57:cf:c7:56:
6b:81:de:d0:6c:ca:2f:41:86:59:da:91:c4:02:f6:
d5:af:19:67:7d:f6:30:40:5c:76:de:cd:63:83:30:
ee:22:6d:e7:48:12:6c:e9:4e:73:05:dd:aa:f6:ac:
c9:ab:5f:1a:ca:07:24:4c:0e:d3:3f:62:4e:d8:4b:
6e:a6:de:2d:82:9a:2f:78:7e:76:4a:e3:2f:92:88:
e8:56:24:e0:de:a2:a6:85:19:04:64:9f:00:bc:28:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DD:33:D7:FE:26:9B:12:9B:90:89:3C:0A:A9:E7:BF:33:5A:86:DA
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/hN0z1_4mmxKbkIk8CqnnvzNahto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.232.0/22
194.242.32.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8c:b9:9b:1f:61:e7:23:01:42:88:02:4b:4d:5d:cd:d6:a4:
16:45:53:d7:b8:25:f8:03:28:1a:fe:49:a6:5f:07:9c:bb:d5:
19:52:00:3e:aa:56:f3:ab:cc:ca:27:93:77:80:32:4d:f7:a8:
f2:95:f2:6f:c9:08:6b:6e:38:cf:68:ed:92:4d:dd:3c:44:6a:
61:1f:b9:1e:2f:09:e2:95:37:bf:f4:68:db:5a:c3:6c:23:fe:
21:21:b4:d9:c6:ca:e6:c7:e0:fc:c4:14:81:94:90:62:0a:75:
93:2f:72:e0:73:88:6f:b2:7c:a3:94:56:5d:af:e7:f5:bf:ab:
cf:78:4e:67:01:ab:28:96:98:62:6e:af:0f:34:7f:71:8b:85:
22:d8:1d:49:6f:fd:a0:b7:cf:52:d5:b5:7f:d6:bc:8d:81:41:
69:7a:af:5a:29:f7:fe:3c:38:28:4a:72:a3:c2:73:e6:bd:d2:
5b:a5:b7:92:0f:0e:eb:b5:f7:10:ef:96:88:f5:82:00:fb:d6:
0b:b8:98:dd:e2:89:61:bc:b7:c1:f6:16:65:53:0c:60:e6:63:
d2:15:73:1e:35:ae:b1:93:44:84:a0:8d:06:1c:19:97:f7:5f:
2f:3c:c6:63:1f:1d:ac:d3:10:79:26:6c:ed:e4:7e:3a:e5:2c:
a8:3a:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:19:52 2025 by rpki-client