Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n7fmB5DH0CbzqVM9tpUn7bTxhiQ.roa
File: n7fmB5DH0CbzqVM9tpUn7bTxhiQ.roa (raw, json)
Hash identifier: ZhLAUNfJFRQw61SgkufFvvrBPij8WJ9tCokBq7xHsS4=
Subject key identifier: 9F:B7:E6:07:90:C7:D0:26:F3:A9:53:3D:B6:95:27:ED:B4:F1:86:24
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A8EFF049DABC63C7F3C7DFD2D78D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n7fmB5DH0CbzqVM9tpUn7bTxhiQ.roa
Signing time: Thu 02 Jan 2025 13:48:49 +0000
ROA not before: Thu 02 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203285
IP address blocks: 188.132.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a8:ef:f0:49:da:bc:63:c7:f3:c7:df:d2:d7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb7e60790c7d026f3a9533db69527edb4f18624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:69:13:0e:09:0a:18:7b:24:9d:cb:9f:6d:
77:41:0d:4f:fe:ed:20:94:52:33:ca:78:f8:68:d1:
76:b0:a1:64:d6:06:28:53:c9:cb:40:91:1d:a2:f6:
e0:50:ef:e2:95:15:5b:82:e0:70:1d:9a:25:c4:d7:
b5:f8:34:d2:97:48:4c:c6:35:5b:e1:6d:6e:72:b4:
26:37:31:0e:1c:55:de:d3:4c:2e:51:4e:aa:c9:ab:
d1:54:23:e2:f7:fc:c9:6d:1b:f2:1a:03:2e:81:3b:
20:52:00:e6:23:fa:86:92:03:62:ab:e4:2d:fb:cd:
62:63:69:07:e8:1f:d3:4c:83:25:02:57:d6:f5:70:
44:f0:24:ff:49:8a:01:bd:ac:23:18:e4:93:a9:07:
16:fc:ea:79:b7:0a:b0:0e:21:25:33:e9:51:8d:ce:
6a:71:47:7d:8f:cb:10:89:31:67:64:42:ae:d6:d3:
e9:22:5f:95:2e:e8:2c:1e:7a:36:44:d2:2e:c3:1a:
4b:c3:30:f9:37:39:b5:97:1a:32:fe:00:ba:d3:bd:
dc:88:0d:d1:b3:7d:d7:54:9f:74:7f:dc:dd:cf:11:
5e:4b:d5:b7:7a:16:65:9f:e4:e3:9b:f5:29:08:76:
89:3d:e4:b8:62:e7:e2:9b:ff:86:08:e4:de:b0:30:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:E6:07:90:C7:D0:26:F3:A9:53:3D:B6:95:27:ED:B4:F1:86:24
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n7fmB5DH0CbzqVM9tpUn7bTxhiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.171.0/24
Signature Algorithm: sha256WithRSAEncryption
76:20:24:3b:f7:12:8b:c2:fe:f3:61:c7:53:c0:89:9f:45:4f:
80:89:22:54:a7:1a:db:0e:cc:03:51:5f:81:52:89:b8:a8:55:
6b:7f:35:53:18:77:8b:5d:46:60:3c:86:be:46:44:48:cd:bd:
fd:54:a1:99:fb:98:84:43:9f:b5:07:cd:72:1d:ac:b7:d0:a7:
a6:79:68:2e:3f:0f:2b:07:f0:06:07:94:f4:4c:d1:9e:e0:f3:
be:dc:a8:ed:64:e3:17:36:25:12:44:97:f0:6f:55:0b:80:a4:
93:c4:97:6d:ef:47:b6:00:e0:af:f4:a7:62:eb:8f:d8:70:46:
d0:d9:25:aa:1d:62:79:29:f0:68:38:02:3f:50:d0:59:ad:a0:
0f:f2:45:9b:af:d9:d9:b3:99:8d:15:f3:ba:79:90:a1:cc:b8:
8f:75:c8:22:16:97:16:b7:f8:23:d6:2e:58:59:35:c5:b2:a9:
2f:b2:06:ce:a5:f1:30:bb:4a:40:c1:9b:55:71:15:3a:b2:f5:
04:2a:3f:47:83:cf:77:ed:73:9e:94:72:d1:7e:48:04:11:9c:
f8:b9:de:83:ae:84:3c:a7:d5:58:45:81:d6:31:64:2e:9c:f6:
b7:e4:2a:35:70:65:c8:93:56:c1:75:cd:ec:24:6d:d3:60:03:
9f:43:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:37 2025 by rpki-client