Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/NBksY7qoZYso21Vw3xYrZFLq5eE.roa
File: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (raw, json)
Hash identifier: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=
Subject key identifier: 34:19:2C:63:BA:A8:65:8B:28:DB:55:70:DF:16:2B:64:52:EA:E5:E1
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 019424B3C177EEAD5B93461D5AA7EB4A2B5C
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/NBksY7qoZYso21Vw3xYrZFLq5eE.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24995
IP address blocks: 94.199.160.0/21 maxlen: 24
94.199.160.0/22 maxlen: 22
185.194.188.0/22 maxlen: 24
193.201.60.0/22 maxlen: 24
2a02:680::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c1:77:ee:ad:5b:93:46:1d:5a:a7:eb:4a:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34192c63baa8658b28db5570df162b6452eae5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:09:54:25:c5:de:1d:f7:c7:62:22:8b:fc:
21:a1:28:cd:29:91:7a:8b:6d:81:e4:76:75:4d:5c:
fe:3e:cd:cf:7e:5c:c0:c4:dc:1b:48:0f:66:a2:b1:
f2:f1:de:77:f6:59:5f:c8:e1:dc:4f:f9:fc:82:ec:
4e:18:47:4f:4d:3f:c8:6e:4a:d2:3f:83:f1:4a:02:
b1:f0:12:42:56:bf:ce:73:b8:07:64:ef:98:ab:f9:
14:cc:33:8f:f4:20:07:f4:9b:a0:4e:70:f5:4e:14:
3d:eb:43:7a:7f:fe:df:a2:16:fc:4e:66:4c:01:96:
35:2a:c8:eb:c9:b2:e3:8c:dc:c0:05:f6:e0:a3:6e:
ab:3d:bc:52:11:3a:fa:bb:e3:64:c4:10:e4:6e:a2:
76:0e:e6:af:8b:79:bf:96:91:ee:27:44:6f:88:93:
be:2b:6f:9e:28:71:90:53:b4:29:c8:db:dd:a6:3d:
ee:0f:8e:05:06:ca:c5:b5:3e:4a:4a:13:b2:93:46:
3c:eb:ee:2d:39:b8:02:c3:01:32:de:70:dd:55:18:
da:0b:11:d9:36:16:f2:86:1a:2b:bf:39:8a:ff:61:
97:c8:5a:de:69:bd:54:ad:98:27:ca:02:d3:85:ad:
8b:97:d5:74:0b:30:d8:45:38:8d:20:18:59:4a:f4:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:19:2C:63:BA:A8:65:8B:28:DB:55:70:DF:16:2B:64:52:EA:E5:E1
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/NBksY7qoZYso21Vw3xYrZFLq5eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.160.0/21
185.194.188.0/22
193.201.60.0/22
IPv6:
2a02:680::/36
Signature Algorithm: sha256WithRSAEncryption
25:4a:54:2c:de:f1:e2:a5:65:d7:14:3c:c0:08:8b:70:f8:fd:
fc:a9:47:41:04:a2:c0:69:b3:7a:5b:d4:4c:d4:bf:12:5e:8b:
e0:3c:b8:12:df:75:fd:22:76:f6:d9:b1:0e:c6:8d:8b:c2:df:
a7:d2:49:04:ec:0b:64:6e:2f:28:46:4e:d1:0b:e7:c7:91:62:
31:b9:0f:b3:c0:34:55:f2:a5:01:79:11:ed:48:1e:4b:23:43:
4f:12:71:54:a8:e5:0f:28:19:24:ad:13:be:b4:ef:34:fd:cb:
a8:fe:4b:27:96:41:58:51:fe:36:2f:af:dc:bb:55:f9:1c:4a:
b8:3f:8c:ce:70:04:0b:03:3f:7b:ab:b0:81:b7:9d:af:c9:b0:
ad:09:99:05:96:14:4a:ae:fe:d2:6b:71:2b:02:d2:71:ce:20:
9f:48:53:2f:a0:fc:e6:53:94:52:31:ce:07:fb:71:81:57:42:
7d:23:da:05:b0:81:27:f9:3e:78:1a:95:16:0a:37:9c:38:9a:
ff:3e:c4:c0:89:64:7b:1f:23:87:2a:62:2b:37:03:8c:fb:55:
20:31:80:1d:12:fb:e5:15:13:91:fb:fc:6b:0f:9d:b3:8c:60:
c9:eb:cf:b9:da:62:39:ee:e8:f7:14:ea:71:ea:26:ed:73:8b:
d4:8f:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:14 2025 by rpki-client