Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/NH99_Parr6i87GqyKHm971OOvUA.roa
File: NH99_Parr6i87GqyKHm971OOvUA.roa (raw, json)
Hash identifier: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=
Subject key identifier: 34:7F:7D:FC:F6:AB:AF:A8:BC:EC:6A:B2:28:79:BD:EF:53:8E:BD:40
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC416FF1151B5942FBBE2BDE674ED1
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/NH99_Parr6i87GqyKHm971OOvUA.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211163
IP address blocks: 94.188.180.0/23 maxlen: 23
94.188.180.0/24 maxlen: 24
94.188.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:41:6f:f1:15:1b:59:42:fb:be:2b:de:67:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347f7dfcf6abafa8bcec6ab22879bdef538ebd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:c4:2a:7c:89:d1:47:48:c8:aa:0b:5f:85:
5e:e7:5c:b1:63:0e:08:59:7b:9a:0b:64:16:b6:06:
81:4e:03:f9:91:ed:b8:e0:52:4e:a1:a8:5b:f6:6f:
35:94:a8:c7:bf:e1:14:d6:28:e1:be:a5:c6:8b:5b:
b8:19:3c:a1:a1:ce:f6:9c:7f:72:3c:19:0b:0b:b4:
46:03:9e:5f:a3:38:3b:54:19:0d:42:28:87:3c:a6:
18:ad:be:ed:bd:b2:9e:09:c0:0f:fc:53:b7:43:5a:
39:8d:8c:68:4a:e2:62:81:81:60:04:26:88:ac:2d:
10:ad:0c:93:22:6b:2c:eb:74:9b:96:43:1c:9c:0e:
32:78:5c:d1:38:be:3b:a4:1e:82:f5:d8:95:3b:15:
70:47:3e:d5:69:31:25:d4:0f:9d:35:a1:78:fa:dd:
a4:18:54:d4:a1:d4:92:32:a5:bd:9c:94:ba:b3:72:
f6:ba:a7:87:14:aa:8e:42:9c:df:8a:50:4a:87:2a:
f1:48:d0:57:c1:a3:80:c0:3b:9d:8e:88:c2:e0:19:
ad:48:41:0c:49:53:20:1f:fb:14:13:c5:d6:2d:19:
10:e6:ee:ed:97:f7:8e:19:d0:44:46:ea:90:b9:2b:
da:83:0c:04:45:fb:26:77:9c:1d:d2:dc:44:19:71:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:7D:FC:F6:AB:AF:A8:BC:EC:6A:B2:28:79:BD:EF:53:8E:BD:40
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/NH99_Parr6i87GqyKHm971OOvUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.180.0/23
Signature Algorithm: sha256WithRSAEncryption
89:37:2a:5a:65:50:9d:a0:3e:b0:57:5e:5b:f5:e7:31:78:58:
cb:56:91:03:3e:07:49:9b:74:4c:c1:a7:77:e3:eb:a5:49:a5:
64:de:ff:1f:17:31:52:ae:5c:11:3d:dd:5d:4a:e5:4b:77:56:
70:c5:55:58:2e:16:2b:a3:29:bb:f4:cb:43:f1:20:cf:16:f1:
e7:60:2f:7e:5c:32:93:09:c2:b4:cb:4b:4f:50:ca:6c:37:23:
ad:ee:83:d4:4d:cf:26:81:8c:71:0a:d1:9b:97:6e:85:e9:4f:
d0:ca:b3:77:84:84:26:82:9b:87:97:4f:35:e0:36:ea:16:2a:
e7:0c:17:cc:51:3b:d9:99:1c:2d:60:ee:ed:a6:f1:30:c5:bf:
ab:64:9a:7b:14:3a:08:3a:44:62:78:95:bb:08:50:ca:67:b2:
53:85:37:72:6b:29:59:eb:99:68:6c:31:b8:84:d6:5d:88:61:
4c:ee:46:29:12:e4:eb:18:27:84:d6:54:4b:ee:8b:2c:e6:c3:
04:5d:33:f8:65:0c:f3:e5:46:10:0c:fd:1a:3f:0f:37:65:cb:
47:a2:2a:7a:74:71:79:59:3d:d5:52:97:ef:af:76:d0:8a:5c:
d5:52:50:63:fd:1c:c4:3b:38:5f:d5:4d:76:7b:c8:9c:dc:02:
0f:cb:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:00 2025 by rpki-client