Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/nM_etl2WCoja6avtbVHcORguaVQ.roa
File: nM_etl2WCoja6avtbVHcORguaVQ.roa (raw, json)
Hash identifier: l98e5EoFSOa4wAxGzmcUM39TH1pEYnZbSIbHv06MpWo=
Subject key identifier: 9C:CF:DE:B6:5D:96:0A:88:DA:E9:AB:ED:6D:51:DC:39:18:2E:69:54
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 0194258E389A5CC4D769B24C04C01CE209A9
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/nM_etl2WCoja6avtbVHcORguaVQ.roa
Signing time: Thu 02 Jan 2025 05:47:45 +0000
ROA not before: Thu 02 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212586
IP address blocks: 79.174.0.0/24 maxlen: 24
79.174.1.0/24 maxlen: 24
79.174.2.0/24 maxlen: 24
185.231.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:38:9a:5c:c4:d7:69:b2:4c:04:c0:1c:e2:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Jan 2 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ccfdeb65d960a88dae9abed6d51dc39182e6954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:c6:16:09:11:42:c5:85:1b:2e:22:7f:8e:
5f:3a:44:ce:77:54:b9:b8:1c:87:83:d7:74:9c:ac:
e5:ba:29:9f:d0:bb:14:41:af:7f:e4:d2:72:29:bf:
ca:fc:a7:82:cf:3c:86:e3:1d:29:a9:59:a8:f4:3c:
50:6d:9c:2b:2e:0c:cb:65:79:55:12:bc:bc:d0:c2:
bf:1b:b5:8b:18:0e:79:c2:c1:7c:ed:a5:89:1b:04:
45:ee:d6:11:65:65:b1:76:51:e2:48:29:62:24:76:
e3:2d:ed:2b:4a:96:1a:57:56:15:75:c8:39:07:0d:
22:74:57:56:9c:2e:89:00:8e:20:9d:67:b6:37:80:
d8:6e:07:d7:e1:89:be:2a:b3:12:4a:ed:89:8a:c2:
25:1b:e3:45:f3:ac:d8:84:52:84:20:55:0b:fc:a4:
87:81:fb:d5:2e:3e:eb:49:52:f1:0e:9a:5d:cf:5d:
e1:f0:51:de:f7:54:82:ac:ce:c6:92:f5:f3:4e:fb:
77:37:95:3b:a5:ce:12:43:4d:17:4a:85:4a:a6:f9:
42:e6:98:92:53:b1:d0:d7:35:15:8c:eb:af:33:f9:
ae:c1:e4:61:e5:98:d3:95:6f:50:de:ad:13:c3:f3:
f6:4c:f1:90:9a:b8:e2:b9:bc:40:b7:ee:2f:4f:ee:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CF:DE:B6:5D:96:0A:88:DA:E9:AB:ED:6D:51:DC:39:18:2E:69:54
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/nM_etl2WCoja6avtbVHcORguaVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.0.0-79.174.2.255
185.231.234.0/24
Signature Algorithm: sha256WithRSAEncryption
67:90:66:09:e1:e4:10:ae:ea:82:45:48:d0:d6:8f:65:d8:80:
40:be:4b:3b:ea:17:1d:70:62:00:87:a4:5a:71:de:e7:5d:44:
ef:a0:b4:78:bb:83:a0:b7:5e:3b:a5:ed:73:24:ad:64:f6:27:
28:26:1d:e6:d8:95:58:e7:25:36:b6:0d:dc:2e:cf:b4:41:8d:
0f:56:3b:b1:fc:0a:cf:82:71:5e:18:2c:ec:67:a5:ae:98:bc:
59:06:7e:f7:31:a5:15:3d:b0:56:10:b8:0e:fb:f0:9c:47:73:
d4:d3:12:0c:b4:d7:2f:65:c6:c1:1b:87:89:cc:c1:38:01:22:
04:f0:b2:15:0e:3a:11:d1:4f:d4:05:98:bd:f7:a7:8d:dc:90:
94:75:d7:d3:1f:d7:23:b9:2a:c2:07:80:cb:84:4d:a6:79:17:
b8:9b:d3:5d:6a:73:3c:13:dc:36:b7:38:6e:db:82:ea:31:7a:
c8:15:8a:d9:38:60:4f:39:d0:4c:8e:58:c4:f4:55:9c:4e:1f:
ee:6f:ac:29:59:d2:94:83:d2:4c:65:f9:e3:1b:0d:a9:b0:f6:
f8:76:d2:93:85:19:27:d4:2b:ab:06:b7:cc:c8:3d:aa:bf:f2:
e6:1c:f7:99:ab:08:e3:db:cf:c0:29:16:3f:99:d5:62:0e:bb:
d2:53:d3:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:13 2025 by rpki-client