Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/nY7qE6HiW01gV6xD6DK9Snd2b0A.roa
File: nY7qE6HiW01gV6xD6DK9Snd2b0A.roa (raw, json)
Hash identifier: V2zoH14p8Dy1hjt6PddGafHfxd57W+cUPpgsxu/p548=
Subject key identifier: 9D:8E:EA:13:A1:E2:5B:4D:60:57:AC:43:E8:32:BD:4A:77:76:6F:40
Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial: 019427B658B0F02A073B4F14E33AEFD699EC
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/nY7qE6HiW01gV6xD6DK9Snd2b0A.roa
Signing time: Thu 02 Jan 2025 15:50:49 +0000
ROA not before: Thu 02 Jan 2025 15:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51614
IP address blocks: 83.143.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:58:b0:f0:2a:07:3b:4f:14:e3:3a:ef:d6:99:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Validity
Not Before: Jan 2 15:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d8eea13a1e25b4d6057ac43e832bd4a77766f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:58:64:ff:56:a7:c5:a0:39:3b:4b:1d:68:
de:40:b4:d4:1b:43:8a:63:8c:c8:2a:55:5b:66:56:
5f:68:71:c5:27:8e:67:9f:1f:9c:c7:14:9a:fd:eb:
c9:53:0a:f7:ec:ab:5a:7d:72:d1:68:87:bb:df:8a:
fd:e8:fb:cc:b3:76:37:90:5e:66:85:63:c9:98:31:
d0:b6:37:cb:92:1e:65:9d:89:11:b6:33:9e:0c:34:
27:ca:b0:01:ca:4b:3d:6f:a6:9e:37:1b:66:de:03:
82:d7:4b:2e:98:c4:d1:b0:66:4a:3c:20:19:bb:74:
dc:97:17:3d:8c:a9:26:fe:38:a4:7c:7f:34:e1:03:
d2:c5:6c:4c:c2:04:a1:20:d3:c2:c7:da:e2:bc:5b:
27:91:0f:a3:db:b1:f1:df:9a:ca:05:d3:f4:2f:f0:
c5:c1:8a:c4:3e:fa:84:9a:7d:8c:12:97:f1:91:d2:
c8:ba:10:67:61:a2:4b:2e:f3:5b:36:4a:7f:90:9c:
b0:4b:0c:d8:94:71:d7:64:9e:07:cc:e1:b0:47:5d:
a5:ae:c7:e3:71:da:93:fa:75:38:62:03:b8:01:da:
54:c5:69:a3:62:2b:a8:8f:2c:a4:83:a6:d7:52:ba:
1d:2e:f7:c3:d8:84:c5:f5:34:c3:c0:38:a8:c5:ee:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8E:EA:13:A1:E2:5B:4D:60:57:AC:43:E8:32:BD:4A:77:76:6F:40
X509v3 Authority Key Identifier:
keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/nY7qE6HiW01gV6xD6DK9Snd2b0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:77:58:c1:e2:3b:ed:5b:0d:e3:b4:c7:9b:6c:a5:2c:c0:d3:
cb:fb:88:49:6b:1a:14:6f:12:98:a6:99:6f:17:1e:f5:89:7c:
bf:06:08:ac:f8:41:6c:89:fc:b4:9b:a2:5f:1f:ca:68:fa:34:
b0:31:cd:79:78:ad:52:ab:8c:40:82:f4:ba:10:60:c5:6e:07:
db:2a:69:46:4d:09:90:58:25:f0:3f:a3:2b:1e:1d:c4:9b:8a:
c7:fb:36:d2:c1:06:f9:fa:ab:cf:9e:2e:45:d2:89:38:a3:74:
67:b0:47:69:89:9e:7d:8a:e0:8a:40:ce:53:2b:a9:ae:08:73:
92:0e:94:f5:ca:1b:e7:77:76:06:07:d7:b2:e5:d1:f8:5d:1b:
07:46:d4:0c:4f:64:a9:5d:69:72:7a:28:34:3f:b6:71:8b:6c:
52:a3:f7:d9:55:5f:46:bc:52:0b:d5:9b:8f:92:7a:4b:bd:f3:
13:e6:6b:e4:92:d1:4e:f5:dc:e7:32:a4:c4:ea:f8:7f:61:68:
7e:40:c0:48:61:82:90:cc:cd:b1:e8:00:e2:bc:95:5c:83:48:
d8:08:ad:05:6e:3f:c3:cf:94:df:87:c6:91:15:c6:af:7f:59:
92:09:a5:f0:70:e5:55:16:8e:94:ae:c1:40:53:74:9b:66:69:
f8:82:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:55 2025 by rpki-client