Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nzUW4pj1ZSyzywu2o7b7jkMZHMk.roa
File: nzUW4pj1ZSyzywu2o7b7jkMZHMk.roa (raw, json)
Hash identifier: YyRwR2YBGXeTB7FB1IQQqNGv2s2r49w4U860NFssd1k=
Subject key identifier: 9F:35:16:E2:98:F5:65:2C:B3:CB:0B:B6:A3:B6:FB:8E:43:19:1C:C9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01955878667FFA2FC738999F864E6007D7A0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nzUW4pj1ZSyzywu2o7b7jkMZHMk.roa
Signing time: Sun 02 Mar 2025 20:07:20 +0000
ROA not before: Sun 02 Mar 2025 20:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 94.103.166.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:58:78:66:7f:fa:2f:c7:38:99:9f:86:4e:60:07:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 20:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f3516e298f5652cb3cb0bb6a3b6fb8e43191cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:29:0a:f1:68:f3:17:7b:7f:d7:45:7d:da:
57:6f:c2:37:b7:cd:0c:98:2e:11:57:07:f9:16:4d:
3f:cb:10:d2:1d:4d:ae:d9:f0:0c:26:e1:11:1e:67:
30:ec:72:0e:d8:33:e5:45:57:33:5b:ca:1a:e4:b3:
aa:8e:80:da:24:8b:e8:f9:27:88:3c:02:8e:36:7c:
72:44:ac:0e:f7:bf:54:a7:5f:62:a6:d9:34:a8:fa:
34:d0:b5:a1:c4:d6:87:3b:b7:6e:1c:ca:cf:df:e5:
64:77:e9:d9:cb:a7:66:11:85:77:24:b3:90:b1:96:
29:00:13:77:49:d8:87:c3:46:cf:68:7a:93:98:84:
af:27:da:4e:c3:a6:b8:08:f3:69:66:f2:9a:1e:80:
ad:14:9c:9f:fe:f4:d4:73:04:6e:b0:11:51:a6:fc:
4c:84:89:07:e4:ef:c6:85:bd:58:f9:5d:53:f2:05:
bf:0d:fa:84:9c:4e:1b:ba:fb:d1:53:22:cc:5c:2e:
e0:8f:33:5a:d8:84:88:6b:e4:c2:e7:36:de:02:19:
73:6f:a3:6a:02:da:99:51:b2:f3:b9:17:cd:57:3e:
82:d0:2e:f0:5e:ad:cd:ba:be:24:d2:2e:19:f2:02:
03:4b:c3:9c:ee:bd:11:99:d0:85:97:9d:68:31:f7:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:16:E2:98:F5:65:2C:B3:CB:0B:B6:A3:B6:FB:8E:43:19:1C:C9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nzUW4pj1ZSyzywu2o7b7jkMZHMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d5:e5:a0:be:e3:ca:23:a5:9b:3c:ba:dc:90:75:e7:50:24:
da:68:9a:c1:d0:90:17:ae:55:22:cf:df:89:65:9d:b5:6f:a1:
d6:b2:8e:05:13:2a:fe:c3:f6:7a:73:f8:e9:14:42:1c:9c:d4:
13:fa:0c:2d:75:83:69:df:10:50:88:36:7c:94:84:59:e5:33:
52:77:81:ab:68:60:db:03:4b:1d:f3:c6:90:96:08:fd:21:8a:
fe:85:03:75:b5:4d:72:28:0a:43:8d:8e:06:1c:9c:a0:8a:40:
91:7b:62:d9:5e:63:4f:37:7b:04:5f:c6:eb:4c:19:02:6b:53:
84:31:bb:83:be:c7:96:f2:a3:76:e3:4c:d9:fb:2d:e0:d8:67:
0f:b0:16:b5:03:fc:82:38:b5:59:44:8d:ef:89:0b:21:f7:b7:
e6:ae:f5:2f:7e:3e:c9:90:a5:3e:24:6d:59:22:07:95:2a:80:
87:98:ca:e8:19:45:45:4a:d9:e3:e8:21:0f:ad:f4:1f:ff:84:
7e:af:74:f0:61:9a:7c:b9:1a:87:c8:89:fc:ca:c3:ca:4b:2a:
86:fd:e7:65:9f:8b:43:46:93:43:92:5f:dc:6f:69:4d:a9:c3:
7b:10:8b:32:b2:7f:96:cd:b7:ae:87:65:81:4d:a1:6b:70:2f:
5d:c8:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:50 2025 by rpki-client