Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/9NNSEhajneEgbt66V0EkEE6XolA.roa
File: 9NNSEhajneEgbt66V0EkEE6XolA.roa (raw, json)
Hash identifier: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=
Subject key identifier: F4:D3:52:12:16:A3:9D:E1:20:6E:DE:BA:57:41:24:10:4E:97:A2:50
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 019421B1A1C43087D88177EA036BA5D127AF
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/9NNSEhajneEgbt66V0EkEE6XolA.roa
Signing time: Wed 01 Jan 2025 11:47:56 +0000
ROA not before: Wed 01 Jan 2025 11:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 194.8.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a1:c4:30:87:d8:81:77:ea:03:6b:a5:d1:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4d3521216a39de1206edeba574124104e97a250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:71:c8:34:d0:46:18:67:c1:e2:22:a6:45:
bc:45:8b:9e:4e:d7:fc:ca:a0:e2:c8:d8:c3:95:e9:
96:5d:e2:7d:91:f8:df:cb:d1:bb:59:0a:2a:79:43:
6c:f3:1f:d2:a1:b8:4e:25:6f:39:56:5e:63:45:cd:
cc:74:12:3c:01:90:0a:c1:98:32:08:ef:92:7a:c7:
30:96:53:b6:a3:62:95:3a:10:fb:b6:a0:6f:4c:d4:
ef:6f:16:07:83:e4:17:6a:d8:9a:8e:fc:ce:26:86:
1e:1f:86:8d:28:11:0b:26:0a:6d:36:79:c7:47:0a:
2c:fe:55:f4:f0:68:43:a9:68:de:f6:09:43:f0:ca:
c2:f7:c7:1c:c1:f5:8c:20:88:6f:0c:16:84:71:96:
28:13:b6:4d:39:a6:ac:31:45:d3:be:78:ab:40:73:
0e:c2:d0:c7:eb:bf:ec:5d:56:86:94:e3:18:b8:42:
5f:21:5d:d2:39:ac:6b:ca:6a:bd:22:31:53:70:20:
da:50:be:bb:e7:f4:ce:41:e4:06:93:51:dc:75:79:
c2:20:d0:41:07:97:4e:0c:67:40:9f:e0:63:dd:e4:
96:aa:4c:d1:a1:9b:bc:a0:45:e2:48:62:69:70:b2:
6f:05:5d:56:97:d5:57:79:ac:11:15:4e:b7:13:67:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:52:12:16:A3:9D:E1:20:6E:DE:BA:57:41:24:10:4E:97:A2:50
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/9NNSEhajneEgbt66V0EkEE6XolA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.123.0/24
Signature Algorithm: sha256WithRSAEncryption
30:37:0e:48:0a:0f:ff:19:b1:bd:fd:6a:0a:b6:7f:a2:df:35:
db:a9:82:4d:e0:0b:49:89:13:09:e2:49:9f:83:2b:e0:a3:0e:
e5:89:5c:fa:00:ea:bd:51:bc:44:49:b6:b3:c2:75:0b:ce:08:
fd:c1:54:16:0a:63:31:2a:ec:dd:1d:14:50:cb:b0:98:a4:d8:
e3:c7:90:4c:f7:9d:9e:fc:b0:b2:90:ef:bb:bc:c0:fc:e4:36:
e0:9d:c6:6f:f2:0a:a6:30:e8:20:eb:c8:ef:6c:c4:d1:84:77:
57:61:b0:36:19:b6:8e:ac:0a:e6:95:1c:d3:e8:5d:14:13:b6:
86:ad:22:76:6d:2d:84:8e:b9:e4:ce:01:25:38:dd:91:41:bd:
7c:2a:c3:95:ba:0a:d3:6a:bf:3e:2b:6b:89:a9:03:df:44:07:
f8:0b:9d:ee:5e:2a:52:82:6d:31:6d:8d:14:da:2f:b1:e0:0a:
89:70:c0:a6:3c:2a:66:ae:8e:13:7e:70:3b:ca:03:54:b7:61:
05:f9:01:f6:33:78:54:55:ad:9e:26:76:c9:95:ef:bd:26:38:
3c:7e:6a:a9:b5:de:c9:18:b6:dd:1a:b0:e7:d1:0e:29:89:d2:
c0:0e:0a:8f:6c:e7:c0:ae:81:35:cb:cc:24:5a:6b:84:4d:2d:
6d:66:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:02:48 2025 by rpki-client