Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Nc2fha0lLWlvc6xMAIxXT07_q2w.roa
File: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (raw, json)
Hash identifier: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=
Subject key identifier: 35:CD:9F:85:AD:25:2D:69:6F:73:AC:4C:00:8C:57:4F:4E:FF:AB:6C
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019426D9A1CB80E244F017A1DAFE69D7C4DE
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Nc2fha0lLWlvc6xMAIxXT07_q2w.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44984
IP address blocks: 185.175.84.0/22 maxlen: 22
2a0b:df00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a1:cb:80:e2:44:f0:17:a1:da:fe:69:d7:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35cd9f85ad252d696f73ac4c008c574f4effab6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:11:7d:ca:bf:2b:3f:19:49:b2:fa:65:e2:
94:7f:5f:4b:4f:88:7c:a5:59:0f:d2:40:a3:50:5d:
ef:03:c6:d1:2c:d3:72:cc:8d:f0:96:35:8f:1a:9e:
fb:75:67:d1:4d:93:98:58:9f:80:7f:1f:02:7f:9f:
56:78:eb:3f:02:08:13:08:72:2b:79:83:2d:dd:ab:
5c:15:c1:59:b0:83:32:5e:4d:1c:4a:8f:7e:b7:60:
cc:86:ec:20:90:1d:eb:bc:29:21:44:bf:f7:b2:e1:
70:eb:5c:7f:2b:49:17:ed:b6:88:52:3a:b2:64:4d:
b9:bd:81:ee:34:84:10:f0:3a:0e:cd:95:5a:7b:3a:
c1:33:0b:37:ef:ef:06:f2:a3:72:40:1d:87:d3:c4:
db:6e:7e:03:30:4b:c3:af:2d:2f:8b:13:ba:a1:67:
af:63:8e:5f:cb:0d:5f:6f:7d:5f:1a:4b:e8:2f:d8:
f2:f0:ba:3c:e0:ed:96:44:d9:f5:d0:63:c7:72:6f:
cd:fe:35:3d:44:1e:05:20:3d:3b:d3:33:8c:b5:33:
b9:5b:f0:83:34:35:95:a6:3e:57:bb:f0:b2:a7:fe:
ef:d8:c3:f7:c5:7a:ab:d8:5b:4a:01:53:28:a7:7d:
f5:fc:d0:1b:3c:13:37:c6:08:b6:6a:3c:c8:74:f8:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:9F:85:AD:25:2D:69:6F:73:AC:4C:00:8C:57:4F:4E:FF:AB:6C
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Nc2fha0lLWlvc6xMAIxXT07_q2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.84.0/22
IPv6:
2a0b:df00::/32
Signature Algorithm: sha256WithRSAEncryption
78:52:62:1f:6b:1f:30:13:3a:ee:04:9a:41:2b:dd:5c:62:7b:
8a:84:d2:dd:a6:e8:6a:14:98:eb:7c:3b:60:0a:5f:5e:5e:b0:
93:c5:21:6b:64:d7:a8:d5:f9:da:af:91:1d:8d:bf:41:47:14:
74:6a:0b:4a:f2:7c:8f:62:a4:cf:ff:eb:51:9a:f2:aa:7b:3f:
5d:c8:8e:60:b4:0f:30:38:9c:ff:94:7b:a6:53:02:9d:ff:79:
ed:f9:45:61:99:a8:4b:e6:49:98:40:80:9a:cb:c7:71:94:2f:
be:70:78:6c:0d:13:20:da:af:da:12:2c:ee:ab:9c:a0:b7:02:
59:78:af:cb:88:4b:a0:66:63:e7:86:d7:f2:ce:9f:32:16:c6:
65:68:bf:ac:d4:8c:ff:41:1f:a1:a0:2e:22:eb:fd:73:08:89:
60:eb:da:54:e7:3e:80:54:3a:1d:8c:c9:f9:8d:5e:46:2e:f0:
29:bd:87:fb:36:c6:00:bb:71:f3:13:34:e6:59:76:b1:e4:b9:
90:67:d7:65:75:46:ca:d0:f2:34:b1:25:5c:48:47:bd:90:fe:
3e:49:68:03:bd:be:c3:fa:b4:f6:6d:54:9a:21:f6:ab:65:56:
11:03:91:0b:80:96:f0:12:ba:b1:1a:0e:f9:ec:63:76:17:47:
42:c3:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:54:35 2025 by rpki-client