Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/NZtm0QxaYLC2l9mcRivMCHuA3bE.roa
File: NZtm0QxaYLC2l9mcRivMCHuA3bE.roa (raw, json)
Hash identifier: 77Xp/uyrnEgiwhJt3OQgiQ5QYxBnCBz5wUqAslnihHE=
Subject key identifier: 35:9B:66:D1:0C:5A:60:B0:B6:97:D9:9C:46:2B:CC:08:7B:80:DD:B1
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 01942444B2D97081659F8FDC8D0E98F94BCA
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/NZtm0QxaYLC2l9mcRivMCHuA3bE.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
176.53.146.0/23 maxlen: 23
185.235.230.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e82::/32 maxlen: 32
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b2:d9:70:81:65:9f:8f:dc:8d:0e:98:f9:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=359b66d10c5a60b0b697d99c462bcc087b80ddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:cf:a2:8a:1d:9a:f8:85:7e:78:51:c0:9f:
da:84:57:b9:a6:ae:17:2d:5c:9b:96:6b:f0:54:7b:
81:64:42:2f:e7:0c:27:64:25:0d:91:fc:46:74:cd:
7e:cd:ba:ed:c2:02:c1:47:2d:bf:08:11:42:ef:81:
a3:d1:a9:c8:06:98:fd:73:a5:89:a9:cc:33:8a:82:
ff:e8:a5:c5:2a:b1:31:2d:d6:e8:31:07:c5:d5:e1:
cc:ff:61:77:da:c1:f7:80:2f:4f:24:bb:c7:52:ac:
7a:9d:1c:ac:49:03:ff:0e:59:35:bc:f2:10:a1:de:
91:0c:67:33:f0:8a:24:7b:ad:2e:ee:06:af:80:77:
67:37:e2:18:53:4c:a3:a0:96:28:8d:df:f2:1d:c5:
ba:76:3d:23:9c:24:86:ba:30:12:d9:94:39:75:e5:
68:fc:d1:db:74:41:3d:69:92:eb:46:8f:f1:f4:a7:
79:5c:d0:d3:c9:11:bc:22:39:f4:a1:5d:33:2b:76:
b2:56:db:d8:b6:f7:4e:f0:e2:f6:93:b0:dc:f2:93:
08:2d:60:29:b4:f4:81:69:50:e7:aa:03:07:2d:da:
07:7b:f5:d2:57:8a:6e:60:ea:d2:08:f6:d5:62:fc:
7b:d3:fb:37:03:f1:f3:72:c9:f5:56:e2:5b:20:54:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9B:66:D1:0C:5A:60:B0:B6:97:D9:9C:46:2B:CC:08:7B:80:DD:B1
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/NZtm0QxaYLC2l9mcRivMCHuA3bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
94.247.137.0/24
176.53.146.0/23
185.235.230.0/24
IPv6:
2001:678:e30::/48
2a0a:2e80::/32
2a0a:2e82::/32
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:a7:f4:b7:9f:fe:84:f7:c5:f3:60:08:07:a6:84:b1:4f:98:
1d:d3:0e:7d:25:94:17:7c:4d:ad:c1:0c:38:24:89:05:db:d8:
96:78:9f:da:ff:b1:fb:18:cc:81:c7:da:24:23:c0:86:5f:6e:
6f:11:83:d2:f5:e1:ab:81:dd:9e:5a:8c:ba:80:51:c6:27:e5:
c3:98:f6:6b:20:7a:95:26:df:66:78:49:0d:16:b2:34:3e:c1:
e2:f1:67:d4:1e:8a:9b:c2:0f:58:84:76:4d:55:a3:85:ce:ed:
2e:84:65:56:cc:fa:96:18:d9:ec:e2:dd:ba:13:b8:a2:5e:d6:
15:2f:ea:6c:03:2a:b4:38:0d:5b:c0:5d:4b:2e:35:74:f0:53:
0a:9d:56:c9:96:fe:71:e2:9e:6a:b9:df:5d:d3:8c:17:bb:c9:
74:c9:d2:4b:0b:3c:e3:55:7b:5a:42:06:4d:ef:17:c5:67:3f:
0d:77:45:66:9a:9d:3e:68:f4:39:83:38:01:7c:05:c8:43:8f:
cd:b2:f6:4a:21:82:69:d8:e3:4f:e3:b3:77:54:2f:00:2d:94:
c0:79:60:38:07:00:72:66:05:af:1d:19:6a:cd:13:b1:eb:6f:
9e:44:47:64:4e:12:6d:f1:a7:13:fb:94:91:73:c7:63:31:08:
9d:fc:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:14:39 2025 by rpki-client