Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/ngBNYl-whCyGIde-bD1GXnCv6tc.roa
File: ngBNYl-whCyGIde-bD1GXnCv6tc.roa (raw, json)
Hash identifier: jOzkj1FabBPArbWH4CC715VSys+dMBcuG0O5ZOY3nPU=
Subject key identifier: 9E:00:4D:62:5F:B0:84:2C:86:21:D7:BE:6C:3D:46:5E:70:AF:EA:D7
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 01942143989D0B7A7CA3D0C25B500CD13C74
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/ngBNYl-whCyGIde-bD1GXnCv6tc.roa
Signing time: Wed 01 Jan 2025 09:47:45 +0000
ROA not before: Wed 01 Jan 2025 09:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:98:9d:0b:7a:7c:a3:d0:c2:5b:50:0c:d1:3c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 09:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e004d625fb0842c8621d7be6c3d465e70afead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:fe:de:3e:09:67:07:e4:9d:40:e7:f3:83:
76:05:43:3f:61:f9:a3:ef:7b:c8:be:96:14:af:81:
ea:21:d4:39:28:4f:10:73:04:fc:9e:5a:61:45:32:
5c:41:ff:ac:03:f3:90:64:d1:fb:df:55:b4:e5:42:
a1:83:60:93:8e:e0:ad:19:2a:9e:b8:f3:07:2d:7b:
b1:c9:b6:7b:2f:91:17:36:07:9e:ae:46:71:a0:ca:
5a:0f:18:a8:ef:ff:7c:d8:64:c9:25:28:15:14:31:
d3:4c:29:0c:60:e6:8b:ef:3d:64:b9:e0:29:7c:2a:
7f:ba:66:b5:37:97:30:b5:d6:5f:6e:a8:7f:39:63:
b8:78:8c:0f:0d:25:0c:75:1b:c3:97:82:9f:03:1e:
20:9b:14:86:af:1a:9a:43:ce:09:21:39:94:09:3c:
02:a9:1f:c0:e7:55:59:89:81:ad:09:aa:14:a3:a5:
ab:3d:64:53:e8:20:a6:46:bb:01:93:c5:1f:7a:0d:
2c:1a:6f:f0:06:ae:3b:3a:17:d5:f5:c2:9e:26:e7:
e8:a5:2d:66:ac:d5:c4:ee:75:97:31:d4:2e:8a:7d:
ec:29:95:e1:0b:cf:7e:40:1d:e7:d3:26:08:a5:62:
fb:6c:01:87:e1:96:11:a6:d8:81:f6:37:f5:2a:4c:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:00:4D:62:5F:B0:84:2C:86:21:D7:BE:6C:3D:46:5E:70:AF:EA:D7
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/ngBNYl-whCyGIde-bD1GXnCv6tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
80:9c:5e:25:15:d0:0d:e9:0e:af:dd:65:52:dc:f4:ed:9e:0b:
7e:37:73:3f:36:89:ce:4d:51:c1:23:fe:65:95:d6:9b:75:c5:
09:03:fc:7e:ca:de:fb:34:cb:a7:23:a0:7a:85:20:7a:59:41:
27:27:4f:aa:f4:4f:1e:33:3c:7a:c6:26:61:cf:4a:dc:2c:91:
56:05:3b:05:2e:3f:2f:48:3d:02:a9:36:d1:36:47:fa:18:06:
27:2a:32:bc:d5:6e:9c:c9:45:bc:af:d9:08:86:d4:4b:c8:8f:
42:80:a6:45:b1:85:ba:46:ba:41:8e:09:cf:2c:67:e4:08:62:
c4:49:e3:9a:7d:f0:4b:e7:2b:96:54:dd:9f:27:fe:08:20:2b:
1b:03:11:f6:df:96:33:98:cd:8d:45:cb:8d:7e:da:e5:c0:5f:
27:3b:fb:7c:7d:87:a2:24:ec:cd:a7:b5:48:0a:fb:b2:96:c6:
0b:fc:44:fa:8f:22:9e:46:a7:ed:59:e1:66:ec:dd:54:79:60:
bb:57:72:48:67:8e:eb:79:c8:5a:04:8f:c6:81:2e:2c:56:24:
52:e8:cc:1d:04:32:c4:ef:5d:5c:c0:ee:7d:14:37:b1:8e:56:
8b:82:54:1a:38:fa:e0:33:3b:98:ff:f9:93:cb:45:a5:56:e7:
b2:10:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:52 2025 by rpki-client