Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/NaamLFW_oKTnWlrMvBxG2icERPo.roa
File: NaamLFW_oKTnWlrMvBxG2icERPo.roa (raw, json)
Hash identifier: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=
Subject key identifier: 35:A6:A6:2C:55:BF:A0:A4:E7:5A:5A:CC:BC:1C:46:DA:27:04:44:FA
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01942368F2E66CC9FCB714B3171F2DF4E9E6
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/NaamLFW_oKTnWlrMvBxG2icERPo.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59772
IP address blocks: 91.239.209.0/24 maxlen: 24
159.255.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f2:e6:6c:c9:fc:b7:14:b3:17:1f:2d:f4:e9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35a6a62c55bfa0a4e75a5accbc1c46da270444fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:49:10:5f:c0:75:a1:c5:f2:6f:24:ab:13:
7d:d6:95:f0:db:cb:d1:4f:5c:46:dc:fc:f8:da:41:
9f:3b:cb:fd:4b:af:47:0a:40:5d:62:89:63:1b:64:
93:cd:bd:dd:26:99:ca:47:af:aa:de:ab:61:eb:eb:
e8:76:42:e0:3e:a7:8d:bd:55:a9:ca:fa:81:37:24:
f9:37:07:dd:06:13:e7:50:b3:a7:d3:ea:05:22:34:
31:93:d4:6f:88:99:20:82:0e:2c:64:76:b2:a9:37:
96:aa:93:73:2c:e1:2c:24:83:e9:fb:a2:ca:ae:78:
46:ee:4a:96:ce:bf:99:d7:af:2a:16:7d:8c:d9:40:
00:8d:6e:29:fb:5d:da:a2:43:58:53:3f:fa:63:29:
f7:6b:30:76:d3:13:3a:24:b9:01:6f:e9:cf:c2:41:
3a:07:4c:8d:26:c7:69:79:e6:94:22:05:9c:3e:f7:
c1:65:9d:3e:f4:a4:5c:8f:bd:39:3a:5f:64:cd:7b:
c5:8f:df:a0:a6:80:75:8c:91:10:d9:99:fb:a9:a6:
7a:d5:a0:80:bd:96:08:dc:f7:a1:39:3b:bf:cd:09:
a9:20:3b:5b:2f:18:6b:0b:02:f8:bd:ac:ed:c8:38:
52:dc:77:22:92:5b:07:49:dd:7b:db:c5:71:24:16:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A6:A6:2C:55:BF:A0:A4:E7:5A:5A:CC:BC:1C:46:DA:27:04:44:FA
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/NaamLFW_oKTnWlrMvBxG2icERPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.209.0/24
159.255.150.0/24
Signature Algorithm: sha256WithRSAEncryption
97:78:e9:41:44:25:1b:91:dd:14:b1:ee:9a:46:42:3c:7f:17:
0b:1c:b1:c4:c9:01:e8:a1:58:b3:1f:1c:2f:1e:a4:52:09:3f:
11:66:9f:9a:a8:51:25:71:15:0e:59:5e:95:63:57:f7:5f:85:
59:6d:55:67:99:8b:9e:a6:de:86:2f:b3:03:14:4b:fa:88:33:
97:bc:27:63:e0:76:43:3e:6b:99:91:57:f1:b3:fc:16:8c:7a:
4d:9f:d4:db:48:43:ee:d0:57:8b:19:a6:e9:8e:5d:6f:64:c1:
ec:94:c3:70:82:a5:71:71:cc:1d:11:aa:6e:5e:8b:89:28:93:
73:25:c4:da:23:b1:a9:c1:a7:99:db:4b:61:dd:c8:8b:de:af:
43:1c:64:a4:06:50:a2:c8:1d:a4:6a:17:07:bf:96:44:16:c4:
7c:05:5d:38:fa:a3:78:18:b1:21:70:64:42:b5:b1:73:18:c4:
85:e4:3f:45:a9:61:6e:12:09:98:e3:7f:d1:98:ca:c7:7a:43:
f2:08:68:3d:c0:91:33:b4:ae:99:6d:52:82:aa:97:cb:d4:c4:
da:47:fb:fd:1c:c5:28:b1:ae:63:b1:a3:50:48:9f:b5:9e:87:
c8:3a:09:3b:2a:6d:85:78:48:a5:76:c1:86:ad:11:b1:a2:15:
3e:44:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:08 2025 by rpki-client