Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NU3TYh76tOjIBZQj9MumCFTUZzM.roa
File: NU3TYh76tOjIBZQj9MumCFTUZzM.roa (raw, json)
Hash identifier: GvOBaSKuJjPpdev6CaLvv9s5iIQnf/FKVCptv4BwgOo=
Subject key identifier: 35:4D:D3:62:1E:FA:B4:E8:C8:05:94:23:F4:CB:A6:08:54:D4:67:33
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486FE856B5267191F5D1DEA6C66DB4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NU3TYh76tOjIBZQj9MumCFTUZzM.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202671
IP address blocks: 193.235.128.0/24 maxlen: 24
194.68.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6f:e8:56:b5:26:71:91:f5:d1:de:a6:c6:6d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=354dd3621efab4e8c8059423f4cba60854d46733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:e4:ea:03:62:04:12:1b:89:cf:96:67:6d:
cc:dc:b8:f8:81:b5:9f:a2:e4:52:d9:0e:68:5c:42:
db:e4:63:2c:c5:b3:92:ba:7a:79:67:82:a6:ec:df:
e3:46:9c:1d:2b:49:86:43:bd:4e:78:67:66:f9:c8:
fc:df:6b:ea:94:ca:4f:56:4e:9b:bd:64:38:93:11:
7b:86:37:10:3f:89:a4:a3:02:37:48:bc:c5:e0:37:
a1:29:53:94:92:5a:0b:c9:af:1f:10:3e:c5:93:41:
15:62:fb:13:c8:c1:d2:a7:13:55:91:5b:4f:48:b7:
eb:7e:0b:7b:98:0e:0f:c9:5a:42:59:bd:30:83:87:
6d:0d:41:64:db:b1:33:ae:6d:8f:fe:60:e9:5b:4d:
2c:e5:ef:bb:8f:f7:f2:a6:56:f6:bb:05:8e:3b:63:
95:ea:fd:d1:e0:64:57:1b:2e:27:eb:38:e4:d4:7c:
e8:10:c3:b4:dd:04:68:ac:a7:2a:6c:85:96:c8:7c:
ee:f8:92:64:9f:9a:3e:08:5e:5f:5d:37:93:82:02:
48:d7:2a:90:ff:4a:3e:d6:a2:13:61:83:23:a8:fb:
9b:45:bb:3b:88:7f:03:bf:3c:8f:6d:c3:89:58:26:
70:f0:e4:51:1b:2f:a6:e9:8f:b8:8d:40:83:1d:1a:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:D3:62:1E:FA:B4:E8:C8:05:94:23:F4:CB:A6:08:54:D4:67:33
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NU3TYh76tOjIBZQj9MumCFTUZzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.128.0/24
194.68.64.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b0:40:ff:50:ed:7c:63:b7:bb:1d:fb:ff:61:95:3f:ae:8c:
b4:6f:59:42:7c:cd:54:5c:22:a1:2a:01:df:f2:f0:5d:62:9a:
43:94:e9:6b:43:94:3f:64:56:77:8a:c0:cb:27:3b:18:54:83:
e5:ac:67:92:1b:a3:25:28:c6:c4:0c:8c:31:da:be:2b:1f:9f:
be:f5:05:93:17:3e:0e:c9:36:28:a6:f9:30:80:1c:68:d0:ed:
52:99:24:d8:99:4b:26:e8:68:a5:02:d1:0c:40:7a:f9:70:8d:
e4:44:96:22:ef:4f:27:f2:06:14:98:27:dc:fc:d5:a3:ac:c4:
45:46:36:50:eb:54:17:13:56:7d:0a:b3:86:ad:db:cf:98:55:
94:c5:cb:fe:4f:65:f8:05:97:8b:9f:ca:82:8f:7c:e5:9c:71:
f4:96:af:e0:b2:ae:49:08:76:db:e8:87:d8:65:79:bf:32:97:
23:43:6c:51:a1:4b:e7:71:aa:a0:32:03:a5:31:02:40:d4:87:
83:81:79:cf:1e:84:44:e2:31:8d:69:84:ab:17:db:53:c8:02:
5c:be:57:ce:65:58:13:31:61:cf:7a:02:ec:56:ab:ad:65:49:
7d:bd:d3:6f:c9:0d:74:56:e0:d5:63:97:8d:7a:cf:db:75:70:
e9:48:35:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:01 2025 by rpki-client