Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NJy1N50-c7WQd62bK6vmnpK6HR0.roa
File: NJy1N50-c7WQd62bK6vmnpK6HR0.roa (raw, json)
Hash identifier: /2U4ggKitrVLa37M7CP/HP/ALO4urTvcx5qHn1CG3cY=
Subject key identifier: 34:9C:B5:37:9D:3E:73:B5:90:77:AD:9B:2B:AB:E6:9E:92:BA:1D:1D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483F94E0543B24D9A40935530C4BD4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NJy1N50-c7WQd62bK6vmnpK6HR0.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8674
IP address blocks: 192.36.144.0/24 maxlen: 24
192.71.53.0/24 maxlen: 24
192.71.80.0/24 maxlen: 24
192.165.72.0/24 maxlen: 24
194.68.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3f:94:e0:54:3b:24:d9:a4:09:35:53:0c:4b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=349cb5379d3e73b59077ad9b2babe69e92ba1d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:9a:d3:1c:43:6c:7c:78:7e:d5:b2:73:f3:
df:9f:df:91:a1:b3:7b:78:7b:3d:29:ce:8c:6a:41:
d4:64:e1:0f:96:79:cf:ff:59:17:be:c2:1e:e7:2b:
47:5e:08:6d:5f:31:a8:34:0d:a7:9a:fb:92:49:32:
0b:09:96:9c:85:bd:11:91:ab:d4:1f:a5:fa:3f:26:
d2:2b:e0:b6:ed:99:0d:55:5e:45:9c:f1:0a:85:ca:
42:5e:e3:c3:f3:ec:ba:73:02:99:9d:1d:f4:2a:0f:
52:45:e6:02:4b:d3:2b:19:4f:98:dd:b2:3c:5b:01:
ee:ae:f7:d4:a9:23:cf:ed:2d:03:a8:ee:26:01:ca:
8f:77:c0:a3:1c:d5:5a:6f:79:e1:6f:e1:b9:65:c2:
46:e9:0a:7b:66:26:bc:da:d7:98:f0:63:68:5c:7c:
ac:88:cf:71:9e:4d:f1:0d:d1:f7:a9:b0:8d:a6:80:
82:92:70:6c:7a:f1:40:14:ba:e8:37:c3:f6:b7:f3:
87:a8:53:83:18:8e:83:48:8a:bd:e0:f1:3b:36:e4:
a1:ed:a9:f0:75:9b:d4:1a:1f:2b:7e:a0:37:2a:17:
16:f5:e7:84:4f:9b:e7:9a:95:d6:40:14:9e:77:e3:
d1:77:ad:10:e6:ff:4c:60:af:9a:9f:6b:46:9e:c5:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:B5:37:9D:3E:73:B5:90:77:AD:9B:2B:AB:E6:9E:92:BA:1D:1D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NJy1N50-c7WQd62bK6vmnpK6HR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.144.0/24
192.71.53.0/24
192.71.80.0/24
192.165.72.0/24
194.68.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8f:de:c4:45:72:52:d5:e1:04:d7:70:4c:36:ab:7e:99:4a:
f6:f8:6b:61:40:ed:f6:fc:72:4d:33:d3:03:f7:03:17:c3:38:
b6:e6:16:bb:26:a4:14:ed:b5:af:7f:92:15:28:f7:6d:cc:dd:
71:bc:cf:98:d9:8b:31:78:a5:59:88:4a:05:7d:68:5e:e4:e9:
e1:0f:4c:ce:85:c7:4f:52:85:22:94:f8:23:3d:47:5a:a5:d6:
58:50:e7:4f:78:af:1a:7c:c4:f2:0f:05:f5:d1:a2:82:32:c6:
4d:4a:84:70:fa:f8:59:a8:a7:03:a9:ae:90:bd:00:0d:61:ad:
69:4a:28:15:84:ab:ce:b1:1b:6f:13:ae:3a:ec:72:86:e8:9d:
cb:56:7f:fd:87:75:fc:ee:fe:a9:e8:8c:86:27:8b:8c:09:47:
5a:3b:40:68:9b:71:8c:24:77:bf:b8:48:18:57:39:c4:92:31:
a2:2a:34:ba:98:1f:a9:1f:62:83:bf:7d:92:c8:0b:1e:06:ba:
ae:1a:6e:0f:41:b4:7f:53:91:87:a6:09:4f:d2:69:77:7b:9c:
bf:a2:36:1b:60:b4:da:7f:ef:63:32:b6:69:12:b9:38:68:2a:
1e:a8:3e:8a:4c:eb:83:3a:74:29:bf:74:08:0f:1c:1a:e8:cf:
bd:87:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:06 2025 by rpki-client