Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/ntwiuM95uFBi26vUIqSDj4sApAM.roa
File: ntwiuM95uFBi26vUIqSDj4sApAM.roa (raw, json)
Hash identifier: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=
Subject key identifier: 9E:DC:22:B8:CF:79:B8:50:62:DB:AB:D4:22:A4:83:8F:8B:00:A4:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 019427486908E4459CC4ED491411B81F2D60
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/ntwiuM95uFBi26vUIqSDj4sApAM.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.107.0/24 maxlen: 24
2001:7f8:c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:69:08:e4:45:9c:c4:ed:49:14:11:b8:1f:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9edc22b8cf79b85062dbabd422a4838f8b00a403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:29:c4:69:ac:e0:cf:8e:4d:75:b3:1d:e0:f7:
5e:23:fa:f7:7d:f9:0e:27:52:8f:5d:e6:93:ee:16:
d9:8c:25:b8:7f:66:64:0d:a3:1c:27:d0:ff:77:c5:
88:3e:b6:46:e2:8f:34:2d:85:1b:14:93:ce:c5:82:
bf:d1:22:45:29:c8:cb:20:20:58:e2:bb:e3:5f:ed:
00:dd:8c:89:5d:ae:9e:a4:62:72:f4:90:4c:16:ae:
9e:d7:71:61:21:2b:21:d0:96:63:68:73:71:39:1a:
67:66:f0:b5:5b:cd:2f:00:ca:9b:58:3a:29:07:f4:
56:30:c9:66:2b:d4:94:eb:77:b4:98:47:4c:1b:d6:
68:d4:ea:c5:61:bc:86:09:cf:e7:9c:8b:9c:3e:d0:
31:aa:6b:22:9f:90:f9:c7:5f:a4:13:35:b3:cf:05:
e1:ba:41:9f:d6:5f:64:0b:d5:19:3e:d1:a6:fd:fe:
b0:78:e8:81:a2:3a:0f:d2:cc:b4:79:21:c7:d4:7a:
17:9c:8f:e5:4b:2d:e5:d1:1d:44:35:d0:af:bd:53:
cb:b2:2a:71:7e:d5:bb:01:82:1e:9d:6d:b6:b4:6a:
3f:4e:3a:0f:75:f6:91:6f:e7:5e:86:db:60:48:7c:
47:19:b4:32:9d:54:4c:4e:42:41:08:fe:aa:a2:5c:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DC:22:B8:CF:79:B8:50:62:DB:AB:D4:22:A4:83:8F:8B:00:A4:03
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/ntwiuM95uFBi26vUIqSDj4sApAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.107.0/24
IPv6:
2001:7f8:c1::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d2:0e:37:35:70:3b:db:4a:b2:4e:94:7f:38:eb:4b:f9:1e:
82:e9:00:dd:2c:d1:4c:65:e4:34:4a:54:8f:0d:45:85:74:92:
eb:30:ca:ee:55:d6:c6:bb:9c:bb:3e:f2:bb:df:55:ad:71:40:
ca:a9:2b:48:f3:a7:4b:d3:4b:5b:0b:fa:cc:e2:9b:f0:74:9f:
4a:c2:f2:2b:a3:00:5e:a6:61:b1:d7:ac:20:79:a4:fe:50:1f:
dc:a0:32:2e:39:38:41:0d:9e:a5:78:16:dc:fb:50:55:81:13:
06:fc:c0:bc:55:7f:9b:5b:b1:7c:3c:ad:6a:bc:9e:d9:c4:88:
e3:38:a9:42:04:c8:7e:2f:01:94:22:62:53:ae:f7:20:c8:4f:
75:53:89:96:19:4e:26:1b:96:af:b6:7e:37:60:88:6f:6b:86:
4f:29:4d:67:b1:ce:d9:40:a6:62:f8:69:8d:f3:7c:92:38:7e:
25:b9:78:c2:a1:9a:6e:bd:8b:36:06:f8:64:fe:d6:d1:10:39:
46:4f:a3:96:13:6c:ba:7d:54:7f:80:89:4f:ab:34:a8:35:c0:
e8:3e:d0:c7:fe:d6:4c:6f:cd:55:a0:13:16:e8:20:1a:39:22:
61:20:26:4f:61:de:73:72:ba:b4:8a:4f:2a:99:41:be:11:54:
7c:ed:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:43 2025 by rpki-client