Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/NPdgFAHmLUivnqi_jKGLcf-eR6s.roa
File: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (raw, json)
Hash identifier: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=
Subject key identifier: 34:F7:60:14:01:E6:2D:48:AF:9E:A8:BF:8C:A1:8B:71:FF:9E:47:AB
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 01942144427725F246A840344CA8B2B05D51
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/NPdgFAHmLUivnqi_jKGLcf-eR6s.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2906
IP address blocks: 185.9.188.0/22 maxlen: 24
2a03:5640::/32 maxlen: 48
2a03:5640::/36 maxlen: 48
2a03:5640:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:77:25:f2:46:a8:40:34:4c:a8:b2:b0:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34f7601401e62d48af9ea8bf8ca18b71ff9e47ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:6a:cd:31:04:b8:13:ac:0a:d9:21:88:17:
d1:18:38:90:0e:f0:f2:a3:03:d8:f8:44:dd:5d:1a:
cb:dd:fa:eb:c1:73:43:dc:5a:8f:6f:65:23:a7:57:
ec:90:2f:ba:43:7d:7c:81:4a:9e:e2:b8:60:78:7b:
2a:bc:12:1f:e7:44:f6:9f:3d:f6:3e:38:98:3d:ab:
29:c2:45:ec:13:54:83:7c:98:3c:3c:3f:9c:5f:3b:
02:8e:c4:92:6c:99:8c:56:84:13:c6:d7:ab:0e:78:
83:51:e5:d0:d7:6f:91:7c:05:c0:86:fe:d8:36:a7:
8c:a6:a0:84:07:f4:cb:f1:00:8b:d8:d5:f8:41:75:
71:78:03:e3:9b:fc:32:ba:8e:68:13:4c:28:96:4f:
96:56:d6:9e:d5:cc:3c:d7:1b:fb:f4:c4:0f:db:80:
43:f5:5a:6e:c3:a1:85:4a:aa:bb:f2:f9:18:d2:47:
64:c6:90:25:d6:c8:5a:f1:d5:91:cd:d8:70:3b:7b:
4f:5f:d0:aa:b5:b2:22:8f:ab:2e:03:4b:a6:ea:77:
33:ce:86:17:3b:92:d5:b7:06:eb:1b:e1:9c:45:0d:
14:ca:91:71:29:fc:15:15:41:54:65:0c:79:20:b3:
a2:39:59:8a:ea:47:fb:fb:cb:5e:93:78:66:d4:dd:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:60:14:01:E6:2D:48:AF:9E:A8:BF:8C:A1:8B:71:FF:9E:47:AB
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/NPdgFAHmLUivnqi_jKGLcf-eR6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.188.0/22
IPv6:
2a03:5640::/32
Signature Algorithm: sha256WithRSAEncryption
5b:af:f2:07:c4:a3:9b:93:c0:52:0d:f5:21:bd:ce:52:5a:38:
ac:0b:ac:71:d7:7f:b0:84:72:56:41:08:55:41:30:b6:ee:60:
f3:0c:a2:98:7b:09:dc:73:6d:68:69:8b:41:89:84:71:6f:74:
10:10:b8:b0:61:eb:3e:9a:8b:34:42:79:b5:7b:57:d7:16:ad:
3a:2b:49:e8:6e:2b:ba:31:db:30:62:a2:42:4c:26:cc:22:f2:
46:6c:28:63:1c:46:3a:3e:da:b8:f7:2c:85:cd:23:17:37:bf:
47:9f:4a:ea:d9:68:e6:ca:11:05:1d:e3:fd:68:7f:f1:66:a7:
ae:95:55:28:5e:1d:a1:90:e2:9e:cd:96:ee:3c:fe:44:7b:99:
e2:90:3d:ac:33:65:9e:b3:f4:a3:9b:ba:c4:33:a5:b0:8e:e8:
2e:30:3b:e1:1b:35:26:a8:e1:e8:53:7e:06:54:cc:86:f3:4f:
83:17:17:e1:98:4a:2f:55:fb:0f:87:33:a8:3e:83:4e:ae:59:
16:1c:70:da:18:ee:e8:b1:5f:2e:4e:6d:eb:88:03:ef:70:f9:
2f:d9:ac:a4:36:ae:57:c8:e4:eb:ec:b4:30:06:d5:d7:77:3f:
a1:83:f9:9f:66:f0:9b:cd:5d:b8:d9:3b:e9:81:78:bf:aa:a0:
ac:dc:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:26:35 2025 by rpki-client