Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/9NPwe5Cch9DKsApne4lBck33dDg.roa
File: 9NPwe5Cch9DKsApne4lBck33dDg.roa (raw, json)
Hash identifier: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=
Subject key identifier: F4:D3:F0:7B:90:9C:87:D0:CA:B0:0A:67:7B:89:41:72:4D:F7:74:38
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 019421B23F77BE579E0914A613AA6554B82A
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/9NPwe5Cch9DKsApne4lBck33dDg.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49969
IP address blocks: 195.211.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3f:77:be:57:9e:09:14:a6:13:aa:65:54:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4d3f07b909c87d0cab00a677b8941724df77438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:fe:1c:89:56:91:a0:91:4b:9c:43:62:60:
fc:24:ed:62:a6:81:cc:2a:ec:23:76:91:17:f8:98:
84:65:06:68:d5:48:c4:ef:7b:43:d4:90:56:37:8d:
05:fd:92:78:7b:5f:1e:b9:6a:14:7f:7c:42:f2:f5:
71:6c:8f:32:11:8f:d6:db:41:2f:c3:a9:95:fe:fa:
1c:d8:c5:93:fd:b9:45:3d:72:0e:6d:45:0f:19:cf:
87:5b:77:bb:a4:da:93:56:71:71:c2:7f:1e:3d:b5:
51:92:49:5b:2d:1c:db:0c:7c:bf:88:a1:68:f2:8f:
ca:45:8a:0a:59:d2:af:38:93:93:fa:0e:2b:ec:b4:
cb:f0:e3:67:f6:47:06:30:cb:64:1b:73:00:98:a5:
79:14:ab:33:f8:9a:17:05:59:15:8c:6b:b4:46:51:
a1:15:f2:a0:d2:d9:9e:c0:75:03:74:96:ad:44:aa:
36:08:6f:d9:54:18:1a:af:d2:84:34:0a:21:16:a0:
25:c9:33:4b:1a:59:4b:74:1d:ab:43:a4:e6:c6:ff:
79:96:d4:4c:9c:35:13:68:9b:15:36:7b:cd:a0:f7:
99:bf:2b:17:04:52:1d:c1:9d:ab:ce:9f:14:d3:b6:
7b:19:93:ee:79:cb:07:f1:21:4d:6e:09:c7:49:9a:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:F0:7B:90:9C:87:D0:CA:B0:0A:67:7B:89:41:72:4D:F7:74:38
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/9NPwe5Cch9DKsApne4lBck33dDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.132.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:96:89:80:9e:00:d2:24:24:64:67:c9:5b:79:23:a4:32:97:
e8:9e:fc:0f:2e:45:90:60:d2:48:ef:17:69:1a:8a:6e:6e:e0:
8e:e2:da:b4:99:b3:c9:37:f5:e5:1f:90:99:70:4e:1b:c2:60:
ec:d3:a3:b2:55:a4:55:9d:3e:aa:f1:d6:9a:61:45:45:81:d6:
69:19:b0:9d:cf:a6:74:b0:22:b3:5f:0e:53:73:bf:87:00:fc:
2a:ec:cf:48:1d:3d:69:cc:15:60:a6:3e:2b:6c:cb:7e:5a:c9:
27:8f:ae:6d:9e:62:3a:02:af:d6:15:7d:fe:62:cf:bb:d2:41:
20:a4:b1:36:db:d5:05:9b:2e:8f:7d:0e:a5:cd:61:99:11:a3:
5a:d7:bb:27:bb:63:31:f3:4d:86:c4:0f:5f:ce:b5:c7:97:09:
06:60:08:86:e4:bf:80:40:e7:aa:5c:6a:07:e5:3e:15:53:40:
15:f1:49:5a:e5:e3:ba:92:f0:e0:e9:61:b0:c5:c4:5d:7e:b0:
7d:07:e8:5a:2c:04:92:2f:99:10:a1:7a:1a:91:4d:41:18:13:
db:e1:6d:c9:a4:54:91:c4:92:2c:03:fd:8d:0b:1f:d2:9b:3b:
d8:f1:20:46:37:cd:90:47:7e:2e:c2:87:b2:72:db:74:a5:4c:
f7:e8:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:21 2025 by rpki-client