Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/NQcZZcex_ckVBDVfUO9h5l4bn_0.roa
File: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (raw, json)
Hash identifier: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=
Subject key identifier: 35:07:19:65:C7:B1:FD:C9:15:04:35:5F:50:EF:61:E6:5E:1B:9F:FD
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 019425FD4EC3A27E75D10B95A5D8659E19A3
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/NQcZZcex_ckVBDVfUO9h5l4bn_0.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215523
IP address blocks: 79.135.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4e:c3:a2:7e:75:d1:0b:95:a5:d8:65:9e:19:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35071965c7b1fdc91504355f50ef61e65e1b9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:aa:aa:5d:8e:a6:76:2a:df:a6:45:b8:70:
e3:4b:39:b7:44:c3:89:10:cf:b9:af:57:33:46:30:
42:a8:12:3d:61:63:c5:b8:f8:f2:12:fb:55:90:82:
07:a0:b5:59:f1:53:59:bf:89:85:e4:27:3a:ed:28:
70:02:34:7f:d7:89:53:85:03:ad:82:47:cb:d1:28:
95:0a:81:d6:ba:f0:5c:2b:92:3e:46:12:f6:da:54:
99:65:7e:be:95:73:29:1e:27:bd:6c:c3:66:1d:ad:
71:59:67:fa:6e:f6:3b:0d:29:50:9b:05:10:bc:d9:
63:96:bb:65:34:21:98:02:a3:51:ed:12:6e:94:44:
be:1f:4f:11:ab:14:f0:a8:39:4e:dd:c7:02:d8:b2:
e3:c5:0d:d5:8c:02:40:1a:f1:86:cb:7b:2a:ba:25:
33:99:55:a9:e1:53:2b:cf:11:93:8b:a8:f9:8b:37:
8e:c8:3f:36:2e:bd:6a:cc:50:84:c5:98:3e:57:e7:
8a:55:75:19:ba:29:ba:b1:07:6f:4d:eb:14:27:25:
92:a9:f8:ba:0f:16:1d:a1:e7:38:2d:6f:84:90:0e:
55:f1:18:f9:5e:b5:e5:4b:3e:fb:a8:8f:c9:77:96:
8f:57:47:fd:e9:3d:78:1d:6c:2b:2a:40:86:89:39:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:19:65:C7:B1:FD:C9:15:04:35:5F:50:EF:61:E6:5E:1B:9F:FD
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/NQcZZcex_ckVBDVfUO9h5l4bn_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.100.0/23
Signature Algorithm: sha256WithRSAEncryption
82:89:19:3f:7b:e0:2e:da:99:c9:2d:29:0b:50:09:41:3d:b8:
3f:26:a0:85:e4:da:f7:e9:ad:2d:15:a0:df:1a:fa:78:5a:ac:
3c:21:2a:06:19:76:7b:26:97:c7:98:bd:3c:c4:32:91:d3:e3:
55:c7:4f:4a:ed:ed:b6:7b:e2:d9:7e:01:be:7e:fa:77:bb:c6:
77:9c:9c:9d:fe:f7:ec:4f:6c:04:39:0a:32:67:2d:e6:8b:a6:
ab:0f:e0:94:a4:0b:f4:34:60:e5:fc:ee:10:fc:9d:11:58:52:
32:cb:45:42:a3:9c:17:65:5d:47:69:c8:39:32:94:2e:1e:83:
ff:65:83:5b:9c:03:13:c5:96:ce:9b:b2:ed:6d:89:6d:2d:93:
10:ca:91:cb:ae:05:12:14:d8:dc:94:85:ef:b8:07:54:4e:b2:
e0:1f:3a:4d:fa:13:f7:95:a7:d1:cd:5f:d6:06:dc:f1:95:fc:
09:80:6e:e1:86:d2:e9:77:82:d9:cf:a3:4a:b0:4a:9d:f0:a0:
7f:0d:44:7b:3e:94:6e:b9:41:b3:26:56:80:f9:44:8d:bc:f8:
81:77:db:b3:3b:0c:0e:9d:ed:dc:b3:68:6a:f4:fb:9c:11:0f:
75:f8:49:29:1a:5e:2f:6d:bc:2b:4d:23:45:8f:e3:56:67:6f:
80:9c:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:42 2025 by rpki-client