Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/nMQnPUKVXFlMj-aJ7jdRrN9ERKQ.roa
File: nMQnPUKVXFlMj-aJ7jdRrN9ERKQ.roa (raw, json)
Hash identifier: Ou28C6+NNMDt+3iOrd17MryA9T2Ql7MH9UQUg/RA9xs=
Subject key identifier: 9C:C4:27:3D:42:95:5C:59:4C:8F:E6:89:EE:37:51:AC:DF:44:44:A4
Certificate issuer: /CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Certificate serial: 01857321DB53DC802CC75A7B57FCF7901941
Authority key identifier: 92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/nMQnPUKVXFlMj-aJ7jdRrN9ERKQ.roa
Signing time: Mon 02 Jan 2023 15:37:56 +0000
ROA not before: Mon 02 Jan 2023 15:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25472
IP address blocks: 79.107.64.0/19 maxlen: 24
109.242.0.0/16 maxlen: 24
176.58.128.0/17 maxlen: 24
81.92.48.0/20 maxlen: 24
79.107.0.0/17 maxlen: 17
79.107.0.0/19 maxlen: 24
79.107.0.0/16 maxlen: 24
37.6.0.0/17 maxlen: 17
37.6.0.0/16 maxlen: 24
79.107.160.0/19 maxlen: 24
79.107.192.0/19 maxlen: 24
109.242.128.0/17 maxlen: 24
62.169.192.0/18 maxlen: 24
46.190.0.0/17 maxlen: 24
84.254.0.0/18 maxlen: 24
79.107.128.0/17 maxlen: 17
80.245.160.0/20 maxlen: 24
37.6.128.0/17 maxlen: 17
91.140.0.0/17 maxlen: 24
91.140.32.0/19 maxlen: 24
185.3.220.0/22 maxlen: 24
2a03:f000::/32 maxlen: 40
2a03:f003:2::/48 maxlen: 48
2a03:f002::/32 maxlen: 32
2a03:f000::/29 maxlen: 48
2a03:f003::/32 maxlen: 32
2a03:f003:300::/40 maxlen: 40
2a03:f003:200::/40 maxlen: 40
2a03:f003:100::/40 maxlen: 40
2a03:f003:1::/48 maxlen: 48
2a03:f003:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:db:53:dc:80:2c:c7:5a:7b:57:fc:f7:90:19:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Validity
Not Before: Jan 2 15:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc4273d42955c594c8fe689ee3751acdf4444a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:ad:b9:28:6d:b4:17:b0:79:5a:fe:e7:b5:
03:5f:4c:87:01:7d:e8:7e:d4:4e:4a:ea:67:21:c1:
af:bc:3c:94:c5:e4:84:fc:94:72:1e:e2:ed:1d:87:
07:5c:e3:d5:a8:9f:f4:6f:54:8f:7e:8b:23:63:02:
ee:5e:e1:cb:79:6c:f5:46:1c:fe:b0:7e:d8:79:e0:
3a:85:c1:b8:e4:4d:c7:e8:c1:af:a3:83:18:20:a7:
e3:1b:4f:34:69:1e:0d:ac:cf:42:e0:b3:3f:eb:6e:
9c:8a:81:66:d1:a9:e2:de:33:46:ac:e2:cd:18:4f:
bf:59:4f:2a:d2:98:14:e5:1f:1a:54:63:74:ea:44:
6c:20:0b:87:30:fa:cf:24:83:5b:b6:5d:42:d6:94:
ef:fd:a7:c3:d4:c6:a1:de:e9:b1:07:d6:fe:9a:e3:
43:36:36:ee:c7:4a:a1:4d:a0:b9:d2:99:c2:a3:0e:
ba:78:db:61:2d:48:d5:1a:a8:03:c2:d6:dd:a2:c1:
25:58:4a:92:27:0c:60:a1:49:40:26:13:35:f2:a7:
fa:7e:4f:b3:59:23:78:85:c0:2e:ac:d4:74:90:c7:
65:e2:a2:e3:7c:ff:62:04:b4:df:ae:85:b7:5e:94:
36:d6:76:f2:87:e9:75:3c:96:ec:67:7d:31:c5:54:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:27:3D:42:95:5C:59:4C:8F:E6:89:EE:37:51:AC:DF:44:44:A4
X509v3 Authority Key Identifier:
keyid:92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/nMQnPUKVXFlMj-aJ7jdRrN9ERKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.6.0.0/16
46.190.0.0/17
62.169.192.0/18
79.107.0.0/16
80.245.160.0/20
81.92.48.0/20
84.254.0.0/18
91.140.0.0/17
109.242.0.0/16
176.58.128.0/17
185.3.220.0/22
IPv6:
2a03:f000::/29
Signature Algorithm: sha256WithRSAEncryption
2e:24:f3:90:a7:a9:5a:3f:80:9f:be:f2:ae:3a:cb:7f:87:96:
ba:6b:8d:94:d8:76:54:da:e0:b8:d5:8d:5b:34:c6:3f:5a:80:
40:7b:93:d7:26:f3:0f:28:c0:10:66:2c:e9:20:f6:88:55:a7:
7d:94:a7:f5:3c:68:05:0b:33:64:91:12:73:6d:16:42:db:38:
05:e5:21:23:5f:c7:08:df:4b:be:cc:0c:f9:50:b4:0b:69:a8:
84:9a:5b:e1:64:5b:27:ac:b3:01:34:a6:16:88:96:a4:5a:30:
d4:f0:ef:e5:b8:2d:51:f8:d9:88:d7:f1:c3:b9:1d:7d:c7:e3:
4c:36:90:9b:84:65:01:61:3d:25:da:9a:62:f0:12:f2:72:8a:
24:c7:77:67:e4:c6:94:f6:ec:c1:e5:d1:ed:d9:be:21:21:a4:
75:ea:ab:d3:30:da:49:25:7f:55:32:54:1a:94:b2:79:ce:11:
48:ca:57:01:f8:c9:93:40:ad:76:09:c0:b7:df:d5:1a:18:c5:
dc:22:8a:a7:a5:7b:7b:14:47:40:75:65:3b:da:cd:b5:c4:9b:
19:3a:6f:65:23:69:83:f3:6d:62:93:a1:70:a5:39:aa:79:16:
dc:9f:81:1a:2c:7b:18:ac:62:5e:87:56:62:20:24:8a:dd:53:
57:fd:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:56 2025 by rpki-client