Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa
File: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (raw, json)
Hash identifier: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=
Subject key identifier: 35:72:B5:E9:60:A8:3B:18:AE:3F:93:DD:87:42:AA:B3:DF:3F:E9:8E
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 0194890C8609712CF07783A1719BFD18DAD4
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa
Signing time: Tue 21 Jan 2025 13:28:06 +0000
ROA not before: Tue 21 Jan 2025 13:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25467
IP address blocks: 81.17.228.0/23 maxlen: 23
81.17.228.0/24 maxlen: 24
81.17.229.0/24 maxlen: 24
82.214.66.0/24 maxlen: 24
82.214.76.0/23 maxlen: 23
82.214.76.0/24 maxlen: 24
82.214.77.0/24 maxlen: 24
82.214.78.0/24 maxlen: 24
82.214.84.0/23 maxlen: 23
82.214.84.0/24 maxlen: 24
82.214.85.0/24 maxlen: 24
82.214.96.0/21 maxlen: 21
82.214.96.0/24 maxlen: 24
82.214.97.0/24 maxlen: 24
82.214.98.0/24 maxlen: 24
82.214.99.0/24 maxlen: 24
82.214.100.0/24 maxlen: 24
82.214.101.0/24 maxlen: 24
82.214.102.0/24 maxlen: 24
82.214.103.0/24 maxlen: 24
82.214.108.0/22 maxlen: 22
82.214.109.0/24 maxlen: 24
82.214.110.0/24 maxlen: 24
82.214.111.0/24 maxlen: 24
82.214.112.0/21 maxlen: 21
82.214.112.0/24 maxlen: 24
82.214.113.0/24 maxlen: 24
82.214.114.0/24 maxlen: 24
82.214.115.0/24 maxlen: 24
82.214.116.0/24 maxlen: 24
82.214.117.0/24 maxlen: 24
82.214.118.0/24 maxlen: 24
82.214.119.0/24 maxlen: 24
82.214.120.0/23 maxlen: 23
82.214.120.0/24 maxlen: 24
82.214.121.0/24 maxlen: 24
2a02:2230:200::/40 maxlen: 40
2a02:2230:1200::/40 maxlen: 40
2a02:2230:2200::/40 maxlen: 40
2a02:2230:3200::/40 maxlen: 40
2a02:2230:4200::/40 maxlen: 40
2a02:2230:6200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:0c:86:09:71:2c:f0:77:83:a1:71:9b:fd:18:da:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jan 21 13:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3572b5e960a83b18ae3f93dd8742aab3df3fe98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:2d:7a:2a:8d:8b:e2:df:64:37:af:85:e1:
8d:a1:14:b9:8c:a3:de:06:c4:e7:88:9c:c8:e8:48:
43:ee:13:c5:16:af:18:68:38:a1:7d:97:4a:18:d1:
56:08:a3:46:cb:9c:c8:6f:4e:c3:df:36:46:e1:71:
c2:e7:b2:16:1d:a5:24:85:a2:47:53:c1:44:d7:35:
4f:84:71:f9:b0:c7:d4:0a:52:8c:46:1c:b6:9a:20:
23:21:1a:89:af:8b:d9:ac:0b:e5:8b:73:e9:96:07:
be:34:a9:8e:f5:6f:2a:65:81:fb:d1:03:99:86:67:
bb:09:ab:51:bd:f3:ad:49:76:c2:30:eb:62:ff:28:
5f:18:c7:25:91:3a:cc:45:13:cd:04:ce:b1:da:0f:
ef:fa:b9:ea:4e:ec:af:3c:ac:c1:11:17:b1:4a:6e:
78:11:c9:f3:35:9d:1d:14:81:ca:ce:d6:25:74:2e:
ec:79:53:37:ab:60:14:44:c1:6b:8c:a7:1e:f2:68:
78:84:3b:17:4c:4e:b4:7d:cc:31:d4:9f:51:9f:d2:
a2:ce:d7:be:9a:df:1d:1a:db:fe:59:89:34:19:ee:
2a:2c:82:27:78:99:59:77:a7:d2:69:c0:e2:ee:c3:
fd:8e:0b:49:15:c5:bc:0e:55:c6:8d:24:94:fa:af:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:B5:E9:60:A8:3B:18:AE:3F:93:DD:87:42:AA:B3:DF:3F:E9:8E
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.228.0/23
82.214.66.0/24
82.214.76.0-82.214.78.255
82.214.84.0/23
82.214.96.0/21
82.214.108.0-82.214.121.255
IPv6:
2a02:2230:200::/40
2a02:2230:1200::/40
2a02:2230:2200::/40
2a02:2230:3200::/40
2a02:2230:4200::/40
2a02:2230:6200::/40
Signature Algorithm: sha256WithRSAEncryption
8c:22:f2:16:24:15:e3:19:c2:9d:e8:f8:24:cc:73:37:74:29:
8b:ef:ef:7a:f4:8d:8d:72:88:79:be:01:2b:ab:0a:72:58:a0:
0c:19:e4:7f:5f:9b:34:f1:3d:dd:68:1f:c8:4e:23:1c:43:5f:
58:62:2d:84:c8:de:95:0b:15:99:c6:f2:13:63:50:47:ee:50:
aa:cf:5c:3b:5d:4f:06:5e:78:28:c1:42:49:d5:b3:bf:58:a4:
01:21:2e:74:83:c5:c2:a1:dd:0b:4b:82:78:ee:46:4e:05:31:
6b:fb:0c:2a:98:3a:11:3b:14:42:7a:1d:93:c2:95:4b:89:8d:
ec:1b:2a:d7:75:56:c3:e0:0c:fa:05:1d:c3:30:bb:a7:1c:61:
c9:3c:2d:d7:bf:96:5e:ec:a2:b4:f1:ce:7c:fb:44:9a:30:61:
24:65:25:9c:5d:23:cf:f3:89:82:1b:49:57:5d:6a:82:20:e3:
e8:5a:f5:f5:b0:0d:1e:54:7c:e0:43:00:54:88:c7:a2:2c:5a:
41:cf:b6:b9:de:58:66:b8:ec:d1:66:87:a9:0c:3c:11:02:74:
8b:23:69:42:a2:ea:da:0c:c7:3c:a7:24:22:ec:9e:45:ae:bf:
80:6b:04:15:16:13:a5:70:07:7d:ec:2f:c1:43:a7:63:99:38:
21:b7:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:27 2025 by rpki-client