Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/nNVpYsmGV3WCQgrWoCF612hh45U.roa
File: nNVpYsmGV3WCQgrWoCF612hh45U.roa (raw, json)
Hash identifier: wHZv2kFUAaf9BLzL2JAS25Y7LGXWvg9AYSI7lzsiDkQ=
Subject key identifier: 9C:D5:69:62:C9:86:57:75:82:42:0A:D6:A0:21:7A:D7:68:61:E3:95
Certificate issuer: /CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Certificate serial: 018CC5DC5BA2924F52A5AADD6477FBF97E5A
Authority key identifier: B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/nNVpYsmGV3WCQgrWoCF612hh45U.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.53.16.0/22 maxlen: 22
2a04:c980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5b:a2:92:4f:52:a5:aa:dd:64:77:fb:f9:7e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cd56962c986577582420ad6a0217ad76861e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:3c:b4:f7:6f:a5:37:cc:0e:27:8b:26:37:
25:a3:6c:03:0f:d3:5e:17:f6:ba:59:ff:18:5a:e6:
29:e8:94:44:b0:2f:f5:d2:84:df:cc:41:9f:7e:c5:
85:6c:1a:ec:2f:c9:b3:f3:0e:bf:62:e8:17:7a:49:
bd:80:4e:9b:bb:c6:b6:07:42:b6:db:28:14:60:dc:
fe:92:64:6b:7e:67:7a:b8:a8:0c:fa:ec:12:52:25:
6e:8b:f8:ab:83:98:bb:26:cd:d3:08:1b:12:8f:81:
54:9d:42:6f:4f:51:46:bd:e6:1f:f3:93:af:64:44:
32:57:63:c6:11:d7:98:e0:e1:34:56:9e:3e:df:ec:
eb:d5:e7:22:2e:fd:d5:ba:86:87:06:5c:2b:8e:38:
b7:8e:76:30:a0:34:d4:87:26:92:bc:a4:8f:73:3d:
e4:06:a5:e3:26:0d:32:13:fa:26:68:d7:4d:25:b3:
a4:bb:b5:e1:98:64:50:e0:06:0a:7d:84:fd:d6:38:
f0:6f:3d:d8:f8:9b:87:7f:88:ff:29:1a:60:e3:38:
7f:a0:5b:23:2e:46:e7:70:d7:d6:b3:39:bb:9c:43:
18:dd:26:d4:13:7e:ea:1b:3a:a4:2a:e3:ab:a0:0b:
ce:a1:2b:a0:9b:73:5d:4c:d3:08:e2:db:62:fa:ae:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D5:69:62:C9:86:57:75:82:42:0A:D6:A0:21:7A:D7:68:61:E3:95
X509v3 Authority Key Identifier:
keyid:B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/nNVpYsmGV3WCQgrWoCF612hh45U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.16.0/22
IPv6:
2a04:c980::/29
Signature Algorithm: sha256WithRSAEncryption
05:c8:6e:31:92:52:39:9b:06:9b:d6:e1:dd:af:e8:c7:af:c7:
7b:4f:9a:8d:61:58:8d:8e:1d:4b:9c:71:1b:9a:f9:e9:6c:90:
ac:60:ec:59:69:d0:1b:e0:1c:25:ad:5a:a9:44:9e:86:ea:08:
b4:c3:8a:79:85:f3:fa:a2:a8:5e:a2:ed:80:ba:fa:f1:ed:3a:
6f:67:d8:9a:be:b4:f7:4c:30:3f:41:ff:d0:06:d0:62:51:b9:
23:45:b5:5d:7c:25:d8:55:e6:7e:d0:8c:50:27:37:cb:ed:46:
5f:46:2d:d0:eb:01:2f:c1:e1:ac:97:41:a8:8f:a4:eb:40:e9:
a8:10:b7:8e:2f:44:93:29:bc:87:44:c3:1a:51:93:4e:7f:c5:
82:68:94:1f:ff:a9:c2:6d:9e:97:33:3b:4d:4d:f7:96:99:f9:
73:8a:b7:2c:00:06:98:13:37:8b:c3:15:70:cc:c4:ee:72:85:
63:f6:f3:4c:67:09:68:9a:73:12:de:25:8f:55:41:54:f3:04:
11:cb:16:1e:df:e3:41:de:60:60:a5:89:a5:40:da:9b:4c:9f:
59:b1:4f:dc:6f:66:09:59:2b:70:a3:df:95:29:61:c8:be:64:
b0:07:5f:a9:3c:12:2b:cc:db:16:66:28:34:51:20:b7:4d:9c:
b4:4f:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:46 2025 by rpki-client