Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/nOENZbUxNq3eq-s9SECGQEbXnuw.roa
File: nOENZbUxNq3eq-s9SECGQEbXnuw.roa (raw, json)
Hash identifier: F2owFgzI9a2N+l0Clmnt+dY07l0Vx96N9Qbl37r4eF4=
Subject key identifier: 9C:E1:0D:65:B5:31:36:AD:DE:AB:EB:3D:48:40:86:40:46:D7:9E:EC
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0188F6792FB0BAE64245EF161DC3C625F3C1
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/nOENZbUxNq3eq-s9SECGQEbXnuw.roa
Signing time: Mon 26 Jun 2023 06:51:57 +0000
ROA not before: Mon 26 Jun 2023 06:51:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 171.22.144.0/24 maxlen: 24
171.22.146.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
185.235.71.0/24 maxlen: 24
95.111.128.0/20 maxlen: 20
95.111.144.0/20 maxlen: 20
185.149.12.0/23 maxlen: 24
185.149.13.0/24 maxlen: 24
185.149.14.0/23 maxlen: 24
89.46.96.0/22 maxlen: 24
89.46.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:79:2f:b0:ba:e6:42:45:ef:16:1d:c3:c6:25:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 26 06:51:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce10d65b53136addeabeb3d4840864046d79eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:df:8c:9c:fc:bd:d9:20:42:1a:e4:8c:60:
04:67:72:77:01:9b:c0:3d:54:41:96:1a:bd:aa:a3:
37:b8:e7:45:e9:7b:7b:8d:4a:f3:f8:c8:72:91:93:
d2:52:62:67:d8:17:35:fb:7b:e3:df:e7:a3:a4:50:
80:d8:e0:d5:40:22:57:10:d5:7f:61:0d:c1:78:77:
72:f0:4a:12:5b:ce:da:8d:d2:5c:56:40:93:9a:7c:
b1:09:47:a1:12:21:10:de:66:52:fd:ba:fd:e2:65:
da:f7:ab:35:da:1c:f6:da:67:96:b8:2b:dd:94:d0:
84:02:66:a1:0a:86:15:c1:cf:10:c1:ab:8a:4f:00:
f6:c6:09:ac:84:e3:52:34:7d:5a:b4:43:da:07:e9:
16:a8:68:86:70:75:07:a2:2c:5c:16:7a:e5:d8:3a:
cf:de:89:c1:b2:15:e9:10:fb:29:e9:ea:00:e7:f8:
85:4c:2e:73:dc:87:e9:9b:98:f1:d7:46:d8:18:5b:
ae:7d:17:90:fd:3e:82:e4:8d:93:e4:e1:13:b5:bc:
c7:70:a0:a1:e4:df:b3:fa:10:66:ad:a4:66:74:86:
59:9e:e4:bf:99:ba:f2:a1:5b:e0:6e:21:cd:8c:8c:
6e:f6:f5:49:f7:35:cd:ac:ef:fd:41:d4:db:ee:7f:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E1:0D:65:B5:31:36:AD:DE:AB:EB:3D:48:40:86:40:46:D7:9E:EC
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/nOENZbUxNq3eq-s9SECGQEbXnuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/22
91.103.120.0/21
95.111.128.0/19
171.22.144.0/24
171.22.146.0/24
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
47:94:e3:1f:53:d4:a0:56:31:4d:84:71:07:61:05:ca:59:06:
4b:ba:85:84:75:9a:40:b0:81:15:74:b8:f4:c2:15:7d:ff:3a:
6c:24:36:f3:dc:f4:36:e8:54:8b:ab:eb:b2:88:64:02:3a:89:
b6:bd:fb:d9:d8:5d:99:95:7d:09:ea:f7:32:0b:b8:c5:a3:98:
a6:4d:c8:88:c2:8c:0b:68:48:a5:78:b6:7c:33:d2:20:62:7c:
b1:40:27:f5:1b:68:c7:6b:8c:70:e5:32:f2:a7:c3:6e:e6:d2:
21:c0:e0:54:65:8a:6a:6f:6f:a4:23:54:60:a0:1e:eb:a2:77:
95:98:c0:8b:c5:22:a0:ad:9d:dd:5a:ba:c3:8d:92:e0:a0:0e:
3b:78:f6:45:52:d8:de:0d:90:1f:42:5f:e4:62:bb:4c:c2:1a:
65:f5:b4:be:41:4d:a3:5a:23:68:43:9f:86:96:94:2b:04:0e:
a2:99:41:cb:f0:d3:ff:b2:57:a9:fe:a7:d4:63:ac:e8:08:7b:
a0:aa:22:cd:2f:d5:6e:bb:85:f6:d3:c9:a9:28:8c:96:64:5c:
6d:3a:38:c9:7f:73:89:f1:12:6d:22:f8:34:f0:23:81:86:6a:
a3:52:dc:89:8f:0a:29:57:ab:1b:c6:00:c7:61:82:37:c0:89:
60:97:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:09:18 2025 by rpki-client