Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/NCGF89A-dFBnI8OvKL-KPWLQZwg.roa
File: NCGF89A-dFBnI8OvKL-KPWLQZwg.roa (raw, json)
Hash identifier: VugrzK/2HGydgsF908s4+lEeFyVTThk0odHJDQasj48=
Subject key identifier: 34:21:85:F3:D0:3E:74:50:67:23:C3:AF:28:BF:8A:3D:62:D0:67:08
Certificate issuer: /CN=84c21af41051c80bc65ecb05d97b254f8e04682a
Certificate serial: CBF18F
Authority key identifier: 84:C2:1A:F4:10:51:C8:0B:C6:5E:CB:05:D9:7B:25:4F:8E:04:68:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMIa9BBRyAvGXssF2XslT44EaCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/NCGF89A-dFBnI8OvKL-KPWLQZwg.roa
Signing time: Sat 01 Jan 2022 04:53:10 +0000
ROA not before: Sat 01 Jan 2022 04:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.104.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13365647 (0xcbf18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c21af41051c80bc65ecb05d97b254f8e04682a
Validity
Not Before: Jan 1 04:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=342185f3d03e74506723c3af28bf8a3d62d06708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:7f:08:0b:ad:b3:58:3a:2a:6b:59:55:d5:
28:18:d5:04:ac:6b:da:b8:bb:ba:c2:fd:f2:c8:90:
45:aa:e6:8e:c7:d4:54:e6:cf:67:5b:cb:d7:a7:69:
c7:10:af:25:80:9b:83:d7:b9:c2:ef:b1:c3:eb:95:
0f:a1:bc:37:9c:c3:d2:8c:5e:64:62:aa:d4:87:88:
91:7c:95:91:9f:69:dc:9a:b5:b7:60:9d:91:c7:b7:
a9:06:c4:f5:85:85:ba:a5:54:2f:03:06:95:f8:fe:
f8:99:ce:bc:c7:0c:cd:b4:98:ad:6d:70:f1:86:64:
de:8b:fe:9a:27:8f:e7:84:29:8b:af:9e:09:ed:e9:
4e:64:42:5f:87:29:87:8a:b6:56:aa:1d:ff:c0:ab:
d4:d1:ce:3e:83:c5:79:ef:ad:9e:1a:e7:70:fc:15:
57:be:9f:98:00:8f:79:c7:2b:9a:e4:da:1c:22:7d:
42:4d:fb:3b:94:5e:cc:d6:41:c7:c5:b3:4b:d1:9e:
91:87:58:af:e0:18:eb:90:76:79:c6:94:47:81:08:
d3:aa:21:ae:95:18:f9:03:69:c1:03:68:5b:2f:a7:
2c:1e:42:ad:98:00:b5:16:0c:bc:71:70:c3:99:c4:
d4:96:d7:32:e2:81:30:b8:dc:f0:95:ac:c7:f5:d3:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:21:85:F3:D0:3E:74:50:67:23:C3:AF:28:BF:8A:3D:62:D0:67:08
X509v3 Authority Key Identifier:
keyid:84:C2:1A:F4:10:51:C8:0B:C6:5E:CB:05:D9:7B:25:4F:8E:04:68:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMIa9BBRyAvGXssF2XslT44EaCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/NCGF89A-dFBnI8OvKL-KPWLQZwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/hMIa9BBRyAvGXssF2XslT44EaCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.227.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2d:79:39:d0:9c:35:ad:70:09:d7:0f:48:71:53:96:18:9e:
34:31:23:92:0a:68:1c:92:d9:3a:3d:07:6f:1f:0a:b5:d5:ea:
b0:13:e5:60:f0:e0:ce:f0:f2:a7:7f:fc:f3:4c:59:5d:78:a9:
92:f7:bd:25:1b:e7:20:94:08:fb:7e:48:cb:10:10:9a:93:e0:
4a:47:75:26:11:8c:93:96:e2:af:4c:a1:39:1a:31:a9:e3:8f:
be:f4:3f:4d:1f:24:de:21:cb:e5:24:e5:7b:4e:b2:f2:4d:77:
2e:a3:3a:c9:20:06:04:72:a9:e4:0c:fa:34:9b:36:a7:16:22:
4c:49:51:24:05:c4:37:3b:79:48:c2:06:f6:3e:fb:95:82:5e:
de:91:c4:9a:39:9e:8f:38:58:e4:1b:98:98:be:01:06:7b:73:
40:f1:9f:60:8c:01:b0:02:7f:a0:31:3c:e5:01:12:b5:b0:40:
4f:d9:9e:7f:67:14:57:8d:91:73:3e:a9:ca:b4:49:12:15:0f:
25:fb:3b:a8:f3:ef:9f:b1:a7:7a:18:8d:3b:59:df:50:67:66:
83:87:f3:4f:50:6e:e1:f6:73:20:31:97:32:c1:52:7f:79:2e:
82:e3:8c:30:20:00:ef:5b:1f:f2:05:ee:aa:6c:54:ac:85:cf:
7f:c7:fa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:20 2025 by rpki-client