Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/NMtN6-jQsDad-QCPXfONidQIjVU.roa
File: NMtN6-jQsDad-QCPXfONidQIjVU.roa (raw, json)
Hash identifier: Ss7ok81CifQos0VFoAKnIt1TQWszn2wURYWII+ubfL8=
Subject key identifier: 34:CB:4D:EB:E8:D0:B0:36:9D:F9:00:8F:5D:F3:8D:89:D4:08:8D:55
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 01946DF826605F859A6EBDD1390C7836F380
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/NMtN6-jQsDad-QCPXfONidQIjVU.roa
Signing time: Thu 16 Jan 2025 07:16:06 +0000
ROA not before: Thu 16 Jan 2025 07:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 84.17.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6d:f8:26:60:5f:85:9a:6e:bd:d1:39:0c:78:36:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jan 16 07:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34cb4debe8d0b0369df9008f5df38d89d4088d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:ea:b6:77:b4:c4:ee:96:7c:72:ad:3c:d7:
aa:67:3b:aa:f8:11:05:bf:7f:b0:05:30:b9:9b:eb:
60:e1:e8:c5:09:48:35:c2:df:10:e8:b5:f7:e2:36:
33:dd:1a:e1:2a:ff:d4:10:90:77:87:3a:2f:35:e7:
4f:14:11:2a:c3:c0:85:b2:64:73:d0:c8:a6:dc:83:
8a:24:d7:51:2c:68:3d:1a:42:09:ab:ae:a8:62:6c:
ad:fe:df:26:f6:2a:08:11:fb:72:f9:cb:f0:b9:c2:
12:e5:4d:f3:43:4b:4f:15:10:a7:78:78:d6:00:b5:
b7:86:f4:29:5d:a2:51:6a:3a:28:c6:ca:d1:90:23:
ca:93:c0:24:9c:91:3b:c5:b6:2b:de:ab:4a:54:f8:
be:cd:72:c5:c9:00:8e:d1:b2:29:d7:3e:fa:a3:d1:
12:a8:ae:da:dc:8f:1d:b3:81:26:fe:f5:3a:5e:c6:
8c:48:f5:e4:bb:6a:92:ae:05:1f:4b:a1:62:04:13:
73:e2:c9:e0:d9:e0:ca:af:3c:bf:39:04:8e:cb:38:
22:48:8f:59:5f:ef:b4:00:f0:86:eb:7c:c7:e2:01:
13:7b:63:39:d2:82:13:72:46:8e:0a:44:56:c2:fb:
60:13:6a:5e:01:86:f1:22:e3:3b:74:6c:12:b9:35:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:4D:EB:E8:D0:B0:36:9D:F9:00:8F:5D:F3:8D:89:D4:08:8D:55
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/NMtN6-jQsDad-QCPXfONidQIjVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.78.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6b:a8:f7:f7:b1:11:59:4a:9c:e2:00:f6:90:bb:fb:f2:76:
c6:66:e8:28:9a:19:73:47:cb:77:0c:c9:d7:06:92:fa:34:0d:
b1:8a:a9:18:1b:e0:18:26:0c:30:59:f1:c5:52:6c:0d:ee:b8:
16:0c:f9:87:3c:60:20:e2:01:9f:da:1f:06:a0:c8:c8:4e:77:
c7:4d:e0:76:cd:d3:bf:f6:19:51:9d:1c:4f:32:a0:7c:ec:54:
24:44:57:8f:50:ec:81:44:f1:be:e5:05:c3:84:dc:46:49:10:
7e:74:c3:56:fb:66:ea:58:37:5d:24:98:9b:19:37:3a:36:3a:
01:4d:8a:ca:0a:6b:db:ba:f1:19:59:1e:1c:69:12:60:03:2f:
1b:f3:f6:4a:58:f3:69:d7:6a:68:45:1f:85:a5:c9:65:77:f0:
ce:75:50:2b:35:ea:2e:8e:fa:aa:30:bc:08:cf:f1:f4:2b:14:
93:53:57:9c:61:3d:99:76:27:76:7a:2d:f2:73:0c:7f:37:3e:
de:23:f9:64:a2:21:65:3c:79:6f:f9:41:6a:3c:da:96:9d:e1:
d6:18:af:fd:b2:ff:76:4d:47:e2:b7:84:4d:d9:e0:6c:cf:bc:
9b:5d:fe:e0:45:2b:65:8c:2d:87:91:66:76:23:20:5b:b2:74:
d4:75:87:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:14 2025 by rpki-client