Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NdbyfcUxXqhAsp9HW8kPJ7eeP4c.roa
File: NdbyfcUxXqhAsp9HW8kPJ7eeP4c.roa (raw, json)
Hash identifier: nGczngHjH9vnpXFU+QPeNiH2aC0mfD4SwuAJm4AHcLY=
Subject key identifier: 35:D6:F2:7D:C5:31:5E:A8:40:B2:9F:47:5B:C9:0F:27:B7:9E:3F:87
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D063CA354DA013815F70C6A06EE1B4E7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NdbyfcUxXqhAsp9HW8kPJ7eeP4c.roa
Signing time: Thu 13 Oct 2022 08:09:04 +0000
ROA not before: Thu 13 Oct 2022 08:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 86.38.241.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:63:ca:35:4d:a0:13:81:5f:70:c6:a0:6e:e1:b4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35d6f27dc5315ea840b29f475bc90f27b79e3f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:b7:db:12:29:d7:c7:27:5a:7c:41:05:81:
13:9c:cb:ef:c0:d6:59:fc:c7:72:4b:2e:a3:51:f1:
47:29:27:da:d9:7a:70:77:01:f2:29:dc:80:d4:15:
3e:81:dc:bf:1d:c7:05:af:d3:ca:eb:91:10:77:46:
6e:85:fd:47:cf:d2:53:e9:df:df:f3:31:c5:e6:0e:
1c:37:cf:08:c6:81:fb:18:bc:fd:a7:3f:44:77:e5:
bb:6c:08:f9:8a:b1:63:76:97:6c:e0:e4:36:a3:08:
0c:25:33:c6:0f:de:8f:1e:ae:1d:d6:40:4f:fd:a8:
d4:bb:49:c5:7e:89:c2:76:6f:2f:04:c3:36:5f:1c:
1a:c1:dc:14:c4:3d:27:3c:fb:a0:e8:a6:31:47:88:
17:7d:e9:00:5b:47:75:ef:16:69:9b:46:fc:a4:e6:
a2:d0:8a:85:c0:20:55:9b:78:49:1d:95:64:6b:1d:
65:9c:7a:11:55:1d:07:9c:99:05:b3:6a:8d:27:54:
0e:52:f1:47:0d:d5:1d:f9:b8:2e:1c:11:74:c5:39:
e6:a2:44:04:b0:89:1f:2d:8d:1d:d6:4d:4f:76:3b:
f1:c0:a8:6f:89:0e:dc:4d:06:05:c7:a5:47:a5:8e:
03:b8:eb:da:f1:3e:00:ba:a2:18:68:bb:e2:15:d8:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D6:F2:7D:C5:31:5E:A8:40:B2:9F:47:5B:C9:0F:27:B7:9E:3F:87
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NdbyfcUxXqhAsp9HW8kPJ7eeP4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.200.0/24
86.38.241.0/24
89.116.125.0/24
89.116.150.0/24
89.116.203.0/24
89.117.130.0/24
89.117.171.0/24
89.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f7:02:53:af:d5:48:6d:fe:98:fd:d1:03:5f:75:8a:8a:98:
87:af:5c:cc:96:1a:41:34:ba:ea:30:68:50:06:11:fd:67:12:
92:5e:a5:19:38:5a:12:48:93:9e:cf:07:a2:dd:d8:c7:cf:cd:
eb:6c:6f:50:81:4f:7f:84:5e:44:0a:07:8b:ed:a3:63:72:32:
c7:97:6a:f8:e1:be:00:28:00:c0:cb:49:7b:db:4a:05:e6:22:
8a:6b:27:86:89:1f:36:4a:60:b1:d8:7d:52:af:03:a5:f3:76:
16:e7:db:a5:c5:00:1f:96:b1:ae:68:f9:4f:b3:f5:8a:e5:ee:
15:41:a8:a1:57:9c:50:65:98:32:d1:99:8b:59:cd:26:23:46:
1f:fe:12:b7:2e:2a:89:25:f1:94:e4:df:c5:5a:47:78:d8:80:
53:57:d6:ba:9d:2b:09:58:6e:a8:0f:48:96:c1:a2:2e:28:94:
c8:28:e4:1b:6f:d1:c7:ae:c5:a8:12:53:d6:ee:c1:29:8e:f8:
9a:2d:b2:a2:8b:bd:a1:8c:92:65:63:6c:4b:c5:7c:de:9b:6d:
e8:58:6a:c8:11:85:e0:c4:04:51:63:7b:f1:b6:75:7e:bf:12:
56:6a:d3:0c:9b:b8:04:7b:ea:48:de:1d:ed:7e:56:df:22:f4:
25:32:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:09 2025 by rpki-client