Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa
File: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (raw, json)
Hash identifier: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=
Subject key identifier: 9D:89:A3:36:B6:51:2A:40:4A:31:1B:B2:64:DA:2C:43:EE:9F:23:C9
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019422FC38B616DE22F5D7C1A1071AE612B3
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 194.99.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:38:b6:16:de:22:f5:d7:c1:a1:07:1a:e6:12:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d89a336b6512a404a311bb264da2c43ee9f23c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:ba:43:a1:c3:37:02:d5:0d:bb:6c:58:87:
d0:56:f1:db:52:e2:ad:64:33:ee:2b:9e:01:c0:20:
e2:db:e7:22:a6:3e:c9:73:9b:89:65:73:54:ee:65:
86:03:43:8e:df:1e:59:26:64:47:0f:a6:1c:ef:1e:
3c:14:d4:e3:31:f8:03:12:c3:a1:b5:a3:5f:13:36:
a8:b2:c6:8b:bb:fb:61:e0:1b:d3:25:42:82:9f:3b:
65:41:90:30:67:b0:f1:43:bf:db:85:d7:ff:cf:13:
54:dd:44:83:0b:86:8d:fd:3d:c2:92:75:db:69:86:
45:b1:fc:20:1f:79:d8:e8:f5:5e:cf:dd:9a:9b:b1:
2c:98:6c:a7:af:5b:d4:02:52:02:07:1a:a7:7e:ef:
17:d3:db:6f:87:6e:e1:51:19:f6:7d:8c:1b:7b:fa:
3e:98:25:d9:d8:46:eb:e2:90:53:48:f6:6b:55:21:
7e:f6:69:22:82:f1:61:77:5b:6a:ea:3c:6b:4e:9a:
1e:73:9c:84:88:49:b2:88:48:b7:9b:c2:2b:0b:51:
5e:67:44:11:7d:1f:83:a4:b3:3f:12:17:c5:a4:bc:
90:63:a2:1e:41:04:fe:3b:f6:66:2c:1d:db:a7:48:
7c:f9:af:f5:39:15:3c:54:b9:18:76:b1:5a:cd:80:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:A3:36:B6:51:2A:40:4A:31:1B:B2:64:DA:2C:43:EE:9F:23:C9
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.113.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ee:f3:6d:bc:27:c6:92:4a:e3:51:ac:34:70:91:db:2d:18:
22:0f:3d:8c:39:3a:e8:6f:6d:34:2d:2a:74:f1:1f:c1:60:ef:
f7:bc:e9:ce:ff:35:39:c0:ec:5c:b2:0c:61:7e:9c:0a:2d:28:
6a:d3:23:08:88:01:b6:ca:44:ed:0f:d4:92:6c:9b:e4:3d:8d:
dc:85:a5:d7:ef:c3:9e:2f:06:86:f5:dd:5f:51:6f:d5:18:78:
d8:5f:d8:16:72:3d:47:2c:63:9c:3b:b1:ef:c5:c9:9c:59:c3:
a7:d2:7c:55:1e:0e:45:ec:ff:58:ee:95:a1:3a:cb:80:fe:92:
73:ea:2f:94:83:ca:e7:46:6c:07:db:28:3e:f4:73:4c:67:1d:
02:80:2f:e0:4d:f7:1d:4e:da:a2:d1:90:dc:9d:b6:f7:05:27:
c4:5d:35:91:ae:8b:dc:34:90:07:f9:04:04:4f:f3:ad:b9:3e:
79:71:3d:02:26:70:78:7a:41:cf:28:1a:e7:dd:09:f7:6c:56:
98:87:52:7a:4e:be:35:1b:2f:a2:1b:ce:b4:14:2e:31:13:46:
33:e5:04:33:16:7f:1d:8f:d9:9e:44:e0:3a:72:d9:87:48:cf:
56:a8:eb:e7:04:fe:76:64:1c:29:c2:5c:0d:33:04:76:31:c1:
ca:95:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:09 2025 by rpki-client