Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/9qNQB_i0eu4jjJmVJKka4rzSK5w.roa
File: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (raw, json)
Hash identifier: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=
Subject key identifier: F6:A3:50:07:F8:B4:7A:EE:23:8C:99:95:24:A9:1A:E2:BC:D2:2B:9C
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019425218477EE1D858D3F67A79D36B56909
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/9qNQB_i0eu4jjJmVJKka4rzSK5w.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41354
IP address blocks: 194.35.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:84:77:ee:1d:85:8d:3f:67:a7:9d:36:b5:69:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6a35007f8b47aee238c999524a91ae2bcd22b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:af:49:a5:7d:af:7e:2e:0d:41:6a:ed:65:
ab:aa:8f:2a:01:35:fb:48:65:74:f7:65:86:40:e4:
bd:28:22:dd:17:ad:86:8e:74:06:c7:79:80:0d:78:
69:65:47:65:d3:28:c7:6d:92:d6:1c:e8:a1:38:62:
30:9b:1c:2e:89:ca:41:4e:28:dc:de:1a:9e:d7:bc:
f1:cf:18:71:c1:41:5a:6e:69:24:a0:c6:b5:e9:b7:
e2:eb:29:9f:e8:89:89:31:45:f2:29:b2:1b:f0:14:
a4:d5:80:af:25:16:fe:9b:80:e2:61:fc:4a:6e:40:
05:a8:47:cf:da:19:11:93:4e:7e:d6:24:da:28:30:
de:9e:6a:cc:7f:64:9b:61:03:79:6f:56:8b:ce:c0:
9e:8c:5b:06:82:29:de:22:d0:cd:87:1b:b1:ae:45:
c1:ff:d7:f2:04:16:14:f9:b7:82:ad:4e:e4:10:69:
c7:f7:c3:72:98:ed:e8:0d:a4:4f:04:00:ba:f9:cb:
51:ea:76:ec:15:54:75:44:0d:ef:c9:8d:d7:96:4d:
12:7e:83:6a:6a:7e:56:b0:94:54:32:64:2d:b0:19:
f3:6d:fb:68:f8:75:29:1f:8a:0d:94:d7:1a:7b:6b:
38:5e:83:1f:83:80:82:ba:09:34:07:3e:21:9e:0f:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A3:50:07:F8:B4:7A:EE:23:8C:99:95:24:A9:1A:E2:BC:D2:2B:9C
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/9qNQB_i0eu4jjJmVJKka4rzSK5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.96.0/22
Signature Algorithm: sha256WithRSAEncryption
51:91:7a:6a:72:87:1c:d5:54:2c:ae:4d:bd:73:2b:dc:09:62:
32:23:d1:b5:5f:b3:c9:b6:35:45:ff:88:c6:51:db:2d:0b:eb:
f4:75:02:f5:9a:cc:e1:5a:c9:ba:1e:b8:32:d1:7b:65:19:f1:
8c:08:f7:b5:df:e9:82:ee:40:32:ca:a4:d2:62:fc:bd:aa:f5:
6b:20:00:16:0b:69:f3:76:86:a4:10:19:b2:49:8c:71:1e:d8:
ed:bc:e7:91:a4:50:a5:7c:35:67:e9:6b:fb:fc:94:10:b5:6f:
64:c0:96:20:9c:6e:57:8a:44:65:24:40:54:24:65:81:63:18:
6a:e2:fd:51:3c:8c:d8:54:62:ae:46:58:be:4c:36:60:46:67:
6c:24:65:45:86:1e:62:65:5b:93:95:e4:f9:1d:a6:f9:d5:75:
ba:f2:a5:6b:7b:30:ae:23:34:2e:d6:b4:41:35:b8:a5:3f:20:
a7:c3:22:98:9d:4d:cf:fd:7e:13:ea:f9:b3:7a:53:5f:d6:d6:
8d:8f:1b:96:bc:ff:9b:2c:2f:b4:54:85:a7:fc:44:f4:80:f6:
af:45:7c:d9:ed:e6:d1:6c:68:e4:df:cd:a0:72:9c:81:3b:64:
a1:59:f0:b6:36:36:ed:92:ae:1e:bc:39:18:a4:11:55:59:e1:
77:38:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:33:57 2025 by rpki-client