Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ncK9QKYX2zD9-0iXd-uujnDXKxA.roa
File: ncK9QKYX2zD9-0iXd-uujnDXKxA.roa (raw, json)
Hash identifier: cUQMxPCm5GYChvRTpytyPbsr65shmoxtj1f10yeE+Mg=
Subject key identifier: 9D:C2:BD:40:A6:17:DB:30:FD:FB:48:97:77:EB:AE:8E:70:D7:2B:10
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018C30EC99FCEB2B1C47219AE675CBF48B32
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ncK9QKYX2zD9-0iXd-uujnDXKxA.roa
Signing time: Sun 03 Dec 2023 18:24:21 +0000
ROA not before: Sun 03 Dec 2023 18:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48435
IP address blocks: 195.42.112.0/23 maxlen: 23
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
193.169.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:ec:99:fc:eb:2b:1c:47:21:9a:e6:75:cb:f4:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 3 18:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dc2bd40a617db30fdfb489777ebae8e70d72b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:65:11:58:f1:1f:cd:cd:76:17:f3:47:cd:
87:84:30:d4:61:9f:ec:11:2c:ff:96:fa:49:1b:0d:
bd:f5:44:0e:69:e4:d8:4e:6f:b7:6a:20:c2:1c:1f:
45:8c:c6:80:8c:b9:25:db:e4:83:21:c9:2e:6e:0d:
b6:bd:bd:1f:62:eb:a6:ec:2e:df:c9:5a:c4:2c:d1:
b5:45:fa:cc:dc:1d:f9:eb:fc:d7:62:67:fa:69:8e:
1e:3a:75:6c:cd:41:69:7f:4d:e6:8c:d9:40:b6:22:
d5:62:96:b9:45:a7:5b:28:4a:60:6b:64:44:d3:b8:
0c:22:24:32:e6:0e:80:f3:5b:61:c4:d8:0e:c2:aa:
95:14:ef:47:df:27:de:39:c6:00:57:4f:31:31:5a:
dc:d5:18:35:5f:b4:e2:65:c3:be:db:42:dd:03:54:
2e:6c:77:52:8f:62:4e:62:78:cb:2b:cb:56:43:13:
85:11:0c:2e:af:3e:52:82:03:ef:04:88:f0:e0:9d:
c3:9d:20:e4:a3:a0:15:fd:07:d0:b2:ec:15:7f:a0:
21:5b:ce:01:36:c4:cd:80:6f:62:36:1d:1d:17:6e:
2b:4a:20:7e:d5:3c:e6:c2:22:21:e5:e7:bb:f5:a4:
fd:7d:5e:b4:0f:07:c2:8c:2e:e9:e3:c6:a7:c3:43:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:BD:40:A6:17:DB:30:FD:FB:48:97:77:EB:AE:8E:70:D7:2B:10
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ncK9QKYX2zD9-0iXd-uujnDXKxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:65:17:6f:5a:96:c4:d1:a0:4d:e9:39:f9:36:3d:97:72:41:
a6:d2:7a:5f:7f:0f:da:99:03:17:48:ed:83:4e:e7:b2:e9:a7:
f8:ed:d8:bd:5d:88:e3:94:7a:36:ad:e1:35:07:e1:6c:4c:5f:
16:71:9d:b4:da:12:95:f4:00:6c:3d:fa:73:38:3b:5c:1b:c7:
83:8c:62:63:2f:c7:ed:39:30:3d:ad:48:64:df:34:40:07:8a:
fa:de:c2:ac:7e:79:80:08:e6:1b:27:48:c8:59:a0:59:f9:5e:
a6:9b:87:62:04:42:dd:b2:f8:de:4f:1e:fa:e9:28:0e:aa:6c:
48:d2:49:8d:3c:76:6a:50:dd:88:f4:06:55:c7:94:c7:4f:09:
9b:ad:11:7c:6d:18:82:0b:31:48:71:ec:0e:f1:4f:da:0c:d3:
39:47:77:f4:4c:0f:9d:6e:75:c7:4c:15:07:ee:8c:cc:34:21:
18:ae:6f:2a:eb:2a:11:8a:42:b5:b8:5f:c1:0c:b9:65:85:f7:
cd:6a:c9:f1:bb:d3:b7:30:6d:95:b8:53:5e:0f:ad:48:95:4d:
36:16:24:6f:34:da:33:ec:65:5e:cb:2f:7d:f1:93:37:53:0d:
3a:f5:ac:8e:4d:5f:4b:f5:ed:75:72:c5:44:56:d1:41:c6:48:
7c:3c:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:11 2025 by rpki-client