Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5d6f8f-6a5f-4b38-8ac5-51fd83aee936/1/NLeuBYDqw8YtSX1nGASH8B_LOAg.roa
File: NLeuBYDqw8YtSX1nGASH8B_LOAg.roa (raw, json)
Hash identifier: WrH31Zidp9PouyFoeGf9u+Jw3EPjwVvdonwp3iX22mw=
Subject key identifier: 34:B7:AE:05:80:EA:C3:C6:2D:49:7D:67:18:04:87:F0:1F:CB:38:08
Certificate issuer: /CN=25d033ab3bc22611a8dc591528c616cd54e4d0f4
Certificate serial: 01C54D36
Authority key identifier: 25:D0:33:AB:3B:C2:26:11:A8:DC:59:15:28:C6:16:CD:54:E4:D0:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdAzqzvCJhGo3FkVKMYWzVTk0PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5d6f8f-6a5f-4b38-8ac5-51fd83aee936/1/NLeuBYDqw8YtSX1nGASH8B_LOAg.roa
Signing time: Sat 01 Jan 2022 08:55:22 +0000
ROA not before: Sat 01 Jan 2022 08:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51188
IP address blocks: 194.28.0.0/22 maxlen: 24
193.93.132.0/22 maxlen: 24
2001:67c:25c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29707574 (0x1c54d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d033ab3bc22611a8dc591528c616cd54e4d0f4
Validity
Not Before: Jan 1 08:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34b7ae0580eac3c62d497d67180487f01fcb3808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:03:7d:7c:17:36:15:82:43:03:e9:7e:8e:
7f:3e:3b:c6:9d:5c:d8:ea:f1:40:9f:01:9c:41:db:
23:75:d1:38:18:80:2e:03:18:aa:8f:e2:70:d9:7a:
d1:0a:21:6b:06:c8:f5:74:ef:57:03:85:b4:35:a1:
68:66:11:a8:ea:8b:6d:92:5f:58:8e:eb:43:39:9f:
76:e5:e6:ef:ef:6d:a2:0f:e9:6c:32:cd:1c:a9:64:
77:56:c4:b6:96:b8:a4:a4:ea:ce:ad:dc:00:b9:05:
f8:ac:4f:73:28:6c:d7:f6:c1:36:a6:82:7d:4f:f8:
40:ec:13:23:2f:6f:0c:49:d2:da:bd:a7:9b:48:4b:
c9:b0:74:65:9e:28:f0:9e:22:ff:38:cc:cf:dc:10:
97:36:1b:d7:86:94:27:f3:28:d5:44:97:06:7a:19:
26:6a:51:82:64:6f:3d:78:a6:10:41:fc:8a:2a:9d:
ab:0c:cf:31:bd:b4:bf:16:6b:e5:51:5d:8c:7e:fd:
d9:6c:d2:69:5c:19:d1:8b:31:02:10:52:e3:b1:7d:
e4:c5:4a:46:98:f0:05:de:08:20:49:a9:c8:c9:fe:
ad:bc:32:f5:9b:8d:c3:b8:d9:6a:8e:98:ac:c7:c4:
3d:be:4c:74:74:2e:99:2c:07:cf:2e:cc:97:be:3c:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:AE:05:80:EA:C3:C6:2D:49:7D:67:18:04:87:F0:1F:CB:38:08
X509v3 Authority Key Identifier:
keyid:25:D0:33:AB:3B:C2:26:11:A8:DC:59:15:28:C6:16:CD:54:E4:D0:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdAzqzvCJhGo3FkVKMYWzVTk0PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5d6f8f-6a5f-4b38-8ac5-51fd83aee936/1/NLeuBYDqw8YtSX1nGASH8B_LOAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5d6f8f-6a5f-4b38-8ac5-51fd83aee936/1/JdAzqzvCJhGo3FkVKMYWzVTk0PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.132.0/22
194.28.0.0/22
IPv6:
2001:67c:25c::/48
Signature Algorithm: sha256WithRSAEncryption
7f:45:1f:aa:5e:40:0a:9c:1b:d8:7e:55:80:7e:cf:cd:20:9c:
62:a5:e2:8b:35:9b:bf:f5:4e:35:85:4a:31:f7:6c:5f:4c:5d:
65:a2:3b:7f:a9:69:ec:86:e2:09:9e:28:8c:b2:9d:56:4c:dc:
2d:6f:77:98:64:0f:f8:0c:84:a0:7c:ef:4d:2a:a8:21:78:68:
8f:a1:37:9b:0c:45:7e:b5:27:2f:3f:ae:d0:b1:85:13:bb:38:
c1:2d:f0:a9:ca:f3:3b:70:bd:89:a1:5d:77:f7:ff:92:c2:fd:
18:0f:d9:77:0f:ed:db:88:d8:de:1a:f4:12:f6:3e:d0:f0:80:
78:01:dc:a3:3d:e0:07:34:46:81:92:03:92:19:07:7f:e7:10:
00:25:75:23:a9:c8:4e:28:6c:1f:f2:18:be:8a:44:ac:44:df:
cd:57:55:6b:f7:0e:4a:bd:23:f4:b4:a8:e3:85:c8:e0:0a:5c:
a2:fb:5a:6d:fa:4d:e6:f8:35:79:1d:c2:44:77:19:d5:ba:97:
33:00:95:4f:63:a9:f2:1a:ae:d5:e0:a6:f6:dd:9a:4c:51:13:
22:23:60:33:01:5d:5a:95:d7:26:58:4b:17:8b:95:1f:c8:c0:
b9:70:ae:15:13:ae:f9:e8:bc:15:72:6f:91:12:c8:d1:6f:38:
01:eb:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:54 2025 by rpki-client