Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/np9eNjgoLA0jYeMYnFqjApZ6K1s.roa
File: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (raw, json)
Hash identifier: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=
Subject key identifier: 9E:9F:5E:36:38:28:2C:0D:23:61:E3:18:9C:5A:A3:02:96:7A:2B:5B
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019428252D0B67CB290D59FE408725DC18D0
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/np9eNjgoLA0jYeMYnFqjApZ6K1s.roa
Signing time: Thu 02 Jan 2025 17:51:52 +0000
ROA not before: Thu 02 Jan 2025 17:51:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3561
IP address blocks: 62.216.64.0/21 maxlen: 21
178.157.64.0/22 maxlen: 22
188.74.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:2d:0b:67:cb:29:0d:59:fe:40:87:25:dc:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e9f5e3638282c0d2361e3189c5aa302967a2b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:dd:83:d3:9c:46:f0:4c:b6:31:ac:62:88:
26:15:e4:3b:42:d6:02:cc:b3:09:02:fb:2a:bd:52:
08:10:e6:ba:1d:63:0f:09:a6:fc:22:5d:cc:ff:5a:
98:00:4e:0e:95:06:ae:4b:b1:03:9f:39:25:3b:af:
5e:bc:de:8b:84:8d:77:7e:76:39:13:cb:50:ea:10:
c6:d5:de:4f:ed:ee:e1:eb:71:74:bb:64:b6:e0:04:
71:e7:35:7d:c9:5b:98:2d:62:8c:9a:4a:5d:5b:c5:
20:03:d6:89:b9:94:df:69:fe:9a:7c:f1:61:5d:a8:
96:0a:88:c0:26:0a:87:8f:3d:40:18:62:70:81:6e:
5f:ff:ac:9f:2d:b7:88:c0:42:81:fc:62:fe:fe:b3:
68:98:ca:65:b1:c1:4e:05:bd:50:a2:ca:66:04:c4:
d6:f9:c6:7d:75:46:2f:9e:86:85:50:b7:8a:83:ab:
ef:9f:a3:d8:1a:0c:6e:34:0c:27:9b:fc:08:cf:34:
ed:f5:db:63:91:40:b3:c8:e5:74:85:cc:bf:e4:b0:
6f:87:da:be:d4:a6:44:41:9a:4b:52:3c:b3:d4:d0:
11:9a:ea:97:17:5d:5f:58:32:6e:94:55:1c:4b:79:
39:83:5c:3f:d8:f2:29:53:9f:28:de:41:42:d5:ff:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:5E:36:38:28:2C:0D:23:61:E3:18:9C:5A:A3:02:96:7A:2B:5B
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/np9eNjgoLA0jYeMYnFqjApZ6K1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.64.0/21
178.157.64.0/22
188.74.136.0/22
Signature Algorithm: sha256WithRSAEncryption
11:27:92:16:aa:69:6f:5a:82:24:c9:16:cf:bf:6c:49:d3:59:
c7:e7:86:73:9f:e3:df:9e:89:8f:ac:ea:50:99:c2:fb:20:a2:
8f:d8:65:df:7c:26:bd:7b:85:14:ec:19:b6:73:32:2e:b9:e0:
9a:ee:ca:0c:c6:1c:d7:f2:87:2e:d3:e6:a3:cb:ac:a7:21:5e:
04:fc:a1:a8:8c:d9:7e:b8:5f:56:92:d9:05:82:0e:5c:1f:3e:
b4:b9:02:66:f6:9d:42:28:19:4c:b4:83:38:3c:09:65:c7:8c:
94:cb:86:3a:12:78:34:aa:ad:50:b4:4b:c2:f7:6b:d8:9f:24:
dc:52:cc:73:ac:1f:9e:43:11:50:4f:8b:8c:a0:82:ce:f3:33:
46:8d:a3:c3:ae:b0:80:b7:4d:69:8d:75:31:9b:60:c0:64:2d:
f5:7a:f3:16:e6:38:1a:5a:19:2b:3a:cc:eb:77:54:1f:ae:83:
e1:7a:02:29:53:5f:07:df:e4:18:48:a9:62:ed:1a:21:42:f6:
63:b4:7c:fd:69:e2:4d:82:0d:fc:30:b9:9b:ab:b0:09:b0:80:
80:46:ce:0b:ab:ae:7b:d8:d0:0d:27:1f:09:70:8a:09:5e:e4:
83:77:ef:64:10:7f:31:63:bc:0f:c3:41:ca:f3:10:9e:ec:82:
3f:ea:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:28:43 2025 by rpki-client