Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nY2-XCw9E9kFNl8GpkFBNDuvt98.roa
File: nY2-XCw9E9kFNl8GpkFBNDuvt98.roa (raw, json)
Hash identifier: enEAnUkZnOPEdWYwm94osnXduxZMDFybI7/87u/K0/o=
Subject key identifier: 9D:8D:BE:5C:2C:3D:13:D9:05:36:5F:06:A6:41:41:34:3B:AF:B7:DF
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B230E448623973666C67C83C90F2C
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nY2-XCw9E9kFNl8GpkFBNDuvt98.roa
Signing time: Sun 01 Jan 2023 18:14:50 +0000
ROA not before: Sun 01 Jan 2023 18:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34941
IP address blocks: 185.236.10.0/24 maxlen: 24
194.110.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:23:0e:44:86:23:97:36:66:c6:7c:83:c9:0f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d8dbe5c2c3d13d905365f06a64141343bafb7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:bd:8b:a7:98:0d:8f:43:16:1b:e9:80:e3:
e5:ab:6a:3f:3f:b9:61:fa:8f:84:af:87:3f:09:33:
3c:f2:ff:4c:e1:76:9a:b8:20:c6:70:9b:3d:54:2c:
aa:43:2d:ce:da:6e:92:b3:90:8b:a9:3a:4e:f7:11:
53:9b:70:39:54:13:4a:97:13:90:0c:e9:94:6b:ac:
80:10:af:5a:4b:76:19:a8:90:d5:56:e2:82:9b:22:
c7:48:25:30:64:cc:a2:ab:50:79:23:42:bd:b2:b1:
fa:5d:29:46:ed:e5:21:dd:80:a6:38:b5:8e:e2:c0:
46:1b:e3:c7:fb:42:a2:b6:1f:9d:aa:84:72:14:88:
8b:05:42:5a:8b:75:50:64:83:d5:81:a2:49:de:c1:
0b:9d:8f:76:43:8e:68:0e:73:68:51:d8:28:70:50:
a1:8d:f6:5b:46:fa:19:95:36:52:2c:6e:78:ff:16:
3e:bc:a9:66:d8:1e:2f:eb:5f:5f:e6:56:83:19:ef:
71:42:e3:c9:53:94:1c:0c:31:9d:f6:65:8f:14:6f:
bb:32:50:1f:ab:30:9c:df:2c:0a:82:c9:4a:92:20:
c6:a2:a0:d1:66:4f:dd:9b:ff:21:a5:5c:1d:dc:24:
96:bc:d8:d0:57:c3:93:c7:b2:d4:55:e4:44:6e:eb:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:BE:5C:2C:3D:13:D9:05:36:5F:06:A6:41:41:34:3B:AF:B7:DF
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nY2-XCw9E9kFNl8GpkFBNDuvt98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.10.0/24
194.110.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7d:fe:e7:fd:45:1e:22:0d:5c:9a:c8:bc:93:19:29:57:26:
20:b2:cf:2d:94:d8:38:1f:6f:71:a0:7d:86:59:f9:10:ac:1c:
75:b4:ac:e2:a4:e8:2a:53:d0:f8:c9:43:59:84:08:98:37:05:
aa:9b:c3:4b:42:61:f0:a4:93:e0:20:b7:f7:a5:24:c4:e7:9b:
27:e9:7d:a9:10:20:a0:42:09:d4:8c:d2:bb:df:d6:78:df:cb:
8f:d0:a9:dd:79:cd:5b:0c:61:01:53:a9:96:41:d2:1b:f2:04:
67:c8:ed:c5:54:9a:d3:d1:c2:63:72:04:5d:9e:e9:35:7a:e8:
7f:c0:24:97:46:e8:5b:34:02:27:35:c2:cf:b1:24:e0:9c:a6:
81:ee:c9:6d:d7:f6:8a:61:6e:a5:c2:ff:3c:73:c0:30:33:ff:
28:a9:fd:63:25:70:ba:8d:20:72:70:1a:87:db:10:a0:38:2a:
ce:93:db:45:bf:b1:c7:0a:d0:8c:93:6a:b8:e6:09:d1:c0:86:
49:81:16:44:e3:40:51:65:cb:22:3c:b2:e8:63:ce:05:0a:1a:
a6:23:77:46:93:54:21:c3:9b:69:9b:5c:af:cf:b1:ec:0e:86:
93:06:23:6d:a5:3f:da:0d:e0:ae:f2:79:74:ba:d9:89:57:f3:
15:67:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:46:59 2025 by rpki-client