Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/nqx9W3CT9LMiI-_qYVZ2zzABCM4.roa
File: nqx9W3CT9LMiI-_qYVZ2zzABCM4.roa (raw, json)
Hash identifier: +L2mXS+fLf5z/UHFl8eJlZqBjyyNEu9DFCCZwu03Oh8=
Subject key identifier: 9E:AC:7D:5B:70:93:F4:B3:22:23:EF:EA:61:56:76:CF:30:01:08:CE
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 01942369033DFC6BE6D8BDD9B1E5C48362D1
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/nqx9W3CT9LMiI-_qYVZ2zzABCM4.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61218
IP address blocks: 95.128.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:03:3d:fc:6b:e6:d8:bd:d9:b1:e5:c4:83:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eac7d5b7093f4b32223efea615676cf300108ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:ef:58:f2:b3:e4:1d:1c:37:f8:f1:f0:ba:
ed:9d:4d:b7:c2:69:15:07:3d:e0:8d:d4:e9:cf:da:
17:b0:65:b7:18:51:5e:36:4d:20:4f:66:59:c8:b3:
9c:76:25:ee:f8:ac:61:cc:dd:91:d4:1d:4c:49:45:
4c:00:a6:6d:ed:18:7d:3a:e4:ac:df:93:01:68:21:
d2:11:f5:f7:d1:b8:93:bf:24:40:0c:19:5d:91:8f:
85:f3:0f:bb:c6:5f:25:b4:91:53:95:ad:60:f4:3c:
52:9b:c7:22:49:f8:79:7b:5e:bd:3e:19:7c:25:39:
ee:ad:1e:62:24:c0:f9:13:71:45:9e:c9:41:40:80:
5c:e6:55:95:5e:d6:1f:68:09:61:3b:b0:58:64:96:
b0:bf:50:aa:f2:33:15:0c:f3:81:a8:50:e4:73:ac:
72:e8:a6:e4:a2:2d:7e:0b:98:e8:66:86:12:06:25:
4a:13:fc:03:b5:06:89:a8:b0:78:03:e8:1c:5f:24:
44:3c:06:bf:01:d4:34:52:0f:37:69:da:61:28:77:
f4:77:ba:b7:18:c4:33:69:6b:ac:a9:08:69:4d:e7:
c0:f6:5d:50:ac:ec:0e:53:70:f4:bb:46:1d:c7:39:
da:94:b2:e6:2b:e6:ee:a2:be:6c:4f:fe:7b:03:ab:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AC:7D:5B:70:93:F4:B3:22:23:EF:EA:61:56:76:CF:30:01:08:CE
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/nqx9W3CT9LMiI-_qYVZ2zzABCM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.199.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f8:c5:bc:67:41:cb:dd:29:5e:7a:1f:ce:a2:01:9b:c5:41:
d6:ff:c7:62:2d:6c:cd:62:be:be:0b:53:cf:df:d6:11:19:b4:
8f:eb:2d:82:34:cc:63:f8:f2:e8:5f:6a:c7:60:bd:a2:25:9e:
b8:eb:43:7b:97:da:b0:19:b2:df:16:c0:96:a1:da:c9:56:75:
1a:5f:bb:23:56:9c:ef:66:51:34:60:7d:2c:f5:05:34:ae:47:
df:84:d0:1d:b0:b7:d6:d7:cd:29:26:ad:d8:f1:70:a1:dc:36:
c7:7b:b7:d4:3a:1b:6c:ab:a0:1c:fe:8b:d0:7e:45:2d:54:aa:
bd:11:a6:25:06:45:c1:e6:26:40:78:02:c9:7c:4c:f3:5e:29:
f5:d2:7f:8d:57:fc:49:8a:af:d6:5f:57:22:5c:73:b3:9b:c8:
2b:6b:bc:52:86:7c:f5:df:1c:51:35:00:47:6a:3a:db:59:17:
79:11:29:39:48:58:46:c9:ea:4d:f6:90:d8:8e:de:e0:09:40:
99:19:14:58:78:e0:58:b9:da:f0:a2:0d:8c:bd:3b:e7:78:ce:
1c:d7:51:36:7e:8b:15:ce:2b:f2:a6:e7:0d:de:3e:d0:ae:e3:
da:73:dc:04:e9:92:de:03:49:a5:4d:ff:a4:11:b8:78:e1:89:
05:84:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:31 2025 by rpki-client