Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/nEfHwINwuBHiUKIJFEku-LNUnAs.roa
File: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (raw, json)
Hash identifier: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=
Subject key identifier: 9C:47:C7:C0:83:70:B8:11:E2:50:A2:09:14:49:2E:F8:B3:54:9C:0B
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 01942445303FA194CE23A98F914E10E4030A
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/nEfHwINwuBHiUKIJFEku-LNUnAs.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209964
IP address blocks: 185.6.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:30:3f:a1:94:ce:23:a9:8f:91:4e:10:e4:03:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c47c7c08370b811e250a20914492ef8b3549c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:09:48:79:3d:ab:38:7c:19:cf:1c:66:65:
04:e0:44:9a:7c:33:1d:dc:2f:dc:d2:43:e4:a6:e8:
fa:06:ac:06:e5:f1:3a:f2:7b:74:ff:02:ae:8e:7f:
e9:fd:96:de:43:f9:50:e1:bf:00:b6:ea:13:41:2b:
77:59:bd:76:45:bf:d5:69:85:1c:50:f4:84:08:60:
24:87:73:64:59:62:fa:a4:5d:57:9d:71:3a:33:d7:
13:2b:ec:4c:63:9e:b5:a6:02:75:42:ca:88:c3:16:
3d:ed:d6:13:31:60:4d:2c:f4:7e:9d:3d:40:0f:4f:
b5:4c:68:63:bd:f2:b8:b2:5e:c5:3d:d8:96:70:31:
7b:69:83:84:91:ee:2b:b2:7b:f3:e8:24:7e:ea:7b:
d4:91:44:95:d1:ee:f7:c5:9e:86:ca:44:de:19:04:
ce:89:d5:71:0e:c2:62:1b:c2:53:0c:68:39:45:05:
1a:7b:fa:11:13:3a:00:aa:89:b8:b6:9b:db:cb:69:
f5:7e:8b:5d:0d:a5:a9:ed:1f:27:1a:e1:78:6a:42:
af:c8:7c:8d:f2:66:2f:e6:6a:f8:a9:66:c6:52:12:
4e:32:12:af:51:c3:af:74:b6:f4:42:c7:31:81:c8:
cd:20:79:76:76:e7:55:53:1e:e8:ef:49:b3:3c:4a:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:C7:C0:83:70:B8:11:E2:50:A2:09:14:49:2E:F8:B3:54:9C:0B
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/nEfHwINwuBHiUKIJFEku-LNUnAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:66:b3:b6:12:fb:e4:33:9c:3d:24:0d:2c:fe:af:78:50:a4:
cd:15:9b:a3:8d:88:b8:6b:40:66:50:a6:46:20:91:9f:8d:e2:
25:ba:b8:b1:da:d6:41:7b:3f:a8:c7:b9:13:ed:cd:d7:09:82:
3a:39:23:f0:2c:a8:90:63:2a:33:9f:d5:d0:b1:68:1e:34:cd:
c9:e6:35:16:f6:b4:93:82:b9:b6:dc:b1:c3:f1:3b:3b:5c:3f:
30:8b:04:ce:a1:65:f9:e9:94:eb:f4:49:57:4e:8e:1d:bd:22:
5c:e8:74:04:32:c4:4c:55:50:11:e7:d7:85:49:ba:b3:62:72:
b7:d7:60:38:e6:0b:88:86:d1:ac:5e:57:17:8e:f4:8e:c5:cf:
50:3d:c6:64:c1:c3:9d:10:46:2f:f1:b4:1a:5f:76:1a:d7:86:
07:ad:89:30:bb:be:13:be:61:ef:23:26:3e:d2:65:13:53:19:
93:9c:33:c2:dd:b8:ae:9e:04:b8:05:c5:48:3d:0a:5e:6d:14:
03:19:04:13:41:27:47:cf:82:d1:79:aa:66:15:bf:09:c7:5b:
8c:20:e5:10:51:f5:0e:a0:f7:f9:7c:e8:00:fa:23:7b:d6:5c:
ec:04:0d:36:bb:52:1f:f7:7a:09:73:a9:05:77:ac:08:65:46:
88:28:d0:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRTA/oZTOI6mPkU4Q5AMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz
YmMwNzgwHhcNMjUwMTAxMjM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQ3YzdjMDgzNzBiODExZTI1MGEyMDkxNDQ5MmVmOGIzNTQ5YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n8JSHk9qzh8Gc8cZmUE4ESafDMd
3C/c0kPkpuj6BqwG5fE68nt0/wKujn/p/ZbeQ/lQ4b8AtuoTQSt3Wb12Rb/VaYUc
UPSECGAkh3NkWWL6pF1XnXE6M9cTK+xMY561pgJ1QsqIwxY97dYTMWBNLPR+nT1A
D0+1TGhjvfK4sl7FPdiWcDF7aYOEke4rsnvz6CR+6nvUkUSV0e73xZ6GykTeGQTO
idVxDsJiG8JTDGg5RQUae/oREzoAqom4tpvby2n1fotdDaWp7R8nGuF4akKvyHyN
8mYv5mr4qWbGUhJOMhKvUcOvdLb0QscxgcjNIHl2dudVUx7o70mzPEryaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxHx8CDcLgR4lCiCRRJLvizVJwLMB8GA1UdIwQY
MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt
ZTc0ZDhkMWQ0ZTAyLzEvbkVmSHdJTnd1QkhpVUtJSkZFa3UtTE5VbkFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy
LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQYAMA0G
CSqGSIb3DQEBCwUAA4IBAQCPZrO2EvvkM5w9JA0s/q94UKTNFZujjYi4a0BmUKZG
IJGfjeIlurix2tZBez+ox7kT7c3XCYI6OSPwLKiQYyozn9XQsWgeNM3J5jUW9rST
grm23LHD8Ts7XD8wiwTOoWX56ZTr9ElXTo4dvSJc6HQEMsRMVVAR59eFSbqzYnK3
12A45guIhtGsXlcXjvSOxc9QPcZkwcOdEEYv8bQaX3Ya14YHrYkwu74TvmHvIyY+
0mUTUxmTnDPC3biungS4BcVIPQpebRQDGQQTQSdHz4LReapmFb8Jx1uMIOUQUfUO
oPf5fOgA+iN71lzsBA02u1If93oJc6kFd6wIZUaIKNBk
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:17 2025 by rpki-client