Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/N9vNif2H5hKREG99HGyMGDkm2CQ.roa
File: N9vNif2H5hKREG99HGyMGDkm2CQ.roa (raw, json)
Hash identifier: PdtFZgVQKJLHoaR+AAHz5YVey/pwaemzvAhPyxCTA1M=
Subject key identifier: 37:DB:CD:89:FD:87:E6:12:91:10:6F:7D:1C:6C:8C:18:39:26:D8:24
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD2497CDD0A2F6CC6B69F9FC5B6C81
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/N9vNif2H5hKREG99HGyMGDkm2CQ.roa
Signing time: Thu 02 Jan 2025 07:48:54 +0000
ROA not before: Thu 02 Jan 2025 07:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149440
IP address blocks: 216.173.64.0/24 maxlen: 24
216.173.65.0/24 maxlen: 24
216.173.66.0/24 maxlen: 24
216.173.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:24:97:cd:d0:a2:f6:cc:6b:69:f9:fc:5b:6c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37dbcd89fd87e61291106f7d1c6c8c183926d824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:0e:9a:e8:92:bb:81:d1:55:95:76:5e:ab:
8c:cc:38:3f:29:c8:05:22:38:4e:11:90:d1:d1:7a:
20:10:8f:02:98:ea:52:44:d1:e9:9d:cd:6e:12:70:
b5:c6:be:07:65:c7:5c:00:fe:dd:54:4c:93:3b:1e:
de:ba:63:e9:5b:5a:ea:68:b2:f4:2d:6e:a3:63:aa:
c4:0d:3e:07:92:65:c9:3f:ba:2e:6e:e0:eb:c1:6b:
23:fd:7e:0a:b8:fe:2e:2a:db:94:2d:80:d9:50:73:
4f:ba:83:a7:a9:27:8b:91:c1:ff:53:1a:54:ef:f7:
b3:30:fc:a0:7e:f6:49:50:a2:2d:2e:91:49:a4:4d:
1d:b9:b7:96:29:56:e2:94:1c:9d:7c:2b:36:af:1a:
4b:0f:44:a3:e8:cd:0c:b6:dc:e8:2e:b4:19:2e:e7:
9d:52:86:ab:f1:99:f0:ff:9e:6b:91:89:cf:c8:91:
66:e1:90:fa:1f:b0:a9:7e:94:5d:27:14:7d:20:a7:
77:be:34:03:9b:cb:d6:f1:9a:d6:87:b7:e0:fe:0a:
0d:5e:9c:61:ec:e3:05:37:7b:25:9b:5f:3f:dc:84:
f3:a8:16:6e:a2:5d:a9:6c:ce:23:3e:ab:32:aa:be:
21:db:94:e9:03:aa:ae:c7:05:8b:a2:1e:3d:ad:b7:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:CD:89:FD:87:E6:12:91:10:6F:7D:1C:6C:8C:18:39:26:D8:24
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/N9vNif2H5hKREG99HGyMGDkm2CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.173.64.0/22
Signature Algorithm: sha256WithRSAEncryption
39:4c:42:aa:2e:d5:1d:d6:ba:10:93:99:7b:c2:5a:31:43:ae:
f2:cd:7d:5e:1d:6a:9f:d8:62:34:95:78:2b:40:d3:ab:b5:2f:
86:77:01:bc:9e:c5:51:59:7a:2c:f7:28:43:02:35:ae:fc:af:
31:43:4c:cd:42:da:fa:c2:ef:9c:1d:1a:f4:e6:7f:02:bf:7f:
5f:77:7d:92:11:25:44:95:70:7f:2e:21:e2:cc:6a:f6:d1:ea:
fd:53:7d:83:50:67:13:52:60:1d:8e:1d:da:77:95:80:56:5b:
d7:6f:24:ba:b9:17:2c:ca:0c:45:00:90:93:5e:14:ec:fd:ae:
c6:57:7a:4a:b9:ca:8b:47:35:97:ca:cb:9d:21:08:94:8b:f6:
93:3b:5b:2f:7a:f6:2d:a8:fc:51:c3:79:01:89:cd:0c:aa:44:
9c:df:6f:e8:c8:16:29:fe:7e:1a:8a:c9:79:61:89:f6:39:2e:
5a:70:44:68:68:ce:45:22:77:40:8f:49:da:43:e3:2e:8c:69:
78:a4:e6:fc:bf:e5:60:f7:62:37:91:c4:5c:8f:6b:7a:b7:8f:
fd:79:96:e9:c2:3c:03:93:3b:84:c6:d3:27:7a:65:48:d2:92:
90:62:52:30:24:30:8b:0f:88:1b:d6:2f:f0:7a:62:f0:56:4e:
99:70:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:34:37 2025 by rpki-client