Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/N9dGS61MT5QK0eR9NsR0og_yov0.roa
File: N9dGS61MT5QK0eR9NsR0og_yov0.roa (raw, json)
Hash identifier: UQvC/X385WuEPzevDAGeDjuCtzVVTw6uvC4kh8V9KSg=
Subject key identifier: 37:D7:46:4B:AD:4C:4F:94:0A:D1:E4:7D:36:C4:74:A2:0F:F2:A2:FD
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019427B376C2089DC5853F9A564A8EFB56F4
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/N9dGS61MT5QK0eR9NsR0og_yov0.roa
Signing time: Thu 02 Jan 2025 15:47:40 +0000
ROA not before: Thu 02 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206273
IP address blocks: 31.130.242.0/23 maxlen: 23
31.130.244.0/22 maxlen: 22
31.130.246.0/23 maxlen: 23
91.218.154.0/23 maxlen: 23
185.198.60.0/23 maxlen: 23
185.198.62.0/23 maxlen: 23
2a0a:15c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:76:c2:08:9d:c5:85:3f:9a:56:4a:8e:fb:56:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jan 2 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37d7464bad4c4f940ad1e47d36c474a20ff2a2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:67:7e:9b:03:63:c2:9b:f2:7b:81:8a:44:
5e:28:75:9f:cf:ba:e7:ec:fd:d8:ad:70:6a:f0:cf:
b2:c1:50:6e:27:44:73:9f:9a:2a:4d:d8:e3:dc:2e:
53:93:8a:22:de:71:e7:71:6e:2e:f0:ac:df:3f:96:
60:b3:c2:17:dc:3b:4b:3c:a0:e5:8b:3f:18:0b:aa:
bd:f4:5e:20:c9:42:8f:c4:42:3d:05:fe:8a:be:9e:
6c:02:ce:8e:dd:00:04:18:02:e2:cb:71:2b:0b:92:
25:5f:58:b0:e2:65:36:95:d8:b7:4c:43:d9:79:e4:
46:7a:e9:bd:19:50:a6:e0:ed:05:73:14:29:3f:67:
71:c6:c5:a4:29:28:de:72:52:35:93:15:98:15:ec:
41:c6:73:42:df:09:0f:69:26:79:0f:7a:3c:9d:ba:
30:4b:5f:b2:98:f7:8b:dc:c9:a5:b6:62:24:49:9c:
47:86:88:dd:09:54:0e:89:49:0d:36:d4:df:c9:20:
64:cf:ce:bf:c5:3f:66:01:f9:71:6e:c7:7c:7f:da:
e0:52:fb:2f:53:b4:fc:fc:20:6a:00:b9:47:ce:12:
b7:a1:b5:2d:f8:f9:a8:f0:d0:11:95:38:8c:eb:4c:
37:06:76:79:86:1c:04:1f:27:21:c8:12:7e:44:35:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:46:4B:AD:4C:4F:94:0A:D1:E4:7D:36:C4:74:A2:0F:F2:A2:FD
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/N9dGS61MT5QK0eR9NsR0og_yov0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.242.0-31.130.247.255
91.218.154.0/23
185.198.60.0/22
IPv6:
2a0a:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:c2:39:cf:fa:cd:02:6a:4f:bb:9d:9f:bd:9c:57:9f:95:04:
db:cd:72:82:a6:5f:2e:f2:af:75:48:fa:4d:63:52:af:89:1b:
9a:86:24:21:5c:a7:55:ac:c0:22:68:33:3a:69:f3:ab:4a:ef:
c6:99:cf:5e:b3:ed:05:8b:e7:85:df:cb:68:ae:ec:36:66:84:
e4:9f:cc:e0:9b:65:53:c5:bb:80:05:5e:76:2c:5c:1f:3d:8e:
1b:04:9c:c7:5c:35:05:47:c1:00:85:e4:89:ef:6b:47:8d:91:
1f:16:a5:e8:d4:c2:26:8d:39:ec:50:be:b1:8d:86:c2:87:90:
20:e5:3b:61:af:8d:7b:ed:89:31:4a:76:36:10:df:70:af:2e:
98:57:22:f9:bd:6c:02:e5:f0:9f:3a:e2:f0:f3:6c:7c:4e:6a:
01:06:41:84:6e:b3:91:ef:e8:78:13:26:4e:f4:41:a2:3e:ca:
a3:98:01:04:e6:91:cb:1c:c3:82:37:94:a8:0b:19:50:6e:77:
57:69:e5:0e:05:bf:ad:9f:c1:09:d7:9b:bf:9f:1c:34:27:d2:
d0:b9:ae:5e:eb:3c:d9:1a:15:a9:9b:f9:85:4e:f9:02:aa:5a:
52:50:40:c7:20:5d:69:0c:e4:5b:81:66:98:f0:54:c0:55:f9:
e1:0b:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:36 2025 by rpki-client