Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/nc6Tssi0fJUCdpIrzpS6gtLsknA.roa
File: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (raw, json)
Hash identifier: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=
Subject key identifier: 9D:CE:93:B2:C8:B4:7C:95:02:76:92:2B:CE:94:BA:82:D2:EC:92:70
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 01942445072149B795D3BFB9BA5C14138916
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/nc6Tssi0fJUCdpIrzpS6gtLsknA.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15681
IP address blocks: 83.137.240.0/24 maxlen: 24
194.29.97.0/24 maxlen: 24
194.29.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:07:21:49:b7:95:d3:bf:b9:ba:5c:14:13:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dce93b2c8b47c950276922bce94ba82d2ec9270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:5f:8f:b9:85:94:73:62:f5:08:b9:72:61:
75:12:64:9f:07:1d:72:9d:8b:54:3d:7c:51:1c:da:
58:f6:b4:53:ea:82:c2:9a:01:4b:b3:1c:a6:e0:cb:
22:7a:4e:a9:d9:62:cc:73:f8:7f:c4:17:11:1c:4c:
04:27:ba:c1:97:da:f5:06:c0:dc:56:86:20:2d:fa:
4a:6d:1b:73:32:e3:6c:e2:ab:66:a5:69:32:7d:74:
69:39:ea:f5:a4:63:bd:6b:3c:32:2a:8d:31:e8:d1:
2d:b5:83:47:5e:ec:9e:62:df:fb:b1:55:44:44:72:
d2:bb:f6:55:4f:fa:cb:92:d6:23:b1:83:53:51:e9:
0b:55:98:02:25:3b:8b:21:86:43:fb:93:73:cb:27:
ec:87:44:bb:58:fb:dc:3d:f1:06:ab:a5:f8:75:93:
ec:13:ca:68:58:59:83:e9:4a:d6:54:5b:b7:72:db:
96:24:c5:39:19:2e:81:28:c2:a8:94:98:a8:55:40:
6f:b6:9d:20:ec:52:9e:bc:b2:49:37:d1:fe:b8:f0:
59:ca:a7:cf:35:dc:74:bf:b8:92:32:48:5e:df:63:
86:e3:b1:f5:0a:95:53:76:bb:74:9d:56:9c:66:08:
37:5a:ac:3d:01:7f:3c:b9:f4:48:f5:0c:cf:56:27:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:93:B2:C8:B4:7C:95:02:76:92:2B:CE:94:BA:82:D2:EC:92:70
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/nc6Tssi0fJUCdpIrzpS6gtLsknA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.240.0/24
194.29.97.0-194.29.98.255
Signature Algorithm: sha256WithRSAEncryption
31:6b:84:af:41:d2:aa:0d:58:9e:d0:d8:da:91:15:5b:29:29:
f2:50:c2:58:69:1d:4a:71:e8:2d:57:94:b5:f0:bb:1d:99:dc:
db:21:16:41:a0:b2:68:fb:be:d9:50:4a:08:1e:cf:56:ce:cb:
77:10:b6:48:5e:82:e8:62:23:91:02:02:03:c8:2d:ff:db:e3:
bd:ce:bf:50:90:36:63:4f:ad:e1:ca:30:a8:25:2d:d0:c8:23:
60:ae:69:8d:25:1a:ae:8f:6d:93:61:5e:72:9f:86:c8:b8:8d:
c7:c3:55:b0:54:95:1c:7a:2f:76:50:9c:57:f1:0f:12:ba:56:
c9:74:de:82:0e:21:b9:25:17:f5:d3:21:c1:c4:5a:f8:56:b2:
fa:ee:c3:51:2b:b8:b8:99:9f:59:1d:3e:99:e6:59:70:0b:ea:
8c:6e:fe:6d:3d:e2:b1:0a:c6:dc:6d:1c:91:35:83:a6:69:91:
7e:19:ed:79:a7:6a:2d:e1:91:b3:6d:03:b5:6d:8c:ae:30:c9:
d0:0e:5e:60:17:d1:7c:9c:a0:a2:42:26:43:b9:ca:ab:84:0c:
87:e5:81:de:6b:ec:30:e9:9b:12:6f:01:1e:5e:39:6b:da:ad:
7a:03:70:97:45:6a:64:f0:0d:99:32:50:8d:0a:9e:e0:1c:a0:
be:a0:69:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:29:53 2025 by rpki-client