Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/nzhgmUHMBkXurs4lxO-vVG71nK8.roa
File: nzhgmUHMBkXurs4lxO-vVG71nK8.roa (raw, json)
Hash identifier: naLy7uq1sBONgf+ZVhFHwkdla3yLH7XoG0HQQOUDogs=
Subject key identifier: 9F:38:60:99:41:CC:06:45:EE:AE:CE:25:C4:EF:AF:54:6E:F5:9C:AF
Certificate issuer: /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial: 019421437CC6451B768693D750D35A9BD811
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/nzhgmUHMBkXurs4lxO-vVG71nK8.roa
Signing time: Wed 01 Jan 2025 09:47:38 +0000
ROA not before: Wed 01 Jan 2025 09:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394540
IP address blocks: 91.205.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:7c:c6:45:1b:76:86:93:d7:50:d3:5a:9b:d8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Validity
Not Before: Jan 1 09:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f38609941cc0645eeaece25c4efaf546ef59caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:4e:d8:e7:4a:15:e7:89:68:94:a4:72:53:
30:c7:54:2a:4f:55:89:85:e1:d4:fd:9f:27:03:26:
b9:c0:f6:32:be:23:79:a2:f2:4d:2e:ea:ca:0d:76:
3b:8a:ff:93:bc:f5:fa:76:1a:d6:00:f5:1c:01:e7:
c1:75:76:b6:76:90:c3:7e:b3:24:71:c6:d5:55:33:
0b:32:c7:ec:0b:c9:53:c5:19:4f:88:43:cc:86:74:
de:69:98:a0:33:a5:8a:17:e0:25:c6:5e:e9:49:18:
fd:20:85:6a:63:1f:21:41:4c:b8:86:00:3b:0e:da:
e5:cb:fd:22:73:4d:f7:97:83:56:71:cd:1f:85:90:
b4:fa:17:be:9d:1b:f1:aa:30:ae:17:bc:ae:0e:d3:
55:b3:c4:da:e9:26:5f:27:b7:5b:8e:d4:1f:a2:cf:
52:e9:61:fe:5b:18:e3:ef:66:c4:94:c9:9b:bf:bc:
a2:a6:47:81:b1:ff:c3:c6:a3:7f:d6:6b:7d:c3:47:
f8:b0:cd:03:1b:9a:41:80:a4:05:d1:5d:96:01:ad:
37:6f:44:96:00:f0:43:4e:e3:92:a1:51:0a:31:d2:
cd:13:3e:f9:9c:1a:61:56:0f:47:c3:e3:6d:38:e7:
86:74:98:b8:84:68:f0:35:6d:46:44:7c:16:6c:b7:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:60:99:41:CC:06:45:EE:AE:CE:25:C4:EF:AF:54:6E:F5:9C:AF
X509v3 Authority Key Identifier:
keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/nzhgmUHMBkXurs4lxO-vVG71nK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.112.0/24
Signature Algorithm: sha256WithRSAEncryption
24:63:73:9d:86:7b:33:6e:17:75:a5:9e:b7:9c:2c:f9:04:cc:
50:40:c0:4a:04:50:e3:fd:23:71:8c:21:b4:24:7c:91:e9:16:
32:c0:99:f5:c6:7e:d6:fc:e8:20:8e:56:35:4b:71:8a:3e:2a:
2e:e5:3d:e4:4f:42:a0:4b:2b:e1:39:7c:6e:00:79:66:e8:8f:
50:e6:10:bc:87:be:69:f3:aa:d1:a3:13:97:c4:e0:3c:fb:43:
6b:9b:6c:f8:1d:54:04:d0:0f:41:a0:0d:76:66:91:bf:4f:7d:
cf:19:6b:4d:61:eb:d1:28:e9:3f:46:16:e3:c9:d6:70:4c:e9:
8d:76:56:5b:f8:eb:f1:c2:14:3a:7a:33:ee:f7:10:c3:47:e7:
fd:e5:66:62:f9:81:57:db:1f:c6:ba:39:5a:9a:55:c9:40:ef:
2c:14:b4:04:a5:e5:4b:96:52:d2:8c:d8:8a:1d:78:8a:4e:ec:
25:c6:75:4d:52:bb:71:62:2c:f6:24:44:e4:90:c1:81:bf:cb:
97:0b:50:3f:15:ac:52:59:7c:41:e5:cb:e6:89:04:7c:57:8e:
27:56:f1:c7:19:26:11:8a:ba:92:11:67:ca:75:a5:2f:05:56:
a4:76:c1:61:86:c7:b2:9e:8b:66:ff:18:a8:14:f3:46:c7:81:
29:1f:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:33 2025 by rpki-client