Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/NPXUmSNv9DcmfxYJjRLgDWkkcg8.roa
File: NPXUmSNv9DcmfxYJjRLgDWkkcg8.roa (raw, json)
Hash identifier: 49T8ihwNVQI/RyyD+KqmBOej4i4Z/aMw0Y7nYL/QNAw=
Subject key identifier: 34:F5:D4:99:23:6F:F4:37:26:7F:16:09:8D:12:E0:0D:69:24:72:0F
Certificate issuer: /CN=2bcfa62eca5484f39c749edf181ad99eaa02d4f4
Certificate serial: 01856CC15B97517C009B6D0E99FB625135BE
Authority key identifier: 2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/NPXUmSNv9DcmfxYJjRLgDWkkcg8.roa
Signing time: Sun 01 Jan 2023 09:54:49 +0000
ROA not before: Sun 01 Jan 2023 09:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206207
IP address blocks: 185.190.208.0/22 maxlen: 24
2a0a:d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5b:97:51:7c:00:9b:6d:0e:99:fb:62:51:35:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcfa62eca5484f39c749edf181ad99eaa02d4f4
Validity
Not Before: Jan 1 09:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34f5d499236ff437267f16098d12e00d6924720f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:45:a5:c6:bd:2f:a1:1b:ff:d7:70:d1:b2:
b5:82:b2:ed:22:5b:92:14:68:fc:bc:b0:27:bb:55:
a0:be:b5:a7:85:d6:34:53:db:4e:37:15:27:de:79:
69:f0:d6:e6:c6:05:9b:fd:ec:ce:b0:22:10:f9:b2:
6c:43:0d:c1:db:cb:1d:86:25:26:13:a0:fb:4e:1e:
00:d9:c5:16:b8:22:ec:30:d8:e7:2f:3a:16:ed:64:
85:04:b0:65:0b:58:8a:22:30:a6:92:60:7d:e3:0e:
36:52:6a:cc:a0:d8:f7:95:02:a8:b8:4d:de:c5:38:
cf:1e:9b:96:11:bb:50:b1:fe:08:c1:73:fc:ef:a3:
b3:d2:70:09:73:1f:96:30:cb:fa:58:8d:77:c3:02:
17:f2:f7:a6:5e:7e:1d:17:9d:aa:91:c6:0f:96:c6:
18:6c:7a:97:fe:c5:9b:02:cd:65:ac:38:aa:f3:b4:
2d:2a:80:a0:9e:11:42:0a:00:b5:78:bc:25:62:96:
a1:48:a3:53:3a:ca:9d:3b:6e:af:64:28:e6:ec:21:
c8:a5:7f:c3:30:43:62:89:d6:6b:50:84:8d:cb:c5:
f5:26:a7:f7:56:ef:b0:e0:f3:0b:0c:1e:7c:7c:9c:
fd:71:c3:ef:79:8c:ae:b6:3c:4d:56:31:16:d8:c7:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:D4:99:23:6F:F4:37:26:7F:16:09:8D:12:E0:0D:69:24:72:0F
X509v3 Authority Key Identifier:
keyid:2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/NPXUmSNv9DcmfxYJjRLgDWkkcg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.208.0/22
IPv6:
2a0a:d40::/32
Signature Algorithm: sha256WithRSAEncryption
8b:7b:8d:2b:3d:3e:2a:e2:cf:88:88:7a:fb:c6:78:e8:01:5c:
c4:b6:41:ba:de:89:89:16:e6:85:c7:67:46:80:42:b7:c5:ca:
dc:46:04:af:d1:c2:fe:21:09:8e:bc:eb:0d:54:54:3a:d6:2c:
aa:05:c9:71:9e:24:4e:71:d2:e7:15:7f:be:82:97:29:73:00:
7a:a5:f0:46:95:39:39:09:d1:1f:0e:ef:3e:82:d8:b7:ac:9e:
6c:72:ad:4e:e4:9a:fb:f0:80:54:7c:ee:2d:4f:c9:31:4b:d8:
c7:8e:b7:a3:ca:c1:d6:49:49:c1:5f:e6:a2:13:a1:5a:be:8c:
d8:9b:90:79:14:3b:45:09:91:2e:51:9c:27:08:93:2b:2e:4e:
d2:ce:1d:98:15:73:ea:05:a2:c9:cf:01:48:10:63:0d:1c:05:
07:04:83:63:fb:4b:22:b3:41:78:d5:4e:c0:b9:44:4f:02:23:
1e:68:bb:dd:eb:94:27:45:95:37:37:b6:6a:e7:bc:67:86:26:
3b:a0:f5:25:b8:4c:5a:44:29:67:f0:f5:58:00:71:cd:d6:94:
29:68:ba:a4:fb:d2:4e:31:6e:8a:8d:4f:4f:54:09:07:19:f0:
b8:55:00:80:bf:a5:4d:d5:32:4f:45:19:03:4d:8c:d5:ec:e0:
ff:ea:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:09 2025 by rpki-client