Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/nKS2LD3h9tJ-T1DkMTcl5jNb8i8.roa
File: nKS2LD3h9tJ-T1DkMTcl5jNb8i8.roa (raw, json)
Hash identifier: NUnea+VhquJvp2jvFILUPYTkdGQpZsSv2Tx/Ar/onGQ=
Subject key identifier: 9C:A4:B6:2C:3D:E1:F6:D2:7E:4F:50:E4:31:37:25:E6:33:5B:F2:2F
Certificate issuer: /CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Certificate serial: 0192048A37A6CE3207ECB9556FC196C41398
Authority key identifier: 6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/nKS2LD3h9tJ-T1DkMTcl5jNb8i8.roa
Signing time: Wed 18 Sep 2024 09:50:20 +0000
ROA not before: Wed 18 Sep 2024 09:50:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204776
IP address blocks: 193.16.100.0/24 maxlen: 24
195.246.98.0/24 maxlen: 24
195.246.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:8a:37:a6:ce:32:07:ec:b9:55:6f:c1:96:c4:13:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Validity
Not Before: Sep 18 09:50:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ca4b62c3de1f6d27e4f50e4313725e6335bf22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:74:ef:ee:58:f8:46:7e:4a:c2:90:80:60:
ca:92:8a:49:16:d3:7b:a5:2c:20:2b:dd:c2:8e:ae:
04:7c:78:46:ab:29:58:d6:14:7f:a4:df:e0:71:27:
c2:16:06:13:40:07:7f:64:f0:d9:36:11:42:96:94:
ff:68:d1:ad:db:b8:04:cf:e3:56:cb:7c:69:a7:de:
d8:19:12:fe:76:bb:8c:f8:e3:97:b9:3c:bf:30:e1:
41:46:5d:17:05:d2:7c:13:a9:75:0f:af:ff:74:26:
a2:b8:0c:a5:a6:36:94:10:d8:72:6c:db:42:5b:fa:
d9:96:dd:bf:77:3a:e2:43:16:51:ff:8f:fe:c6:8c:
9f:d1:de:f9:8b:e5:13:63:1b:9c:79:ef:13:56:04:
81:c4:0e:7b:c8:01:2e:c1:b5:e8:8d:2c:79:2c:73:
ce:86:0b:f6:d5:2d:0c:c1:d7:2b:71:e0:4e:d5:ec:
bb:a7:41:ed:7d:09:3f:fa:6e:56:5a:e6:f7:ab:b5:
7b:89:a3:e9:f4:e9:40:40:33:fa:e6:a8:18:fb:8a:
1d:c5:8d:20:28:29:1e:37:d7:f4:51:3f:53:c5:65:
38:6d:6e:94:9a:8a:55:3a:a0:6d:5b:0d:d9:ae:20:
23:f0:c3:02:17:8b:e0:0b:ad:e1:c9:42:d8:12:fe:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:B6:2C:3D:E1:F6:D2:7E:4F:50:E4:31:37:25:E6:33:5B:F2:2F
X509v3 Authority Key Identifier:
keyid:6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/nKS2LD3h9tJ-T1DkMTcl5jNb8i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.100.0/24
195.246.98.0/23
Signature Algorithm: sha256WithRSAEncryption
08:2d:a2:61:7a:c5:0d:d9:0c:0e:a0:e3:a7:d9:9e:de:0e:5d:
40:86:24:9c:cf:9f:a9:0b:9e:20:90:38:ca:4f:32:d6:88:fc:
f5:66:bd:fe:2b:15:8b:ee:d6:e0:dd:8a:41:34:d4:46:22:5d:
e1:a5:58:0d:18:7e:56:31:0e:04:52:8e:d4:e8:ba:86:9a:4d:
5f:03:8f:6b:9f:f0:5f:09:8a:58:c1:ce:c5:fe:0b:b7:4f:58:
c1:cf:07:46:d1:e6:7e:29:1f:31:30:97:28:0d:08:04:ad:a7:
ad:ca:3d:ee:31:3a:cf:5c:b7:e5:fa:b6:8d:55:06:f4:16:a6:
68:3d:6a:33:4b:e2:cb:6c:9c:a9:65:4b:c4:a5:24:cf:a9:b2:
5c:ea:c3:be:ac:11:52:ba:f9:dc:0a:00:7c:61:79:e1:2c:8d:
b9:68:26:bc:03:e4:a2:2b:3e:2a:01:94:74:93:97:85:25:14:
0f:66:b6:a2:ef:8b:35:49:86:e3:96:a8:c8:68:86:ea:62:7e:
3c:dd:a2:ed:3a:11:99:5e:b4:c9:b7:99:57:d6:d4:ab:c2:c3:
da:d5:e4:a3:02:98:96:39:48:7e:f5:54:ef:48:fe:6c:29:88:
f8:9d:35:ae:cb:be:63:ea:aa:d0:95:1d:bf:b2:a1:c0:94:49:
52:86:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:01:11 2025 by rpki-client