Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/NuGbE0iYch-NMnCYqDkB40S834o.roa
File: NuGbE0iYch-NMnCYqDkB40S834o.roa (raw, json)
Hash identifier: 4r8wh8/J0SlOmUy/r73oI1laynaLIabKO5OjZtjcxrY=
Subject key identifier: 36:E1:9B:13:48:98:72:1F:8D:32:70:98:A8:39:01:E3:44:BC:DF:8A
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 094C3725
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/NuGbE0iYch-NMnCYqDkB40S834o.roa
Signing time: Fri 13 May 2022 07:55:01 +0000
ROA not before: Fri 13 May 2022 07:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210662
IP address blocks: 2a0d:e0c0::/29 maxlen: 29
2a09:7240::/29 maxlen: 29
2a09:9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155989797 (0x94c3725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: May 13 07:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36e19b134898721f8d327098a83901e344bcdf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8e:9b:b4:a5:3a:2f:b4:0e:eb:3a:2a:44:0f:
73:ff:24:47:66:c1:23:65:8a:76:31:3b:5f:7e:c4:
f3:83:61:70:b9:f1:7b:89:92:5e:63:91:f5:71:58:
9b:ba:56:2d:e7:00:b9:f6:f1:ac:2f:9f:c4:40:f3:
57:ee:e9:f0:1d:e6:c9:92:c9:3e:af:3a:ab:97:99:
ea:dc:39:9f:d3:b7:b4:07:6f:66:54:b4:9b:3d:16:
2c:05:b2:7e:27:65:d3:5f:9e:74:43:ab:79:7f:49:
8a:fe:da:1d:d1:6d:94:29:0a:68:fe:ca:a7:83:59:
11:06:2c:fc:17:31:94:d2:cd:5e:ca:00:27:73:3d:
53:35:8a:bc:21:e7:03:2e:9f:7a:a7:24:59:84:f9:
0b:73:f2:41:24:16:93:b7:c8:f8:38:ea:35:e3:41:
79:1c:65:23:ba:4c:95:1e:b0:57:15:32:fc:b7:85:
43:38:dd:7e:8a:4e:0c:69:30:79:82:4c:9c:e0:b9:
a8:04:bf:45:97:5c:31:60:ea:de:5b:8c:eb:67:d0:
43:2e:45:ad:83:d1:9a:72:11:4c:87:40:1b:e0:ec:
30:0b:66:4e:f1:c2:24:7b:5b:34:03:a8:51:76:2e:
77:6a:11:02:53:82:83:11:5e:16:6d:72:5f:ef:91:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:9B:13:48:98:72:1F:8D:32:70:98:A8:39:01:E3:44:BC:DF:8A
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/NuGbE0iYch-NMnCYqDkB40S834o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9c0::/29
2a09:7240::/29
2a0d:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:be:3f:19:db:a4:89:96:dc:45:55:42:cf:d3:41:ed:f6:8a:
4d:73:eb:7d:94:ea:40:f2:d5:43:4e:ac:00:a9:99:f8:f8:37:
5a:1d:e4:80:33:20:f9:8b:d5:55:14:38:61:ff:1b:2b:4d:90:
a0:be:d9:98:2e:27:1c:16:e8:d2:4c:7b:cb:d8:55:d0:6f:90:
7b:ec:ba:ca:df:35:64:c5:79:60:bc:59:c6:75:54:b3:3b:53:
f9:7f:db:79:30:b9:b4:97:7e:d3:7f:63:76:ff:43:d1:0a:80:
8a:4b:5a:ab:b9:0b:4c:67:81:e3:bc:7a:c0:33:01:fd:2b:50:
a9:21:cf:89:d3:63:6a:d0:95:79:3b:9a:cc:ff:c1:77:d0:0d:
67:26:2f:78:ba:67:7b:20:bc:c9:2b:77:76:85:10:b2:30:04:
3d:ae:67:64:7b:55:53:d4:9d:63:6d:4a:e3:bf:2d:32:d6:a8:
42:8e:2c:aa:21:69:05:93:95:e8:8c:b7:05:f0:46:a1:de:c5:
7d:16:a1:ce:00:dd:6d:6b:01:68:58:97:65:40:6f:ec:97:8d:
52:81:84:94:be:be:90:0d:49:85:41:94:33:07:2d:d8:b6:2c:
1d:fb:f1:ab:8e:b9:e4:b3:a0:98:18:e1:42:6a:da:9b:52:2c:
87:4f:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:03 2025 by rpki-client