Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Na9AB4simKTeiSMbG-GW_DXwi_c.roa
File: Na9AB4simKTeiSMbG-GW_DXwi_c.roa (raw, json)
Hash identifier: an3p2CLqgatG87PnqR7ldZwwWoy4Lx+YfzliYxq+8qA=
Subject key identifier: 35:AF:40:07:8B:22:98:A4:DE:89:23:1B:1B:E1:96:FC:35:F0:8B:F7
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4CCEE03AC083E8C5C76DF55AEB07
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Na9AB4simKTeiSMbG-GW_DXwi_c.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200325
IP address blocks: 185.190.83.0/24 maxlen: 32
194.156.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4c:ce:e0:3a:c0:83:e8:c5:c7:6d:f5:5a:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35af40078b2298a4de89231b1be196fc35f08bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:6e:ff:14:e3:73:55:ba:a6:00:76:74:15:
a8:6b:4a:7b:04:5f:37:13:09:d3:51:29:22:cb:bc:
51:b5:93:74:05:62:23:8e:4d:1c:3b:18:cb:19:d9:
95:a4:22:d0:d5:0c:06:d3:fe:b9:e8:c5:a3:54:5c:
8c:92:ea:cb:d8:60:94:6e:56:c1:33:fa:87:e5:de:
b6:ee:64:d7:c6:a0:d8:63:0b:85:30:21:7f:25:ae:
ae:30:51:36:77:c7:e6:26:dd:b7:0e:0e:7d:3a:57:
82:17:e3:db:84:66:15:5b:59:0c:9e:71:bc:20:6e:
a0:8e:6d:93:09:a4:5b:42:00:96:bf:a2:8d:3c:02:
11:e5:d7:46:1e:4a:e7:e9:9f:d0:af:f2:79:0f:06:
58:0f:2b:54:36:2f:03:29:1f:e4:d6:91:1f:72:f0:
46:69:db:52:15:b3:a6:d8:cb:0b:e1:0e:66:cd:8d:
53:43:d2:3d:94:d5:6e:92:5e:8b:d1:3c:ec:c6:77:
26:6b:2e:0e:3b:52:0a:f7:d6:1b:54:0e:5d:29:02:
d2:63:21:68:94:df:32:6d:1f:50:4d:85:b5:de:a4:
56:75:27:4e:4e:23:91:8d:4d:43:04:07:ab:2c:a6:
9d:d7:1b:90:03:be:e7:cc:12:71:4f:4d:f0:d4:a9:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:40:07:8B:22:98:A4:DE:89:23:1B:1B:E1:96:FC:35:F0:8B:F7
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Na9AB4simKTeiSMbG-GW_DXwi_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.83.0/24
194.156.156.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5a:e7:98:1e:fd:6c:f1:13:94:e1:91:5e:68:04:79:0e:4e:
ea:e3:01:a7:73:c2:41:21:da:35:25:46:5e:76:51:27:09:bd:
41:72:11:eb:cc:8a:6e:99:c9:84:75:be:ce:ac:a6:b5:df:6d:
e7:44:df:0f:04:0b:94:62:ed:2f:a4:23:32:b8:c9:73:19:45:
01:7d:e1:16:6a:cd:51:3d:43:8b:63:b4:7a:2e:c1:da:43:36:
bd:38:74:ea:51:22:1c:1f:52:af:79:89:4e:d1:b4:b8:4a:28:
cb:da:8a:06:80:1b:b2:17:de:78:81:81:f1:f0:59:b8:71:71:
e4:1a:81:ee:96:de:82:20:c4:ff:47:45:75:31:b4:8a:6d:0d:
68:5d:48:86:f3:3b:f6:7b:a9:2d:fd:5b:b1:15:49:40:4d:c8:
2a:86:ed:88:8e:29:1f:9c:99:6f:ed:a5:98:f2:b3:6f:f3:03:
d1:26:05:0a:88:4a:1c:98:69:5e:08:96:d9:ec:32:1e:8e:ab:
9b:be:10:cf:79:9b:83:96:39:c7:a1:39:f9:ec:f4:16:f5:53:
11:41:37:27:85:02:f9:1b:74:df:fa:67:d3:e5:1e:ea:b9:e5:
7a:87:f5:7f:71:72:5c:c9:f1:e8:e2:92:77:c8:3c:5a:ab:08:
2b:1c:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:36 2025 by rpki-client