Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nb1DMSWD0ydUqO8eKHUNScXGURk.roa
File: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (raw, json)
Hash identifier: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=
Subject key identifier: 9D:BD:43:31:25:83:D3:27:54:A8:EF:1E:28:75:0D:49:C5:C6:51:19
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8D78BABBCFAA7526C4E29CFC9884
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nb1DMSWD0ydUqO8eKHUNScXGURk.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44717
IP address blocks: 78.136.66.0/23 maxlen: 23
93.119.30.0/23 maxlen: 23
151.237.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8d:78:ba:bb:cf:aa:75:26:c4:e2:9c:fc:98:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dbd43312583d32754a8ef1e28750d49c5c65119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:38:70:09:9b:29:04:73:7e:2a:2d:11:ae:27:
08:ef:c0:3f:dc:ea:18:c7:3b:24:6a:57:e5:ce:75:
03:54:47:0b:35:9d:a3:4f:1b:a3:1e:8f:4d:74:59:
95:b1:30:4a:28:63:3f:01:83:a8:ba:b5:42:de:b8:
10:fd:f5:f9:b8:60:58:ab:19:45:31:90:c5:a2:7f:
a1:63:ff:65:a3:64:8c:1c:b4:e7:b6:e4:0c:50:c8:
1f:47:41:0b:1a:85:1b:61:22:70:e3:6c:1e:94:df:
ab:82:75:45:04:f5:65:e3:53:f8:b3:ed:11:cc:ac:
62:42:37:2e:d1:8b:54:9d:37:19:1b:a3:b4:da:da:
64:19:e9:cf:16:00:93:57:18:34:7d:08:4f:9f:ac:
d6:bc:80:cb:65:a1:3c:fd:49:6a:61:36:9f:9b:f3:
32:d2:c7:b0:56:46:58:fe:0e:2b:06:27:57:6d:6f:
a7:9d:c9:28:f1:2b:22:6a:4f:7f:bf:8f:b4:59:c5:
0c:c9:a8:d3:1b:3c:60:71:75:cd:ae:c1:7a:ab:8a:
28:1c:d5:fe:37:9a:26:e2:ed:e6:ff:8b:0f:27:40:
0e:6c:d8:13:a2:67:8e:3a:f1:3f:4f:89:1a:38:d9:
1e:b9:3d:f6:42:c4:c6:f2:02:71:3d:36:0a:5c:21:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:43:31:25:83:D3:27:54:A8:EF:1E:28:75:0D:49:C5:C6:51:19
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nb1DMSWD0ydUqO8eKHUNScXGURk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.66.0/23
93.119.30.0/23
151.237.204.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:0f:30:9b:75:17:5c:f7:62:e8:75:45:6c:5a:50:4e:0b:10:
ac:09:fe:2e:84:33:ca:da:93:66:88:9d:f3:c5:ca:40:ab:e0:
79:7a:77:c0:5a:b6:2d:14:f7:3f:11:77:c6:86:bf:26:ce:1f:
31:51:5d:38:69:7f:a6:92:e1:43:4f:0a:d8:1a:90:a9:3a:18:
70:11:9d:14:14:99:57:35:1b:0a:11:66:9c:a7:8b:5e:80:08:
0a:13:09:15:9b:a8:0d:2f:c5:89:ee:5d:ea:3a:cf:87:5a:d1:
9c:26:19:4b:71:c2:ad:c7:82:b6:ee:e0:0e:54:6e:b3:fc:90:
ba:dc:b8:14:24:dc:31:d6:99:95:11:07:06:a0:e1:5f:8c:ed:
85:f9:79:82:b9:66:39:43:00:13:64:e8:69:41:ab:a9:4b:7a:
9a:24:c2:b1:6e:36:33:f9:42:48:34:93:12:0f:7c:e7:a7:55:
84:c0:7f:28:36:90:f5:2b:e1:90:b2:50:61:37:81:44:e0:09:
14:9c:c4:40:5f:ac:dc:14:ac:66:84:24:47:ba:66:4f:9d:47:
a9:60:84:ca:1c:d4:19:4f:1e:bd:1c:d1:a1:9f:5f:7e:77:96:
11:9c:e1:b0:01:9e:ca:74:72:25:7b:da:44:87:f8:67:83:40:
ba:c4:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:07 2025 by rpki-client