Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/NppGj-vB7qPIZEIjN2QiF53Di1w.roa
File: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (raw, json)
Hash identifier: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=
Subject key identifier: 36:9A:46:8F:EB:C1:EE:A3:C8:64:42:23:37:64:22:17:9D:C3:8B:5C
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01946E5CDA3AF3A7BB22FBC738F12BE224EF
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/NppGj-vB7qPIZEIjN2QiF53Di1w.roa
Signing time: Thu 16 Jan 2025 09:06:06 +0000
ROA not before: Thu 16 Jan 2025 09:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208867
IP address blocks: 193.104.197.0/24 maxlen: 24
217.29.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:5c:da:3a:f3:a7:bb:22:fb:c7:38:f1:2b:e2:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jan 16 09:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=369a468febc1eea3c8644223376422179dc38b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:9d:34:c9:94:f9:39:f6:4b:d1:5b:ff:0f:
39:e6:c6:7d:30:15:f9:70:4f:c7:f3:26:db:47:55:
ba:ee:98:d5:03:ec:c0:1f:9c:2f:4b:bd:cf:b9:2c:
a7:07:6b:e6:25:0c:5d:35:34:6c:1a:a2:b3:9b:e0:
df:e0:bf:b2:4e:69:c7:f3:77:33:29:03:1a:00:c7:
66:1d:04:31:c5:55:e0:33:a6:86:b0:93:0c:88:c3:
2a:b8:8d:5b:3e:06:43:db:da:8e:ed:72:1e:f5:7e:
74:5d:2e:8f:a5:d7:d9:59:b9:fd:50:f0:20:de:71:
af:93:65:02:17:9d:a1:d4:b0:bd:be:7d:5e:60:31:
d3:b1:24:eb:4a:65:84:db:5d:74:9f:23:60:41:30:
94:5c:f3:8b:29:da:c2:da:12:c0:c7:53:80:1f:33:
08:96:b0:33:4f:da:18:3a:1e:24:99:ec:7e:e7:f8:
77:35:a0:f4:49:a6:ce:bc:d1:67:fc:a0:bf:34:e5:
16:60:ed:b0:07:31:70:05:0c:04:ee:60:c7:4f:57:
41:c1:57:ff:bb:3f:11:90:99:ab:9e:5f:5a:f1:92:
dc:20:9b:3c:2e:c0:3c:ad:af:6e:51:c8:4b:b8:b6:
fb:e2:2d:8c:bf:1a:49:1b:b1:39:fb:7a:53:f3:e7:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9A:46:8F:EB:C1:EE:A3:C8:64:42:23:37:64:22:17:9D:C3:8B:5C
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/NppGj-vB7qPIZEIjN2QiF53Di1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.197.0/24
217.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:99:e4:01:39:0a:b1:60:5c:56:b7:6e:ce:03:13:f2:cf:42:
3d:1a:c3:83:a3:fb:0b:35:64:e7:e3:b4:8b:99:a9:58:20:df:
0a:11:23:ea:1f:60:c7:8e:ca:36:12:84:ab:51:24:45:93:b1:
a5:31:cd:6a:ac:4f:e1:56:f4:37:29:2a:fc:4e:c0:33:53:34:
c7:9d:38:c1:57:c6:69:42:75:2e:07:4d:18:1b:a7:be:4b:30:
c8:52:2c:ae:e4:84:60:94:68:a8:79:61:5b:ab:b1:2c:d8:4b:
29:bb:57:e6:3c:c2:f2:5a:47:4f:10:ad:20:e4:9b:44:40:02:
cf:0d:35:ee:54:17:1c:01:cf:3c:61:f5:ea:89:ea:1f:06:3c:
09:50:82:a3:58:41:b2:69:b2:4b:f5:ef:bf:35:aa:ff:94:f2:
3b:ce:9a:8f:52:c9:5e:ab:8c:28:30:88:65:10:3b:b8:ea:46:
85:b6:b7:36:27:58:d6:8f:2f:f0:6b:76:7c:cb:20:f8:a0:77:
d3:20:20:7e:a0:c4:ca:a0:1f:eb:5f:a9:9d:f1:15:5c:2b:c0:
bb:82:44:4e:0b:44:d2:fd:df:0f:50:65:9c:b4:2c:5b:e2:ec:
6a:59:b0:c1:d7:3a:7c:d3:cf:39:c9:17:8a:3d:33:ca:03:0f:
e0:07:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:29 2025 by rpki-client