Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/nELAq7KVOKa6z9lCfjWmlRCYE9Y.roa
File: nELAq7KVOKa6z9lCfjWmlRCYE9Y.roa (raw, json)
Hash identifier: GZU2CMN20uDxZJbh7627V+szffKMA2lxY+yxenfw7p8=
Subject key identifier: 9C:42:C0:AB:B2:95:38:A6:BA:CF:D9:42:7E:35:A6:95:10:98:13:D6
Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial: 018CC42513B2B12185E9D43E8ACC101A0FD6
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/nELAq7KVOKa6z9lCfjWmlRCYE9Y.roa
Signing time: Mon 01 Jan 2024 08:30:13 +0000
ROA not before: Mon 01 Jan 2024 08:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33943
IP address blocks: 84.19.64.0/19 maxlen: 19
2a0a:8380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:13:b2:b1:21:85:e9:d4:3e:8a:cc:10:1a:0f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Validity
Not Before: Jan 1 08:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c42c0abb29538a6bacfd9427e35a695109813d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:ef:de:48:b6:ab:0b:3e:3c:f7:f5:b3:6b:
e2:49:66:1c:e4:4c:6a:9a:ef:96:47:ee:41:f0:2f:
f0:1d:dc:77:b2:b6:44:71:e5:a7:67:5c:d0:9a:b6:
bd:87:42:98:20:6b:6b:eb:9e:f7:93:9e:15:e9:18:
f4:86:4c:73:e6:f0:72:e6:f4:f4:99:75:fa:8e:5d:
f7:58:b8:0d:8c:ad:e8:d6:4a:e9:f9:18:a5:21:a0:
31:e1:cd:91:6c:65:7b:a5:c4:b4:6f:16:d1:be:03:
4a:bc:0e:fd:af:05:24:4a:15:fa:56:c9:10:69:5b:
70:77:5b:16:2b:59:ba:05:2f:4b:a0:da:82:92:f0:
ae:7c:54:25:6d:31:0b:e8:e7:81:34:56:17:5c:83:
bc:42:f1:f3:58:cf:c5:ee:b5:f8:c5:8b:04:10:fa:
2c:a0:bf:bb:7c:9e:cf:5a:ef:07:0f:01:af:55:61:
4f:23:bf:72:60:cf:91:fe:8f:43:61:2d:85:1e:06:
31:92:f3:f9:21:79:b4:8d:59:d9:e2:10:9d:ae:52:
3f:33:ac:cd:28:20:88:d8:5e:6b:c2:ec:3d:a2:01:
97:06:00:cd:b2:96:36:20:b9:73:bf:dd:f2:f9:01:
67:dd:46:e4:70:3c:c2:90:85:2e:d4:f3:88:ae:66:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:C0:AB:B2:95:38:A6:BA:CF:D9:42:7E:35:A6:95:10:98:13:D6
X509v3 Authority Key Identifier:
keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/nELAq7KVOKa6z9lCfjWmlRCYE9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.64.0/19
IPv6:
2a0a:8380::/29
Signature Algorithm: sha256WithRSAEncryption
90:30:df:aa:60:1c:01:5d:33:56:93:b2:7c:11:e6:ac:90:87:
f0:6e:30:14:f2:ab:80:96:c8:98:c2:a0:54:89:a4:fc:21:5f:
87:a5:91:35:b3:b0:05:1d:e4:8e:25:8e:ed:72:af:5e:76:a5:
2f:1d:6d:bc:3e:2f:29:e9:39:56:17:40:89:9e:08:30:16:9c:
b5:0f:53:ca:98:9a:06:17:e6:4b:18:cc:05:e3:61:16:f8:b0:
a9:46:32:cd:03:4f:8d:ce:ac:aa:48:cc:b3:a8:1c:00:ee:c8:
c3:81:d6:ce:b9:02:dd:5d:3a:dc:c2:9c:9f:17:a3:19:02:4c:
69:45:0a:10:f0:01:95:c3:25:97:c0:de:b1:ba:88:52:44:6a:
48:14:bb:4c:fd:59:d7:2f:96:c0:c2:88:72:53:78:53:40:b5:
a8:9c:39:4b:eb:05:7f:8d:be:08:8e:48:99:7f:51:44:3c:0a:
6f:a3:4f:e6:90:82:92:f8:52:f2:05:b3:25:d6:bd:c5:86:6e:
f6:ce:55:74:dc:77:ef:a4:ff:b9:d6:c1:0a:ba:ea:cc:b9:0c:
44:64:1b:45:84:df:c8:0d:22:73:f4:bf:aa:ff:1c:3f:da:68:
fa:17:da:6c:e4:11:4d:83:c6:f5:0a:a4:7b:6d:90:62:af:de:
ff:16:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:36 2025 by rpki-client