Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/NVrrhbZmq4fJCBokU32i6BZfN2w.roa
File: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (raw, json)
Hash identifier: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=
Subject key identifier: 35:5A:EB:85:B6:66:AB:87:C9:08:1A:24:53:7D:A2:E8:16:5F:37:6C
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0194228E1C7212D0B1A37C97D37AA6CCC05D
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/NVrrhbZmq4fJCBokU32i6BZfN2w.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34353
IP address blocks: 193.178.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1c:72:12:d0:b1:a3:7c:97:d3:7a:a6:cc:c0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=355aeb85b666ab87c9081a24537da2e8165f376c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:69:36:8f:7c:f3:58:64:ac:92:2b:0d:15:
70:26:c2:a5:34:c9:c1:3d:ee:ec:b1:5d:c6:90:ce:
61:c9:ee:8b:58:93:f4:74:77:74:9e:d9:86:01:9f:
15:4d:73:b1:91:72:f6:64:34:1c:17:58:79:54:21:
f3:2a:5d:9b:db:42:bd:16:30:1f:24:2e:c8:c2:20:
0a:3d:c5:32:0b:19:9e:c3:19:51:6a:9a:a0:c3:f8:
50:34:bb:f8:86:64:a8:20:37:43:9d:17:2c:e7:c0:
0f:53:59:5a:8a:37:94:36:a3:c3:ec:ff:3c:96:25:
79:03:e6:57:b9:de:b1:bd:24:58:9b:61:8f:2c:5b:
e2:aa:5c:8e:80:db:8d:14:e8:32:56:67:2b:92:86:
fe:47:37:a6:ff:5c:a5:62:3d:f0:8d:34:7a:69:06:
4b:55:ed:c2:8e:dc:a9:b6:34:fb:c7:bc:fc:b3:3d:
43:ab:8c:39:fe:29:08:d8:95:ab:0b:ec:9e:c9:c8:
b0:e4:3b:c3:b0:48:f9:37:e5:b6:ee:fe:b9:14:f5:
b6:92:7c:18:45:89:37:b1:07:6e:68:17:d8:5e:66:
6c:24:85:5a:b1:84:4b:ad:e3:f5:c9:4e:d6:ec:ad:
95:6e:d6:2a:1c:d1:9d:27:53:c3:1c:c7:80:05:c2:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5A:EB:85:B6:66:AB:87:C9:08:1A:24:53:7D:A2:E8:16:5F:37:6C
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/NVrrhbZmq4fJCBokU32i6BZfN2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9b:5f:6a:b0:5c:cf:e2:e0:44:4f:9f:eb:f5:6d:ec:40:1f:
c5:f9:ea:4f:26:d6:27:3d:00:39:ae:71:25:bc:14:da:62:1c:
e4:65:2f:f4:0a:d2:76:08:13:e4:68:4e:01:89:9b:cf:19:da:
71:b6:c8:36:d2:e7:80:01:18:6d:ec:03:89:c4:16:0f:91:00:
c3:3f:df:e2:37:d1:fb:41:75:fc:79:38:1a:06:3a:af:c1:9c:
a1:59:6e:1f:c0:8a:8e:8a:94:a2:f3:03:32:1c:60:ca:79:da:
86:01:c6:43:82:33:b1:5b:ac:be:f1:fe:85:43:87:89:b3:eb:
b1:11:d8:48:b1:90:c9:c2:b7:e7:b2:bc:df:80:0b:2b:5d:eb:
c5:4b:75:84:91:6e:b9:2c:7d:9e:88:c7:3b:0c:dd:90:1f:3c:
10:9b:eb:28:55:ae:c9:6c:19:21:eb:b6:05:16:a0:89:af:99:
37:f1:28:4e:64:ea:88:f9:41:f6:0d:81:a5:30:cb:ed:77:9f:
f8:63:1d:3f:f0:f5:e8:1a:0f:cc:39:a6:17:80:46:7b:aa:e2:
67:8c:22:f4:55:d3:02:c3:65:72:ce:fc:d6:02:e3:cc:33:21:
e2:c9:4f:0a:88:5f:5e:e1:7e:a3:ba:c1:ec:21:be:61:45:ce:
de:74:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:50 2025 by rpki-client