Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/nA9xLYDfBUMTndIiuMDxngVWqy8.roa
File: nA9xLYDfBUMTndIiuMDxngVWqy8.roa (raw, json)
Hash identifier: pXyFBd1rpI+yPoJu0gr4TIbRfkcbLlWRK75T9hWlGqk=
Subject key identifier: 9C:0F:71:2D:80:DF:05:43:13:9D:D2:22:B8:C0:F1:9E:05:56:AB:2F
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01950EA6BA5D79FE5CF6E71CEB16742D53C6
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/nA9xLYDfBUMTndIiuMDxngVWqy8.roa
Signing time: Sun 16 Feb 2025 12:06:02 +0000
ROA not before: Sun 16 Feb 2025 12:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
2a0f:ca80::/48 maxlen: 48
2a0f:ca80:1::/48 maxlen: 48
2a0f:ca80:619::/48 maxlen: 48
2a0f:ca80:1100::/40 maxlen: 40
2a0f:ca80:1337::/48 maxlen: 48
2a0f:ca80:1338::/48 maxlen: 48
2a0f:ca80:abcd::/48 maxlen: 48
2a0f:ca83:1337::/48 maxlen: 48
2a0f:ca84::/40 maxlen: 40
2a0f:ca86::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:a6:ba:5d:79:fe:5c:f6:e7:1c:eb:16:74:2d:53:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Feb 16 12:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c0f712d80df0543139dd222b8c0f19e0556ab2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:26:18:c2:80:3c:06:1c:cf:87:0d:85:64:
9f:d6:a4:35:23:2f:27:04:1b:23:17:8c:f0:03:cf:
a8:83:d0:12:cd:00:ca:30:91:7f:39:67:2c:0a:17:
35:2e:39:e7:5c:d3:13:30:67:a8:b3:65:a8:3e:70:
15:3e:f4:b0:e7:6a:4d:b7:de:2c:b5:35:3d:2a:f5:
de:db:c0:cc:01:4e:cc:4c:46:49:92:1a:e2:8e:c4:
72:a8:1d:84:02:0c:74:0b:b2:6d:eb:9b:97:2d:61:
ff:27:b4:c4:76:ff:26:4b:78:96:9e:ec:ec:5a:ef:
87:5f:60:7d:e9:3f:e5:77:4b:bd:86:65:35:b5:bd:
ef:1e:a1:3d:97:ac:54:27:f9:cf:e9:1c:f6:c7:bd:
3a:09:b4:df:41:1e:a0:db:fe:18:b2:48:e8:30:bc:
06:18:74:8c:75:c8:75:e7:d9:d2:6d:ea:8e:e7:d8:
6a:65:e4:58:1a:bf:d7:3e:6e:35:b2:a2:92:66:82:
a9:7e:21:d5:ce:8f:87:f1:fd:84:66:69:97:ab:6e:
45:21:8a:af:a3:83:21:5b:17:d9:e1:f4:35:cc:6d:
1a:1e:eb:83:e6:3f:91:27:fb:0e:be:ac:44:53:6e:
1a:ce:2c:95:57:37:ad:fa:4e:9e:4a:09:e8:ce:61:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:71:2D:80:DF:05:43:13:9D:D2:22:B8:C0:F1:9E:05:56:AB:2F
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/nA9xLYDfBUMTndIiuMDxngVWqy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80::/47
2a0f:ca80:619::/48
2a0f:ca80:1100::/40
2a0f:ca80:1337::-2a0f:ca80:1338:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:abcd::/48
2a0f:ca83:1337::/48
2a0f:ca84::/40
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
45:48:8a:01:78:ac:c3:99:04:b2:b1:9c:00:68:d3:f8:fe:42:
fc:9d:c1:48:b8:de:02:7a:23:13:ae:07:26:71:69:5b:6b:99:
61:c1:2c:62:be:72:b1:d7:c8:af:25:36:88:ae:49:1c:9e:cc:
41:00:9b:fc:e0:80:12:8f:24:e9:72:40:ce:ba:3e:03:df:66:
be:e0:b8:26:13:57:1c:c0:0f:00:96:cd:38:89:2c:0c:c5:99:
eb:42:9c:58:60:5c:91:bd:00:b1:35:51:75:99:2c:ba:32:1a:
f6:d8:a0:b5:6c:b6:ed:e4:a5:04:53:f7:08:67:7c:54:de:8c:
5e:c9:46:69:8c:be:8c:38:20:17:4e:64:c6:96:58:54:9a:a7:
81:7c:cf:e8:2f:94:79:8d:f7:fb:5e:79:75:f9:19:ec:31:3b:
f5:03:2e:85:18:17:0c:4e:fb:13:a9:c4:91:ca:9b:9c:39:65:
09:72:a6:e7:46:f9:05:16:e9:2e:c6:eb:e8:f6:ca:d6:be:6d:
44:f7:a2:19:0c:9e:e0:9b:02:01:7b:36:56:e7:bf:47:a5:a7:
03:5b:d0:06:19:2c:25:b6:f7:4d:3a:ee:c2:37:57:0b:36:b0:
98:62:ad:13:97:d8:2c:5b:de:ed:4a:ef:d5:f4:ab:4f:fb:9a:
46:31:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:12:31 2025 by rpki-client