Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/nb_SgNToJhQlWuIX7tsN5k_y4pE.roa
File: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (raw, json)
Hash identifier: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=
Subject key identifier: 9D:BF:D2:80:D4:E8:26:14:25:5A:E2:17:EE:DB:0D:E6:4F:F2:E2:91
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 019423D6CA41657D4869E857B4596290E523
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/nb_SgNToJhQlWuIX7tsN5k_y4pE.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16418
IP address blocks: 185.8.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ca:41:65:7d:48:69:e8:57:b4:59:62:90:e5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dbfd280d4e82614255ae217eedb0de64ff2e291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:5a:71:63:ac:c5:55:0a:f0:c0:cc:01:09:
f3:95:ab:b9:f2:76:bc:61:9f:71:da:30:78:13:36:
9c:d1:64:c8:21:ae:cb:86:3d:59:79:6a:d4:cb:59:
bd:96:93:82:13:60:b7:c8:b4:76:5f:24:c3:ce:66:
62:bb:34:1e:d7:68:87:70:fd:0c:37:ae:a2:05:54:
e1:37:02:40:23:0f:10:e0:83:f8:1d:df:bb:3a:36:
da:3a:f0:80:a1:1f:d8:b8:a7:67:81:42:49:6b:1a:
37:9d:38:5d:3d:aa:f5:ba:73:98:a8:f6:59:3e:60:
15:ee:55:69:a3:1f:a8:14:eb:ce:af:2a:39:d2:75:
ef:ac:69:9b:9a:93:7d:8f:1a:6a:28:11:1b:e2:ed:
a2:b8:cd:a3:b2:d0:74:61:2f:9e:28:e7:73:1c:37:
13:be:0d:c6:c4:7c:0f:5f:3a:a5:69:df:45:b5:e8:
fb:9d:a9:ef:be:a3:42:bb:e7:73:8f:28:c9:52:f0:
a1:ed:f5:2f:39:c3:38:28:68:6c:59:e1:7c:cf:a5:
f3:c6:8b:c8:3b:12:69:54:e8:0a:df:cb:b4:d6:2d:
30:a4:49:91:12:5e:9d:94:8d:76:e7:c3:57:05:85:
a3:a2:c4:2e:21:3b:a0:69:74:c4:f9:00:96:59:ec:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:D2:80:D4:E8:26:14:25:5A:E2:17:EE:DB:0D:E6:4F:F2:E2:91
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/nb_SgNToJhQlWuIX7tsN5k_y4pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6a:1d:0f:14:31:12:eb:88:45:86:ad:33:1f:ea:88:50:53:
b9:fd:e8:c0:0c:37:e5:0c:21:04:07:8c:0d:c3:8b:66:ac:f2:
b7:76:ae:e3:e5:11:ee:50:f5:4a:b7:ca:fa:d8:a9:9a:c9:bd:
da:c5:0c:58:83:67:f1:a9:a2:bc:7c:11:ae:11:1a:d1:c4:c9:
f4:48:4e:5c:cd:5d:b9:b2:b9:75:f2:a3:b6:5a:4f:c8:1f:82:
62:5b:96:60:37:3e:76:ce:ff:ef:e0:64:15:b0:79:8a:eb:f4:
b0:2b:ae:00:d7:04:5a:59:4d:bd:02:63:fd:d3:db:14:8f:84:
9f:8d:33:ec:af:83:d8:a2:aa:a5:db:15:2b:69:48:4e:e1:60:
18:aa:2d:5e:ca:43:57:05:c1:d2:6c:d5:1b:ff:60:99:55:67:
e2:3e:23:ae:78:de:97:26:6f:83:91:68:d4:11:51:cc:53:bf:
c5:7a:81:82:b7:8c:b0:2a:e3:fc:dc:ab:a4:aa:1e:ff:a8:af:
11:47:94:68:a5:25:18:1f:2e:4b:76:28:84:67:38:e9:ca:57:
e7:49:4c:a2:b9:f5:2a:32:fd:f0:5e:17:47:cd:ee:73:ab:cd:
29:40:0d:36:c2:ad:41:98:60:2c:12:f3:91:96:f4:af:58:60:
d7:93:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:38 2025 by rpki-client