Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa
File: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (raw, json)
Hash identifier: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=
Subject key identifier: 9E:40:3B:09:47:26:97:30:09:B8:6C:7F:DC:78:EE:50:F8:E6:01:B7
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 019420683990C24A354813FA0AD48E158E77
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 185.109.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:39:90:c2:4a:35:48:13:fa:0a:d4:8e:15:8e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e403b094726973009b86c7fdc78ee50f8e601b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:4f:a4:41:26:85:e1:d6:00:08:e7:6b:c0:
cb:98:18:39:5b:48:1c:87:e3:e9:77:12:d5:70:c9:
d8:de:21:9e:11:4f:01:cd:71:ed:17:1f:c0:6f:80:
ef:f3:52:37:59:d3:3e:85:25:77:16:0c:11:b9:17:
68:71:1f:1a:22:b8:64:49:b5:95:d8:28:d6:a8:ba:
c1:67:ea:2b:e4:d4:00:b0:fb:d2:bf:fd:60:14:52:
4a:3f:f9:f7:a7:15:61:78:74:28:63:36:27:f5:04:
1e:a0:d4:59:02:39:2a:00:90:a2:4d:cd:29:03:52:
a6:37:ef:87:da:3c:30:1b:bf:ea:a0:c2:23:30:db:
3b:34:28:5b:03:c5:2b:48:bf:ab:66:65:70:b1:67:
fc:39:61:53:c5:98:db:e5:eb:23:ca:74:72:07:6a:
af:91:d7:61:a6:ca:25:df:23:6c:83:80:0b:59:a6:
e1:c5:cc:77:7f:8e:ca:cf:35:f7:b1:4e:cb:ca:4d:
41:41:01:4e:ff:83:7d:d4:50:a0:62:b0:c5:de:ee:
07:c4:ff:e1:0b:b5:ce:83:93:eb:43:e9:79:01:38:
36:48:0a:0a:3c:0e:ae:a6:a1:ff:99:24:21:cd:01:
e7:2c:93:ce:41:26:b4:ad:67:22:b3:09:31:75:c5:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:3B:09:47:26:97:30:09:B8:6C:7F:DC:78:EE:50:F8:E6:01:B7
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.49.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6e:2a:15:bd:04:24:7f:c6:ec:d7:2c:2b:94:34:09:e2:cd:
e9:26:32:c6:e3:ff:c1:4a:23:1b:d1:03:3e:60:ea:a3:28:c4:
3f:c6:31:7c:12:b1:7a:f6:2b:17:a1:57:fa:08:1a:fa:d2:63:
4a:db:b8:41:79:27:8a:ce:73:b2:7e:0f:54:0c:f4:62:b3:d9:
ec:ea:f0:53:7d:76:83:45:d3:34:f5:ff:45:1f:8c:67:ba:1b:
49:6b:ca:4b:66:72:32:44:b4:6e:6c:a0:f0:7b:6e:4f:d3:fe:
ba:ff:ed:ec:d2:48:11:f9:e9:e8:9e:54:63:24:19:4a:bf:d4:
db:83:4b:80:22:63:08:dd:59:79:7e:68:01:4e:d9:6b:da:51:
1a:57:4a:54:e3:41:46:c7:d9:c1:72:dd:6f:53:1d:5b:cc:11:
f8:9f:68:c1:dd:62:b9:20:94:e3:e0:f1:24:24:87:b3:43:90:
bd:b5:f0:a1:67:e4:14:f5:04:07:aa:e3:be:fb:81:29:a4:65:
f8:71:67:3b:df:65:e4:0a:98:55:3d:ce:d3:29:6a:e2:4b:a4:
a1:d3:d8:db:43:b3:b9:1a:55:a0:60:61:01:fd:84:7d:6e:d2:
53:7e:b2:66:ef:16:ba:3b:5a:34:f4:58:f0:ef:8e:85:fb:e8:
1e:16:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:26:44 2025 by rpki-client