Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/NReTA04T-77ajSQKWxM1eqqKR6E.roa
File: NReTA04T-77ajSQKWxM1eqqKR6E.roa (raw, json)
Hash identifier: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=
Subject key identifier: 35:17:93:03:4E:13:FB:BE:DA:8D:24:0A:5B:13:35:7A:AA:8A:47:A1
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019427474F38C5CF06CCFC256A1E4A7BED71
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/NReTA04T-77ajSQKWxM1eqqKR6E.roa
Signing time: Thu 02 Jan 2025 13:49:32 +0000
ROA not before: Thu 02 Jan 2025 13:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210626
IP address blocks: 91.242.247.0/24 maxlen: 24
2a11:af40::/29 maxlen: 29
2a11:af40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:4f:38:c5:cf:06:cc:fc:25:6a:1e:4a:7b:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jan 2 13:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351793034e13fbbeda8d240a5b13357aaa8a47a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:6e:69:0f:02:aa:34:b1:37:c3:f8:0f:b1:
c1:42:86:8a:af:2d:a9:3c:1a:4d:7b:96:63:fe:31:
63:f3:84:f5:af:72:c2:02:e5:af:f1:80:fd:07:33:
17:f2:93:5c:be:5c:c6:6e:82:05:18:38:22:c7:9a:
a0:c9:06:95:8a:2f:51:74:0c:f7:5b:f6:9c:9f:d0:
0d:f1:30:f2:2c:b0:14:63:e4:00:47:3e:b4:8e:35:
39:d8:01:e4:57:78:1b:eb:ed:2f:a7:6e:57:a4:d9:
3a:d4:f9:ed:9e:78:26:c9:49:22:f2:8a:9a:28:36:
5c:6a:da:de:22:c6:e3:e5:bd:40:1e:05:64:c0:43:
52:d5:5e:94:0b:92:27:c6:c0:2a:e4:95:09:ce:e1:
8c:d2:9d:3e:3d:62:2a:25:b2:ad:eb:f4:25:39:5d:
e3:54:37:29:f2:03:93:66:8f:d5:ef:e5:a7:a8:9d:
bf:16:89:39:5e:22:3b:1b:86:6e:99:81:3d:52:a9:
ab:af:cd:aa:c8:58:4b:9a:99:8f:27:8b:4b:89:24:
c0:3f:67:01:f6:b8:8d:6f:0b:9b:34:b3:be:73:aa:
57:8f:07:7f:22:97:11:07:b5:e6:11:2c:0f:a9:5a:
df:36:e6:01:67:fc:e4:6c:37:57:87:a5:7a:71:f6:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:93:03:4E:13:FB:BE:DA:8D:24:0A:5B:13:35:7A:AA:8A:47:A1
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/NReTA04T-77ajSQKWxM1eqqKR6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.247.0/24
IPv6:
2a11:af40::/29
Signature Algorithm: sha256WithRSAEncryption
83:40:be:25:0b:e6:c9:11:d2:3c:ab:93:d1:6c:27:3f:a6:37:
18:54:01:49:aa:04:79:4a:60:08:62:77:d3:06:00:84:ef:80:
2e:cb:30:6c:02:6b:ab:a8:2f:3a:6e:ac:62:73:f5:d8:42:63:
84:4b:aa:a8:ec:82:1c:65:45:ee:d7:68:f3:8a:ac:66:fc:52:
1d:c5:bd:55:c9:4e:fb:28:9f:b1:f6:58:69:d1:bd:7a:21:21:
8a:97:4d:22:ad:eb:9f:77:8f:9c:4a:43:b0:88:81:6a:ac:53:
65:ac:69:58:d1:cd:f3:54:70:8d:b2:47:14:62:cd:90:79:46:
e0:0c:f0:31:86:c1:4d:e1:c2:f8:8e:44:91:71:81:82:26:ee:
98:82:94:82:4b:91:a7:a1:4f:bd:bc:a5:ce:1b:77:b9:01:12:
99:aa:2e:5a:12:22:2a:67:a1:e8:3b:7f:14:c6:93:e6:f1:ec:
7d:c5:ad:8a:bd:71:ca:0d:4e:00:41:cc:4f:c6:8c:26:cc:c4:
d4:f9:54:6a:27:eb:31:19:f0:a5:96:1e:f1:91:cc:15:0e:08:
bb:e3:91:33:c5:25:0a:88:f7:a5:c0:01:ed:4f:22:d9:c0:94:
f4:a0:6b:9a:65:5c:ce:64:03:d9:66:77:90:ae:a8:7d:e4:18:
e2:9f:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:39 2025 by rpki-client