Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/NRZ_lCVhABHz5b_Z8IxEc9d_jK0.roa
File: NRZ_lCVhABHz5b_Z8IxEc9d_jK0.roa (raw, json)
Hash identifier: JVDWSg5rVEKkwzjQ42dtSUP/iC2fUlHw3otcwoq/p38=
Subject key identifier: 35:16:7F:94:25:61:00:11:F3:E5:BF:D9:F0:8C:44:73:D7:7F:8C:AD
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 01941F8C4F0BCE78AED17308196CF4DCE98A
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/NRZ_lCVhABHz5b_Z8IxEc9d_jK0.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51679
IP address blocks: 193.24.36.0/24 maxlen: 24
193.25.194.0/24 maxlen: 24
193.25.196.0/24 maxlen: 24
193.25.223.0/24 maxlen: 24
2a0f:76c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4f:0b:ce:78:ae:d1:73:08:19:6c:f4:dc:e9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35167f9425610011f3e5bfd9f08c4473d77f8cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:81:bd:4e:97:04:ba:4e:ae:4f:7b:c1:1a:
ec:d5:a1:6b:47:d9:75:c3:bd:ac:90:74:31:93:48:
c0:48:40:b7:0e:5c:2f:64:2b:74:bc:f1:4f:e8:6f:
97:ff:a5:24:f4:e9:14:92:d8:b2:33:22:23:70:05:
dd:7e:79:0a:f9:27:5b:20:b1:1a:1f:f1:7d:96:77:
12:22:fb:30:78:6a:72:56:ca:9b:8d:1e:e1:e9:19:
d0:4c:97:28:ce:4a:67:5d:af:a9:2e:03:7b:ac:4b:
4f:94:64:8b:16:8e:f5:50:ac:88:26:98:be:d6:53:
5b:39:05:6b:a7:55:45:f6:7b:7d:4e:66:70:29:79:
49:a4:e7:6e:1b:d6:ee:da:15:85:97:9e:81:a0:17:
1b:ff:65:bf:ef:49:72:5a:9e:24:a2:3f:14:e6:21:
a8:5a:32:92:e7:f9:43:1c:3a:b9:63:27:de:e8:99:
74:51:87:42:08:f2:c6:23:9a:1e:a5:fb:73:06:f8:
75:63:13:4d:de:30:da:09:7d:7e:34:8d:5d:94:d2:
01:7c:1f:75:12:c9:c0:dc:55:84:ae:fb:ab:42:16:
05:01:1a:3e:f5:78:a5:89:9b:79:6e:2f:ea:5c:9b:
4e:af:0d:c4:1f:57:3b:96:25:b1:20:b5:7f:dc:cb:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:7F:94:25:61:00:11:F3:E5:BF:D9:F0:8C:44:73:D7:7F:8C:AD
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/NRZ_lCVhABHz5b_Z8IxEc9d_jK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.36.0/24
193.25.194.0/24
193.25.196.0/24
193.25.223.0/24
IPv6:
2a0f:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:0a:93:cc:18:94:ca:67:c6:aa:3b:19:38:52:03:c0:88:5e:
2a:d8:9b:eb:db:38:35:9a:77:3c:74:6e:b2:63:bf:2f:77:32:
eb:ee:e2:7f:a6:11:82:04:00:59:fb:5b:87:2a:b5:19:bf:ff:
1a:c5:6c:73:b4:cd:a0:54:7d:68:43:3a:98:a2:d9:35:d3:de:
ad:b0:c7:22:14:90:5c:ee:97:11:d3:ab:ff:88:9d:86:4d:69:
7a:d3:52:d6:19:11:ac:f7:6c:47:67:4c:a4:70:0d:36:1e:6e:
6a:2c:ad:33:b0:db:ee:da:36:18:a9:67:83:76:17:74:42:f6:
3d:c5:de:54:57:44:0c:c7:33:de:18:73:39:96:1f:6d:6e:3e:
22:0f:77:3d:d6:e5:78:4a:e2:e0:71:7c:57:8b:01:1c:2a:37:
64:69:47:8e:f4:20:de:a8:1d:7b:7e:77:93:d1:0d:22:e1:90:
15:91:80:71:b9:1a:65:17:29:0f:68:2e:23:c7:e0:22:b0:b3:
fb:b9:c2:31:4c:3f:00:cb:9c:dd:32:91:6b:ab:e0:ee:a3:27:
85:76:84:4e:f7:f4:78:f9:a1:46:dc:ec:85:91:96:2b:96:c8:
cc:97:45:21:4a:61:ce:f4:00:9e:0d:ec:c4:50:c5:ac:f4:68:
d7:d1:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:57 2025 by rpki-client