Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/nXVN6v3CzmLleKeTxS_kRgT2CK8.roa
File: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (raw, json)
Hash identifier: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=
Subject key identifier: 9D:75:4D:EA:FD:C2:CE:62:E5:78:A7:93:C5:2F:E4:46:04:F6:08:AF
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 0194266B2FFD0EE634D39DD98417CE107898
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/nXVN6v3CzmLleKeTxS_kRgT2CK8.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34079
IP address blocks: 188.92.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2f:fd:0e:e6:34:d3:9d:d9:84:17:ce:10:78:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d754deafdc2ce62e578a793c52fe44604f608af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:39:e4:54:ba:af:8b:73:21:e9:74:76:2e:
5c:1a:9c:b3:85:e0:9c:da:b6:3b:c6:4d:ea:88:59:
aa:36:fd:14:13:ff:06:f3:c0:2c:96:da:38:6f:03:
34:52:bd:d2:30:2e:81:d7:ec:54:4c:8f:59:4c:01:
b6:1c:9d:47:e5:cd:35:c4:07:9f:13:92:71:53:17:
b4:e7:f0:c7:67:80:e1:ec:9f:33:2e:1a:56:b8:24:
91:6b:3e:45:54:9f:2a:1a:b1:07:e6:33:a1:75:79:
22:d6:b5:4b:3c:f5:8a:d6:db:25:cf:a2:d0:87:96:
22:6f:0e:df:a9:07:bf:d3:d2:10:05:1d:2b:3e:8f:
21:76:1d:f4:f4:48:f6:fe:6c:0a:44:5f:cd:0c:30:
2e:dc:ae:d0:ef:8d:55:f2:56:3e:d1:2b:50:b4:fd:
77:af:6c:9c:57:e8:b3:85:e1:85:9e:47:12:7b:a2:
dc:c0:04:6a:9c:b3:2e:15:08:80:6b:51:1a:82:3d:
b3:70:d1:eb:18:ce:3a:57:aa:0b:40:d9:6b:88:d1:
6a:cd:21:69:67:5d:ae:dd:c6:06:1a:44:29:47:e4:
52:f1:37:a7:14:8b:08:8c:16:b1:46:a1:7d:15:f8:
07:33:e1:3e:81:eb:ec:36:18:61:3c:57:40:ef:c7:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:4D:EA:FD:C2:CE:62:E5:78:A7:93:C5:2F:E4:46:04:F6:08:AF
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/nXVN6v3CzmLleKeTxS_kRgT2CK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.138.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:c9:ff:18:7b:9a:2f:38:13:57:c6:84:39:70:dd:61:8f:6c:
ed:53:0b:d9:41:f8:72:02:ef:50:bb:06:90:8f:15:a8:c6:f3:
0e:c2:2e:46:a7:a3:e4:99:5d:ca:d7:cb:ab:e2:7e:e4:2e:51:
be:f3:74:4d:35:b1:01:f3:fa:05:6c:9e:98:7f:d4:0b:43:3e:
6e:31:7b:b8:e8:73:3b:14:7f:2b:24:c1:08:17:75:a5:f8:b2:
9b:a6:f1:a4:99:95:14:f6:2c:44:ca:36:f2:bc:d4:fd:83:d4:
c3:8d:ac:cf:50:70:4b:3a:3a:c4:a1:62:8b:27:03:45:ba:8d:
0e:93:bf:98:11:ad:6f:4e:58:27:d5:84:27:d5:7a:0d:29:d3:
f4:81:62:fd:dd:89:29:1d:19:df:3f:ea:d8:0d:4d:ee:e3:b6:
c8:6f:27:26:6f:37:ed:80:f7:4a:a5:e5:96:30:82:52:90:d1:
da:88:53:db:2a:c8:74:ac:dd:93:a3:73:1b:46:52:34:35:91:
28:79:51:e1:8f:a0:38:4f:c6:2c:24:1c:6e:5a:70:0b:22:ed:
c8:42:d2:25:bd:65:c4:a7:32:3f:ca:5c:69:bf:1a:81:19:58:
d4:d7:d4:3f:1f:5a:3a:57:bd:37:2b:d2:91:12:c3:c3:69:38:
44:65:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:02 2025 by rpki-client