Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nwW22ku5npjIFbtm2iafXmGhWlk.roa
File: nwW22ku5npjIFbtm2iafXmGhWlk.roa (raw, json)
Hash identifier: iSIlqvgu8mORVF6cA1YRbz4aeQ77tZ365qGRFqnJTRE=
Subject key identifier: 9F:05:B6:DA:4B:B9:9E:98:C8:15:BB:66:DA:26:9F:5E:61:A1:5A:59
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B7D142D1FBD5D71752A9E870672C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nwW22ku5npjIFbtm2iafXmGhWlk.roa
Signing time: Thu 02 Jan 2025 13:48:53 +0000
ROA not before: Thu 02 Jan 2025 13:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211859
IP address blocks: 78.135.106.0/24 maxlen: 24
78.135.107.0/24 maxlen: 24
188.132.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b7:d1:42:d1:fb:d5:d7:17:52:a9:e8:70:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f05b6da4bb99e98c815bb66da269f5e61a15a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:fa:20:45:ec:59:94:a6:f6:63:e3:60:e3:
f3:e9:5e:9d:fe:f5:7c:5c:9a:31:1e:a9:39:bc:f5:
89:8a:7a:20:8c:ab:1e:59:04:71:6b:ba:54:a9:26:
32:34:e7:6b:00:67:ee:8f:5f:28:be:db:da:b1:9b:
60:9e:26:1a:77:a7:fe:48:64:c4:ad:e1:4d:ca:c1:
83:50:96:5a:25:8e:98:16:63:6e:6d:61:37:07:50:
0c:d4:03:28:6c:c7:70:20:48:cd:09:7c:01:14:9d:
4c:a4:2d:b3:8a:58:f8:aa:c6:89:22:28:74:e7:e0:
f0:07:a9:0c:0e:9d:47:57:22:f9:23:07:7e:de:c7:
f3:31:22:5c:2c:96:48:ab:c6:1c:6a:87:23:12:8e:
a9:19:32:f9:c6:6e:89:56:29:4a:a7:08:93:5d:1f:
c0:50:1a:ee:69:2c:a4:03:a8:fb:04:57:65:bb:94:
7d:9a:8b:de:06:95:b0:75:f2:7e:1b:05:b7:13:05:
aa:b3:57:88:01:e0:b6:3f:6c:fb:6c:74:7c:6f:72:
02:53:c5:1f:13:65:ee:fd:51:73:81:1b:3a:39:ac:
a1:a2:be:bb:6b:32:51:d9:a4:25:3a:1b:82:8e:da:
dc:2c:41:10:b8:46:6b:f8:e1:35:5f:b1:e0:83:aa:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:B6:DA:4B:B9:9E:98:C8:15:BB:66:DA:26:9F:5E:61:A1:5A:59
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nwW22ku5npjIFbtm2iafXmGhWlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.106.0/23
188.132.200.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d1:12:98:7b:6f:44:2f:25:e2:c1:88:96:84:72:b8:7c:49:
11:9e:04:10:74:66:e1:c3:6c:18:b2:65:9e:93:95:bb:21:78:
20:ed:2a:53:16:69:ec:b6:e6:a3:ab:c6:bb:97:16:f9:9d:ab:
36:4e:44:a9:ee:f3:a1:f8:0f:ab:5f:d7:12:d9:be:32:89:e2:
4a:32:f3:c7:ed:de:24:d9:e0:2a:da:7d:66:15:b4:b0:b3:a8:
ed:23:3e:32:59:50:55:99:49:90:6d:3f:02:23:4b:03:62:4b:
a6:27:ea:4c:48:39:c0:e3:c7:e4:86:13:03:d1:39:88:f1:a6:
9b:bd:bd:37:b4:d5:08:0d:34:88:48:2b:e7:37:28:a2:74:54:
e3:d5:fd:5d:a7:02:1c:3d:fb:f9:f0:a8:04:97:45:91:1b:b5:
b8:21:0f:60:dd:b0:91:8b:63:e4:24:30:64:17:31:60:1a:c2:
53:4a:e4:9b:86:78:03:58:04:b4:66:34:50:72:6e:0d:67:fb:
a4:16:bb:cb:f8:65:82:3a:cb:84:a4:b7:a3:fd:82:a2:19:ee:
9b:06:46:3b:1b:d7:ec:1d:33:1e:5b:48:55:16:81:98:08:37:
6c:d4:f3:78:fb:ca:e8:b6:8c:e4:f6:e4:e2:bc:63:08:d0:17:
dc:b1:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:17 2025 by rpki-client