Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/NCn2lq5cktD_7ygfHIEl8kG0BGw.roa
File: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (raw, json)
Hash identifier: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=
Subject key identifier: 34:29:F6:96:AE:5C:92:D0:FF:EF:28:1F:1C:81:25:F2:41:B4:04:6C
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 019424B3AB63666FAC8D4452B599B0E40E2B
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/NCn2lq5cktD_7ygfHIEl8kG0BGw.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15020
IP address blocks: 37.46.197.0/24 maxlen: 24
94.185.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ab:63:66:6f:ac:8d:44:52:b5:99:b0:e4:0e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3429f696ae5c92d0ffef281f1c8125f241b4046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3f:18:92:29:a1:b7:99:00:9a:05:11:55:55:
4e:44:96:d5:69:78:c0:c7:ee:d8:fc:0b:a6:d8:26:
73:81:d7:73:2d:28:b7:a6:53:cb:3d:46:f6:de:da:
c7:6b:62:a8:1d:6a:fa:ec:ff:38:e2:01:d3:3a:74:
3c:9c:4a:5e:61:4b:94:1a:e4:c5:ff:19:5e:8a:21:
89:4c:57:68:d6:79:cf:ab:2c:05:18:38:80:e1:70:
03:c3:41:69:bb:e3:64:54:da:f0:16:64:13:cd:a8:
04:8c:5c:3f:7a:8b:bf:dc:ba:55:15:51:38:6e:90:
74:a9:5c:76:53:13:da:63:89:29:2d:82:43:39:09:
ab:4e:78:10:ef:a4:66:31:b3:48:90:a5:87:08:96:
0a:24:40:9f:f5:0d:47:a2:33:87:16:a0:0d:0d:3c:
35:a5:e4:32:0f:fd:83:a6:3f:6d:a8:80:51:a5:38:
00:c8:c6:0b:bc:5d:6c:22:5c:ec:09:25:53:51:c8:
85:62:07:8a:0c:6e:1c:83:76:29:7f:d9:0b:e6:3a:
6d:81:1d:cd:f9:47:8f:21:2e:cb:69:74:ec:05:a3:
58:5f:b5:6b:24:44:01:57:6e:4b:56:02:09:e0:44:
22:73:3a:79:19:29:ee:8f:e7:af:74:1d:b8:b9:86:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:29:F6:96:AE:5C:92:D0:FF:EF:28:1F:1C:81:25:F2:41:B4:04:6C
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/NCn2lq5cktD_7ygfHIEl8kG0BGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.197.0/24
94.185.86.0/24
Signature Algorithm: sha256WithRSAEncryption
24:be:17:6d:fd:29:71:a7:51:9e:e4:dc:58:6e:12:38:27:33:
c9:67:57:27:3e:ae:75:8b:fe:29:f6:16:99:ac:ed:79:91:57:
b6:e6:c6:a9:e7:7c:77:cb:a8:38:55:a8:ec:92:8a:27:2e:ed:
41:c3:70:fb:66:ef:a6:0c:20:c4:a4:53:01:98:f8:2b:be:9f:
a5:9e:83:16:36:ac:52:b2:6f:a9:7a:0e:22:7f:14:37:f8:3c:
24:83:f7:50:7e:84:00:35:34:d6:56:cb:9e:d3:63:1a:3c:90:
37:59:52:aa:49:2c:e0:5e:f0:f8:eb:d6:fd:4d:dc:65:36:bd:
17:a9:0b:1c:b5:bf:5d:f8:06:29:85:4e:05:2e:30:15:45:99:
c9:f7:8f:dd:15:c6:ed:41:cd:ad:50:e5:12:e0:d0:51:79:61:
aa:8b:d1:05:79:6f:0e:24:22:be:c6:2c:af:60:f4:77:cc:7a:
23:80:d5:0c:f8:57:09:c5:bd:af:c3:70:2b:4d:17:b7:fd:4f:
eb:1d:14:95:34:ac:0d:a6:dc:b1:c4:13:0c:58:4e:4f:68:ba:
c2:bb:77:bd:a6:91:c2:cc:ac:fa:1b:88:e2:65:e0:ab:20:8a:
8e:ba:3a:92:4c:78:39:7a:22:08:b7:b4:5e:cc:67:f6:27:18:
7d:1d:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:58 2025 by rpki-client