Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/nX-1M9vJJ0J1mAUD-rX36Qu9K60.roa
File: nX-1M9vJJ0J1mAUD-rX36Qu9K60.roa (raw, json)
Hash identifier: klp9yw7u9N76sRQccMqeoad1J0nUx9AuVizHKM5xOJk=
Subject key identifier: 9D:7F:B5:33:DB:C9:27:42:75:98:05:03:FA:B5:F7:E9:0B:BD:2B:AD
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCA80AE13CC3A83901DFB71ECE260B
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/nX-1M9vJJ0J1mAUD-rX36Qu9K60.roa
Signing time: Thu 02 Jan 2025 07:48:22 +0000
ROA not before: Thu 02 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25154
IP address blocks: 212.91.18.0/24 maxlen: 24
212.91.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a8:0a:e1:3c:c3:a8:39:01:df:b7:1e:ce:26:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d7fb533dbc9274275980503fab5f7e90bbd2bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:45:a2:cc:98:e0:f9:93:64:c2:00:6e:88:
38:e4:91:76:8e:ab:90:c1:c4:23:2b:a9:5b:8d:89:
f7:e8:12:7e:a8:0f:d5:7c:c1:c4:b6:ac:f9:0e:78:
ab:62:be:be:0e:84:d5:df:70:56:c1:d6:5c:b9:cd:
c1:90:b0:b2:45:4a:3e:4a:94:d9:ab:cc:2e:d9:39:
c2:f2:1e:4b:66:8d:db:31:c6:b1:1f:e2:65:f3:9c:
38:91:53:d6:66:38:a8:ab:10:70:6c:41:68:a3:04:
ac:5f:a2:65:a0:5c:61:cd:6a:c0:e2:7b:8b:b8:39:
59:72:ba:15:15:9b:c4:f4:68:fe:40:a3:5e:91:28:
44:f4:c5:ce:ec:13:1b:a2:ac:0f:30:0d:5a:a2:ec:
4e:f0:8d:12:0b:f3:e9:e6:c6:de:da:e3:03:1f:db:
17:e1:93:64:33:db:4d:a7:8d:df:63:95:33:b6:74:
da:19:9f:d0:06:29:66:7e:ff:89:09:20:fb:9f:9d:
75:16:22:46:52:86:7c:2c:e5:f8:52:32:f7:8f:12:
5f:2e:03:ba:35:9d:9d:9e:37:7e:62:f5:bc:a5:ef:
44:cc:d1:8a:58:9e:7d:43:56:67:a0:c7:b2:2f:9d:
07:b2:c3:3a:81:b8:8c:bb:91:80:c9:e6:89:a2:f9:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:B5:33:DB:C9:27:42:75:98:05:03:FA:B5:F7:E9:0B:BD:2B:AD
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/nX-1M9vJJ0J1mAUD-rX36Qu9K60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:7c:41:66:a7:b4:b9:1f:66:d9:9d:0b:2a:90:e6:ed:b0:20:
02:24:c3:a9:c3:6b:99:3e:b2:db:32:0e:02:26:fe:28:6b:3c:
3d:37:da:a9:18:ae:77:ac:d4:b8:b5:bc:7f:2e:96:de:31:cd:
de:16:35:fb:dc:ce:ed:b8:43:4a:24:91:1a:fe:e1:81:eb:ef:
c5:8a:30:4d:69:e2:c4:a6:9f:ad:05:04:5e:e4:f3:73:65:1a:
3e:0a:39:f0:b2:ae:9b:69:2e:11:f1:8e:8d:db:49:5b:51:c3:
82:ca:96:10:c0:83:14:a7:d5:28:65:60:da:68:a6:9d:a2:bb:
41:84:ed:c6:29:31:e5:7c:2a:15:5d:43:ab:8b:34:4d:2d:f8:
cf:bc:2d:fd:67:f9:00:bd:da:c5:f4:f8:a3:7b:02:7e:ff:ca:
d1:c8:10:5a:3d:16:f3:f5:b3:4c:b0:c2:51:87:72:ca:fe:63:
6e:41:b7:48:23:be:ab:f6:a6:9f:f1:ac:48:03:06:4e:aa:3f:
a8:42:7f:55:e3:0e:cb:51:15:00:57:5e:28:1a:30:75:d4:7f:
00:84:46:4a:b1:7e:99:33:54:ea:b9:24:09:90:b6:c1:a5:88:
cd:e6:ae:ed:3e:fe:4e:e7:5c:1e:80:fa:f6:76:52:e8:eb:22:
57:0b:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:43 2025 by rpki-client