Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/cNiza7IEiNMNBNBagOrbk4czUFI.roa
File: cNiza7IEiNMNBNBagOrbk4czUFI.roa (raw, json)
Hash identifier: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=
Subject key identifier: 70:D8:B3:6B:B2:04:88:D3:0D:04:D0:5A:80:EA:DB:93:87:33:50:52
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019425216C5331D8F25A7F668B6EEB115E01
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/cNiza7IEiNMNBNBagOrbk4czUFI.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 193.24.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6c:53:31:d8:f2:5a:7f:66:8b:6e:eb:11:5e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70d8b36bb20488d30d04d05a80eadb9387335052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:72:e1:53:fc:99:d2:82:b9:87:26:e7:b2:
13:15:4f:28:3a:ff:4f:f7:61:6b:95:e8:0d:80:fe:
02:5a:80:b8:d4:87:c6:31:af:5f:2c:82:4c:c2:66:
f7:aa:72:ca:56:59:8b:74:f7:d1:33:cb:5f:3a:c1:
6a:c5:92:11:92:e0:a1:67:47:6a:73:97:21:6e:ef:
65:c5:72:b7:88:94:44:1a:13:59:47:20:91:e9:6e:
4b:00:73:6b:70:90:5e:75:21:0d:41:bd:4c:2b:b3:
66:c8:be:af:e4:7f:75:3d:84:5c:42:90:0a:e1:55:
be:a7:58:66:ca:f4:cf:d0:ea:63:d6:8d:80:d2:99:
ee:9c:21:91:ee:50:62:0e:3d:c2:a7:a2:b3:d0:56:
8a:10:1d:6a:e3:70:32:1f:27:86:c5:cc:63:6d:a4:
06:94:2b:7a:e5:83:7e:25:ee:53:cd:c6:64:f1:83:
60:48:f4:6c:a1:aa:81:bd:06:1c:1c:7a:d3:f1:3b:
30:f1:4e:ec:80:cd:cc:e6:d5:b7:f1:d6:3d:b0:76:
f4:6d:f8:52:6e:b3:35:8e:76:88:d2:8b:0c:bf:50:
6d:73:8b:24:69:13:8f:55:19:6c:f8:e7:02:ff:1d:
8b:36:6f:95:ec:1f:d1:a2:73:14:dc:ad:76:a3:20:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:B3:6B:B2:04:88:D3:0D:04:D0:5A:80:EA:DB:93:87:33:50:52
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/cNiza7IEiNMNBNBagOrbk4czUFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.109.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:6e:a9:3c:f7:20:4e:46:86:11:29:54:5b:0d:f7:6e:3e:84:
25:4f:87:8e:83:16:81:83:b9:9b:49:df:cd:c1:a5:55:3e:a7:
74:2a:3f:28:15:cd:bf:66:00:c6:e9:40:ac:f8:96:b5:ec:ee:
49:44:40:f4:6a:e8:18:c4:16:c9:b7:8d:c8:26:51:60:b8:e7:
a0:03:f2:ae:6c:f1:33:f6:a5:9c:68:39:ee:78:97:fb:be:91:
2a:55:f9:e5:5f:22:a8:ab:04:94:fa:ec:68:68:c2:df:4f:c1:
82:33:fd:71:73:94:80:b4:4d:bd:86:56:f0:65:a1:c6:cf:7b:
c9:c8:a7:7e:e1:9d:93:59:c9:92:f3:c5:6d:1e:9d:c3:f9:a0:
52:6a:20:f8:0f:bc:e7:e1:6d:dc:38:d7:b8:88:9e:a3:db:6e:
1c:a5:c6:b2:58:1b:8e:58:97:2d:38:2d:c9:45:ad:ea:6e:89:
f7:fa:f9:09:40:f3:33:32:fd:80:94:2c:b3:ab:3c:95:d4:59:
37:a5:5e:bf:f2:e7:93:f6:76:81:29:29:56:70:0e:e3:a9:ae:
96:b4:a2:c5:c9:b3:77:77:8d:f0:26:13:62:9d:01:85:18:66:
9c:7d:05:e2:47:31:58:fc:49:a5:8c:79:07:d4:65:51:88:d6:
f0:9b:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:28:13 2025 by rpki-client