Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/NGx97u5kA3dUDgSnZsO_ai0a5zE.roa
File: NGx97u5kA3dUDgSnZsO_ai0a5zE.roa (raw, json)
Hash identifier: NM6MYaekH4qBVbHzQFehYG5HnPWSemWzqr91LDcaFoc=
Subject key identifier: 34:6C:7D:EE:EE:64:03:77:54:0E:04:A7:66:C3:BF:6A:2D:1A:E7:31
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 019426D9951F9A4D80C2FB78E5C241BAA943
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/NGx97u5kA3dUDgSnZsO_ai0a5zE.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25098
IP address blocks: 193.201.70.0/23 maxlen: 23
213.230.192.0/18 maxlen: 32
2a01:70::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:95:1f:9a:4d:80:c2:fb:78:e5:c2:41:ba:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=346c7deeee640377540e04a766c3bf6a2d1ae731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:d6:ea:b4:67:66:99:fa:84:bb:2f:f6:8a:
37:d6:b5:dd:ed:6a:0d:db:eb:8d:a7:ad:b1:a5:8e:
fd:b5:03:d8:a0:52:2e:f0:35:3b:ba:e8:f5:6d:73:
66:03:70:f3:54:ee:12:d3:0b:7e:fc:f4:4a:04:36:
da:ec:fd:f4:3a:ce:f9:00:aa:48:fb:5b:a2:84:83:
9a:96:25:a3:01:4c:4d:59:cf:b7:2c:43:56:c0:e3:
7c:4d:99:70:f6:6a:45:a4:af:94:13:d1:42:41:96:
f0:43:67:7e:2c:e8:a0:d4:b1:10:98:6c:41:37:29:
a4:3f:5d:57:d1:b6:30:8f:b9:d1:8e:21:f8:ac:8f:
2f:c5:60:bc:1f:a4:d6:dc:2f:8c:ce:38:9e:7a:de:
db:9c:54:e1:11:1e:9a:50:d5:ac:9d:d6:50:6e:ae:
70:8c:15:99:5a:5c:83:be:52:69:93:12:17:e9:de:
b2:44:89:3b:2c:d5:ec:96:a8:5e:0e:d7:46:1a:4a:
99:ba:b2:29:6d:cb:39:6a:f2:f7:c2:64:81:cb:97:
8b:cd:be:ae:a1:53:8e:c2:07:41:b5:a5:6c:03:dd:
7b:71:94:e7:91:1c:55:3a:c7:f0:23:2b:e8:2b:41:
ac:12:07:d5:66:95:4e:84:1a:d1:e5:66:3b:6d:b3:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:7D:EE:EE:64:03:77:54:0E:04:A7:66:C3:BF:6A:2D:1A:E7:31
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/NGx97u5kA3dUDgSnZsO_ai0a5zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.70.0/23
213.230.192.0/18
IPv6:
2a01:70::/32
Signature Algorithm: sha256WithRSAEncryption
a7:ac:6d:e4:d8:29:34:95:93:12:ef:74:3d:c0:77:f1:8f:e8:
21:ba:a9:c2:05:a8:2d:46:0c:7e:ab:4d:d1:33:65:ed:33:56:
32:61:74:7e:e4:90:7e:d7:83:7b:3c:32:af:a5:ac:33:49:50:
ac:64:6d:47:d7:93:b6:c4:74:93:14:a7:b4:74:d4:e9:2e:8f:
56:6a:1b:93:4e:9e:41:0b:b2:10:eb:8c:d2:49:a7:93:b5:c7:
8a:10:3b:f3:76:03:db:a5:ed:73:3f:e8:21:31:0f:51:e3:75:
b4:02:01:58:1c:07:5f:cf:ab:aa:95:39:2f:ab:3b:c6:65:d9:
b1:5e:42:cc:2f:14:e3:a7:58:a9:7e:2e:f4:83:4b:05:df:cd:
26:db:6c:c3:d6:50:d9:28:1d:fc:c5:ef:fa:bc:63:18:b5:4f:
b1:7a:c9:68:ba:6b:21:39:68:ab:e7:e8:05:b0:f3:2e:83:f2:
aa:a6:6d:62:33:d9:d8:33:e9:9f:97:ad:06:47:c6:76:ca:a9:
42:02:df:e0:df:24:ec:79:26:f4:3c:c8:4e:f1:b2:a3:c7:29:
7f:e5:a4:d0:1d:e7:7e:a7:bd:c4:a7:17:b8:5c:c5:1f:3d:9d:
f3:e7:2b:7e:d8:3a:d3:e6:a4:dd:73:ac:c4:d0:ac:3c:7e:98:
48:2a:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:49 2025 by rpki-client