Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/NFfv6XpudKAqPc_M5Zr0XXZ-KVE.roa
File: NFfv6XpudKAqPc_M5Zr0XXZ-KVE.roa (raw, json)
Hash identifier: dcurSoFzFO/QW+k5fqREyqWRQU2P6/pefQrOjdMduuY=
Subject key identifier: 34:57:EF:E9:7A:6E:74:A0:2A:3D:CF:CC:E5:9A:F4:5D:76:7E:29:51
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 019425214BB5E3D31EF84F9C6B2EE3D03404
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/NFfv6XpudKAqPc_M5Zr0XXZ-KVE.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200260
IP address blocks: 193.242.222.0/24 maxlen: 24
2a13:75c1:100::/40 maxlen: 48
2a13:75c1:100::/44 maxlen: 48
2a13:75c1:110::/44 maxlen: 48
2a13:75c1:300::/40 maxlen: 48
2a13:75c1:500::/40 maxlen: 40
2a13:75c1:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4b:b5:e3:d3:1e:f8:4f:9c:6b:2e:e3:d0:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3457efe97a6e74a02a3dcfcce59af45d767e2951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:2e:65:1d:90:38:ab:b6:3b:b4:5b:af:6c:
3e:86:03:ca:47:6f:5e:22:6b:bd:32:5c:28:9a:71:
0e:65:47:9d:fb:8a:01:67:9e:6d:cb:82:82:2c:db:
48:1b:50:68:cc:96:66:96:7f:a9:e6:44:c9:4a:51:
71:b2:72:6a:8e:61:a4:eb:00:6a:7b:3e:d0:8e:8c:
00:d7:9f:31:4f:14:bf:3c:5c:13:c0:69:b1:65:db:
17:25:b7:a2:48:33:78:a1:26:28:3f:37:82:cf:4c:
62:1c:cd:93:55:90:44:44:32:94:a1:52:8b:73:78:
1e:42:46:24:f8:b1:50:0a:d3:aa:fc:32:c8:04:50:
75:f4:09:6b:56:9f:1d:81:98:98:29:3b:7e:72:ff:
be:41:60:d7:4f:32:d6:83:43:b2:ec:24:6e:1d:18:
f1:cc:14:42:4e:49:15:1a:3b:c9:e9:05:bf:9c:60:
05:e0:10:43:61:cd:46:1c:19:15:cf:ae:b5:87:3b:
d5:05:7a:b7:a6:2b:46:f5:0a:f2:f4:12:9f:25:2d:
6d:39:84:de:ab:9a:9c:df:0b:ba:83:3b:61:72:e8:
dc:0f:60:b8:4d:38:54:36:fb:72:e0:22:4d:ff:d8:
4c:2f:b6:6f:ae:d9:99:5a:57:3f:82:7b:1c:0c:41:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:EF:E9:7A:6E:74:A0:2A:3D:CF:CC:E5:9A:F4:5D:76:7E:29:51
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/NFfv6XpudKAqPc_M5Zr0XXZ-KVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.222.0/24
IPv6:
2a13:75c1:100::/40
2a13:75c1:300::/40
2a13:75c1:500::/40
2a13:75c1:2000::/36
Signature Algorithm: sha256WithRSAEncryption
63:69:2c:3e:9b:8d:6e:5d:fd:91:2e:0e:72:97:06:da:78:5a:
87:b3:63:7a:0d:55:08:c0:97:d4:78:bc:04:1b:7a:51:32:52:
9b:7a:86:bd:2a:32:c3:9c:67:f2:80:56:05:6b:23:2a:99:3c:
31:8a:8a:68:a9:73:83:8b:25:db:26:c4:9a:8a:98:d8:af:64:
50:a2:13:3b:e0:3b:f6:6a:c2:c5:95:93:47:2f:87:0b:ea:83:
14:8f:68:29:db:5c:9c:57:a7:2f:bd:f5:9d:33:19:62:a4:08:
a0:ba:b3:37:bb:e2:e7:8a:12:a4:e8:90:ac:c1:39:06:84:3a:
ff:1a:c0:d7:9c:c5:f0:12:69:de:54:22:65:d7:af:84:01:23:
b1:80:a9:bb:91:80:e1:c5:27:fa:74:6b:fe:51:73:d2:46:ae:
54:a9:1a:b6:a8:ff:0f:6f:af:0e:a9:60:0e:dd:9b:b4:99:3e:
d3:0a:b3:0e:7a:ec:a2:72:40:27:61:24:d9:f7:72:32:5b:ca:
a0:35:37:de:9e:e6:c1:f4:3d:91:74:78:d2:3c:77:10:5e:ad:
d0:df:a5:3e:63:29:d8:1f:31:29:b8:61:70:98:e9:20:79:bb:
49:6a:4b:3d:bf:ef:bf:a4:a2:51:48:2a:ae:34:59:05:a3:72:
1a:6a:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:44:14 2025 by rpki-client