Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/Nxxg0dCY9RpxVkgPQtoMd6cIrMM.roa
File: Nxxg0dCY9RpxVkgPQtoMd6cIrMM.roa (raw, json)
Hash identifier: ttFZcZbUlYysLMeNtG7I8r84cm7iWbYdZB5AAwbaZ+c=
Subject key identifier: 37:1C:60:D1:D0:98:F5:1A:71:56:48:0F:42:DA:0C:77:A7:08:AC:C3
Certificate issuer: /CN=4171e5ad27a51f64eec84287b2b04bd6fd2028f6
Certificate serial: 018571308F93160074079F9DD90154AD515F
Authority key identifier: 41:71:E5:AD:27:A5:1F:64:EE:C8:42:87:B2:B0:4B:D6:FD:20:28:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXHlrSelH2TuyEKHsrBL1v0gKPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/Nxxg0dCY9RpxVkgPQtoMd6cIrMM.roa
Signing time: Mon 02 Jan 2023 06:34:45 +0000
ROA not before: Mon 02 Jan 2023 06:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44632
IP address blocks: 194.8.95.0/24 maxlen: 24
194.8.94.0/23 maxlen: 23
194.8.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:8f:93:16:00:74:07:9f:9d:d9:01:54:ad:51:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4171e5ad27a51f64eec84287b2b04bd6fd2028f6
Validity
Not Before: Jan 2 06:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=371c60d1d098f51a7156480f42da0c77a708acc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:d8:e2:05:b0:e7:ba:af:32:83:3d:d1:43:
7d:d0:e3:a7:7e:bd:f6:83:51:9a:3e:95:44:4c:eb:
f0:b8:30:2a:21:9e:8d:39:53:ce:ae:5d:da:aa:db:
ad:f4:7c:a7:8d:d3:c1:2b:bd:30:e5:f4:b6:26:79:
bb:98:40:3f:9d:15:7c:65:ef:f3:a7:c5:11:d4:a1:
6d:6e:3e:91:bf:72:42:d0:95:a1:f8:35:1e:aa:36:
66:14:8d:1d:d9:de:77:02:13:36:31:4d:9d:35:f6:
ca:7d:3b:a7:e9:6c:98:5d:61:58:4a:6e:cb:18:77:
7e:1e:3e:43:ee:42:22:b3:b8:f0:25:a6:fb:8a:26:
15:eb:c2:20:38:e6:23:67:58:b6:50:e8:78:ec:aa:
1d:24:fd:39:04:93:c1:5b:59:09:92:9f:5c:ff:9e:
d3:ab:ac:7e:e3:74:7d:91:b6:86:5c:3d:d4:35:c5:
eb:cb:ec:80:17:47:0c:5a:1f:7c:fa:e6:0d:8d:c9:
80:77:c4:ea:cc:4e:17:8f:a1:15:0c:ba:55:68:71:
0d:8c:5b:68:e9:a3:70:ef:e1:35:93:3a:2a:3a:db:
99:e1:ab:99:b9:94:72:44:07:e0:c9:ed:14:6d:83:
86:99:75:73:97:f0:3c:76:ff:fc:d2:2a:81:75:2d:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:60:D1:D0:98:F5:1A:71:56:48:0F:42:DA:0C:77:A7:08:AC:C3
X509v3 Authority Key Identifier:
keyid:41:71:E5:AD:27:A5:1F:64:EE:C8:42:87:B2:B0:4B:D6:FD:20:28:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXHlrSelH2TuyEKHsrBL1v0gKPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/Nxxg0dCY9RpxVkgPQtoMd6cIrMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/QXHlrSelH2TuyEKHsrBL1v0gKPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.94.0/23
Signature Algorithm: sha256WithRSAEncryption
78:97:5b:d6:c0:e1:2d:b4:e2:ee:5d:33:6a:ea:57:10:a3:65:
05:94:28:95:37:d5:3d:5d:62:14:34:e5:d9:56:c1:3a:00:84:
15:4a:e3:f7:55:34:36:af:e9:02:92:d3:82:85:6f:15:62:94:
b9:57:31:d7:08:2b:3b:52:99:96:3b:92:81:49:25:4f:7d:a0:
f5:a5:9f:53:02:6c:d0:c3:9e:6d:b3:4d:d6:e0:ea:d4:c1:8b:
8a:b2:78:d6:c6:a0:3c:75:2e:bf:ae:14:1b:77:92:40:2f:5a:
b3:73:68:09:b1:e4:c9:03:5f:ca:00:08:71:ed:a3:75:c7:88:
c3:65:d8:93:a0:a9:2e:c1:02:ee:65:a6:c8:45:56:11:07:f3:
54:c1:69:4d:90:85:24:0b:37:1e:e8:ea:98:90:5e:49:0d:4b:
ad:ea:bd:c7:77:91:4f:c3:1c:40:94:44:a6:70:26:b8:ab:99:
d0:6c:53:ff:12:56:ad:e1:7c:b2:b6:1d:3d:cb:f0:72:e1:f3:
27:b7:6a:aa:60:10:07:91:80:0c:33:67:1c:9e:05:b9:ed:94:
d0:43:77:b3:64:4d:88:dc:7f:77:b1:73:a0:92:9c:e3:b1:1d:
e9:80:6e:e2:2b:44:d8:08:d2:b4:56:8e:55:06:45:48:ce:fc:
93:b5:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:20 2025 by rpki-client