Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/na4Lbi-BBMu8YzzzK7yDbeF5Ke0.roa
File: na4Lbi-BBMu8YzzzK7yDbeF5Ke0.roa (raw, json)
Hash identifier: ihSRwNMfOysTBdt1h1j95T87NVy0fLbUyViGitjJtWc=
Subject key identifier: 9D:AE:0B:6E:2F:81:04:CB:BC:63:3C:F3:2B:BC:83:6D:E1:79:29:ED
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0195AD94919048CD264ED4AC1A85AB2003F2
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/na4Lbi-BBMu8YzzzK7yDbeF5Ke0.roa
Signing time: Wed 19 Mar 2025 08:45:49 +0000
ROA not before: Wed 19 Mar 2025 08:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213060
IP address blocks: 217.179.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:94:91:90:48:cd:26:4e:d4:ac:1a:85:ab:20:03:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 19 08:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dae0b6e2f8104cbbc633cf32bbc836de17929ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:ee:6f:2b:e8:92:42:a1:dd:af:f8:eb:b0:
ed:3d:ac:47:51:1a:7e:58:86:9d:46:e5:f5:5f:f5:
3f:1e:e1:0f:71:16:6e:f3:08:a1:b1:dd:a5:9d:7d:
93:de:86:45:18:de:f0:a6:80:8f:36:8b:02:7b:95:
09:15:a6:82:89:9b:1a:ff:dd:91:bf:90:87:f3:b2:
d0:bb:e2:dc:2f:48:75:1c:d2:70:02:85:fe:9d:2b:
09:25:4d:14:dc:a6:3a:87:cd:c4:91:99:5c:f1:8e:
77:3b:93:79:bb:fc:16:6b:4d:46:6a:43:c3:97:e9:
c4:93:dc:92:de:1f:38:06:28:86:55:00:9a:28:f8:
a4:2e:bd:5d:4a:8e:b9:f1:96:a3:b1:1a:5a:85:c4:
04:e8:2a:a7:24:fe:26:13:7d:ef:f1:65:47:e7:42:
b2:f8:d2:3f:09:4a:ac:cc:b5:d9:d3:73:70:c0:49:
07:15:ef:5c:ac:9d:ac:2c:8c:8e:44:06:6b:ba:a2:
e4:f2:3f:26:57:1e:20:a2:b5:65:cd:6d:c1:a7:8d:
bc:a5:54:02:47:d5:81:df:68:17:a5:99:3c:8f:6b:
38:dd:83:d7:dd:0b:b8:b0:83:b1:98:57:f6:9e:60:
38:bb:b6:a5:34:f9:e3:90:a6:2d:1f:82:8a:25:02:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:0B:6E:2F:81:04:CB:BC:63:3C:F3:2B:BC:83:6D:E1:79:29:ED
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/na4Lbi-BBMu8YzzzK7yDbeF5Ke0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:42:17:38:0c:df:7b:b2:df:3e:db:84:a3:6e:1c:76:67:da:
51:d6:47:df:9b:12:67:53:ff:c4:08:b7:5b:4d:c4:72:7d:a8:
2f:5d:eb:cb:c7:5d:e5:83:46:2e:45:f0:a4:3b:5f:70:bf:33:
40:e2:95:f9:01:7a:82:3d:61:91:3d:6d:bf:44:50:d6:75:78:
ab:62:d8:ae:b9:f8:7e:9d:89:81:04:c8:95:97:6d:3a:83:39:
5c:67:35:61:5a:a1:6d:ab:c5:fb:ee:77:8f:49:eb:3a:0b:db:
2c:f3:c0:02:78:58:51:5a:d9:3f:2d:45:36:7c:24:5f:8c:b9:
cc:75:ab:77:c7:85:ee:d8:26:d3:a7:4a:53:00:42:eb:1c:ee:
44:62:4f:e7:f7:f4:b9:14:23:c2:48:1c:1e:0a:82:a0:2a:d5:
ab:53:63:eb:55:b5:ea:da:7d:61:02:31:27:3d:01:89:36:35:
6a:b0:d4:eb:15:89:24:aa:af:5f:af:1f:37:c1:ba:95:88:7d:
aa:b2:38:b1:1a:2f:6c:c7:b7:6b:1a:47:a7:2d:a2:e8:a2:02:
01:ac:8c:15:a4:c7:f0:0c:d7:e9:3e:9a:44:5a:b6:c7:ed:e1:
6e:9e:01:ba:ff:8c:10:a0:6c:55:29:58:79:f9:2d:c8:89:52:
0a:6b:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:52 2025 by rpki-client