Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/nFthzao_iVS1TdMPq7jAXyRRLuU.roa
File: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (raw, json)
Hash identifier: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=
Subject key identifier: 9C:5B:61:CD:AA:3F:89:54:B5:4D:D3:0F:AB:B8:C0:5F:24:51:2E:E5
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 0194228D6F8FBE5A4AE3E5CB96E59B64B80F
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/nFthzao_iVS1TdMPq7jAXyRRLuU.roa
Signing time: Wed 01 Jan 2025 15:48:01 +0000
ROA not before: Wed 01 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202113
IP address blocks: 185.52.244.0/22 maxlen: 22
185.52.244.0/24 maxlen: 24
185.52.247.0/24 maxlen: 24
2a04:c9c0::/29 maxlen: 29
2a04:c9c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6f:8f:be:5a:4a:e3:e5:cb:96:e5:9b:64:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c5b61cdaa3f8954b54dd30fabb8c05f24512ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:1b:d1:72:ac:6f:c6:83:02:cf:c9:38:ad:
c6:60:24:ae:4e:e3:b8:1a:9b:d1:9f:ef:4f:b7:ee:
e9:7e:ad:82:f5:fc:4e:72:b8:ca:25:ad:bb:7e:94:
ce:56:d3:78:66:b1:0e:75:41:17:00:ef:5c:ee:a4:
ee:8c:12:1f:97:63:de:cb:a5:4a:1b:32:8f:fa:89:
48:2b:f1:b7:d2:88:e7:e1:55:fc:30:24:39:ab:0e:
50:e3:9d:58:ee:ed:d0:c7:71:30:52:bb:30:11:86:
86:d5:5c:f9:98:a4:33:c5:8a:ec:48:fc:d5:b0:20:
de:59:37:f7:a2:e6:3a:45:52:04:f9:ed:85:94:9a:
a1:e8:c7:a0:2b:88:d2:92:ea:8b:bb:31:f6:47:85:
27:95:50:fc:a9:9e:8f:ba:6f:1f:70:35:b3:1a:07:
0d:33:2f:4f:67:a1:85:1d:0c:3a:fb:6c:d4:b5:b2:
a5:fc:0a:e0:6d:fe:6e:62:83:f0:8f:08:a3:75:eb:
9b:16:f9:f1:8a:75:c8:c7:ac:15:ea:74:bf:e5:66:
ec:6c:4b:1b:38:6f:f6:45:3a:c3:6e:07:e7:68:8d:
3d:71:b8:66:57:98:ca:35:0e:30:3b:28:dd:8c:82:
f7:c1:13:45:f0:0a:60:e1:83:d4:95:52:19:a9:82:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:61:CD:AA:3F:89:54:B5:4D:D3:0F:AB:B8:C0:5F:24:51:2E:E5
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/nFthzao_iVS1TdMPq7jAXyRRLuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.244.0/22
IPv6:
2a04:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:0e:78:5e:9b:13:13:72:69:9b:4b:61:69:22:bc:a8:17:63:
49:ac:34:3f:e2:42:91:5f:32:1a:06:3b:31:45:c0:1b:28:32:
2e:36:1f:93:a8:0c:5f:8c:89:ee:b8:50:cf:80:68:bd:49:3c:
52:f1:32:b0:11:2a:4f:ba:f6:0d:f8:53:f1:aa:b1:19:b1:32:
00:a8:62:2a:41:44:f1:02:b9:ee:94:05:a2:9d:1a:82:e0:fc:
05:93:03:9c:8a:e0:35:d1:08:d5:3e:67:29:b2:8b:05:2e:13:
06:21:71:bc:c9:3c:9e:d8:a2:78:2d:dc:a8:42:c1:38:68:06:
30:3f:0c:6c:2d:93:a2:ac:8a:05:42:9b:7e:e3:f4:12:18:ea:
3b:ef:16:86:41:fa:76:f5:ed:24:a2:09:46:b7:61:4c:c2:65:
71:73:d9:a6:5f:f7:7b:ca:20:8a:4e:01:ab:d0:d0:e8:f6:c2:
ad:37:a5:9a:ca:47:f8:d7:61:10:48:89:bf:ec:6d:00:ca:8d:
dd:02:40:f0:4a:0b:f0:fe:e0:8b:6f:3c:32:69:4c:15:e9:aa:
83:fc:40:17:80:d2:59:63:15:c6:73:50:57:3a:0b:b9:da:a1:
fc:50:4b:36:b3:64:d8:f4:10:9e:66:fd:e8:e4:9c:72:51:69:
c3:9c:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:35 2025 by rpki-client