Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa
File: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (raw, json)
Hash identifier: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=
Subject key identifier: 34:69:6F:2C:09:9E:09:40:6A:85:9F:70:9C:87:5D:BC:87:0B:1D:01
Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial: 0194252207C860812029E86491EFD0FEDDE4
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208060
IP address blocks: 193.43.30.0/23 maxlen: 24
193.43.32.0/23 maxlen: 24
2a0f:b880::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:07:c8:60:81:20:29:e8:64:91:ef:d0:fe:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34696f2c099e09406a859f709c875dbc870b1d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:27:41:8e:8a:e5:ef:72:00:47:59:bd:ec:
4e:11:07:dc:d4:10:32:85:18:16:71:5b:5b:32:2a:
13:59:94:9c:53:2e:95:aa:c6:0e:bc:aa:b6:8d:b4:
f7:e2:2b:85:4d:7f:74:77:87:8b:66:65:ff:6a:8e:
e6:1a:76:2d:39:c8:93:3d:cc:a9:0f:b5:a8:5d:ed:
4d:7a:81:d1:9b:b8:f1:08:44:36:32:04:a1:f7:1d:
b2:97:c4:0e:6a:8b:a6:a4:ee:85:6a:f5:61:29:5a:
f7:29:9d:a2:09:51:76:88:29:fd:73:d0:9e:4f:18:
69:7c:7f:51:11:e3:8d:4b:90:e3:50:57:f2:cd:df:
e7:54:37:b1:c8:9c:d8:ff:0d:74:35:a9:b6:42:f9:
6b:70:ce:c5:40:fe:af:45:55:47:e1:7f:4e:db:c5:
e6:a7:b4:a8:c7:3e:d6:8c:31:9f:3a:3b:a2:13:88:
d7:a6:a3:33:15:ad:1f:d8:79:cd:c8:c1:03:4e:cb:
11:63:8d:fa:f6:fb:0f:f7:bb:69:84:e3:74:8d:5e:
1a:71:02:b5:2b:29:f2:3e:59:2d:67:d0:cb:19:34:
38:95:2e:a7:76:09:73:ed:91:dc:5e:0c:5b:e7:15:
3c:1e:ec:6b:e1:43:ec:b1:e0:67:67:f2:2f:d1:10:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:6F:2C:09:9E:09:40:6A:85:9F:70:9C:87:5D:BC:87:0B:1D:01
X509v3 Authority Key Identifier:
keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.30.0-193.43.33.255
IPv6:
2a0f:b880::/29
Signature Algorithm: sha256WithRSAEncryption
09:4a:1c:67:5b:38:af:0f:08:03:0c:e8:51:3f:cf:ca:06:ae:
c7:12:7b:b0:4d:82:2f:6e:db:af:c5:72:ba:46:74:3f:f5:72:
e1:f6:eb:f1:72:ac:7f:85:20:91:c1:40:aa:03:ad:96:62:28:
13:b8:d8:fc:a4:b8:12:f8:fc:b3:58:fe:b6:42:0d:1f:b7:dc:
19:b5:43:9e:06:11:1f:3a:fb:5f:03:d2:39:96:5a:a6:ac:dc:
5e:fb:5d:fd:16:f1:47:4d:b4:e5:67:be:09:3a:86:a8:df:18:
00:a4:53:ca:6c:0e:52:d6:28:de:91:dd:d5:61:f3:a6:52:a3:
d7:45:06:f5:d1:72:c8:20:87:f5:18:ed:1d:a6:ec:3a:b5:a9:
8c:4c:01:8c:81:91:5f:5e:25:05:67:38:ca:fa:59:99:04:bc:
fa:f1:0c:93:ce:e1:9e:eb:3e:70:05:60:1b:36:fe:0e:d6:56:
5e:a4:12:7b:6e:65:c7:84:ad:d3:c6:89:88:09:4c:d2:7a:d9:
92:ad:70:21:7f:a8:62:e8:2e:b6:50:e4:d9:39:93:96:ae:af:
c3:1d:bd:48:1f:5b:96:5a:7e:7a:8a:a0:c7:b5:ac:3f:cd:a7:
f9:fb:91:56:c7:c2:fb:a0:e4:ad:51:d7:72:1c:60:92:60:a4:
74:be:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:51 2025 by rpki-client