Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/NIY8ijVihx-wlwpRYCwhPptrVgA.roa
File: NIY8ijVihx-wlwpRYCwhPptrVgA.roa (raw, json)
Hash identifier: N5rfwmwxuZqh88e+RCdJHN1O08qIFR9/l36B51sHikQ=
Subject key identifier: 34:86:3C:8A:35:62:87:1F:B0:97:0A:51:60:2C:21:3E:9B:6B:56:00
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 322D3681
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/NIY8ijVihx-wlwpRYCwhPptrVgA.roa
Signing time: Sat 01 Jan 2022 05:05:57 +0000
ROA not before: Sat 01 Jan 2022 05:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 213.174.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841823873 (0x322d3681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jan 1 05:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34863c8a3562871fb0970a51602c213e9b6b5600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:3a:05:b8:4e:9a:e8:b8:7e:4d:03:88:02:
93:14:fb:e3:1a:e6:37:14:fd:69:09:f0:be:e7:6a:
7f:52:a1:e0:06:3f:7f:12:7d:3e:f3:18:40:ca:f7:
74:96:73:59:c2:73:db:3d:99:8a:43:cc:73:8f:62:
08:75:ad:a4:9b:14:df:dc:86:47:f5:5e:db:69:76:
be:91:79:54:e8:35:b8:7c:5e:e8:34:7f:ea:00:99:
07:07:23:83:cb:bc:75:a1:b1:65:d2:23:3f:82:a1:
57:7c:1b:42:d3:9c:ff:13:27:b9:35:da:67:fb:49:
cb:5c:33:4e:dd:6e:17:51:04:26:aa:6b:ce:7c:1c:
2e:e2:75:64:86:c2:14:30:d7:ec:5a:39:9b:a5:9e:
c3:4f:1a:37:14:e2:ec:e5:24:9d:07:ce:1e:b5:10:
c5:db:c5:1a:7a:6e:5f:a1:b7:ba:92:c9:20:26:10:
4c:a7:a9:3b:b0:01:ab:4c:1e:95:8c:f1:0f:ae:d0:
f9:90:fe:4c:df:99:e5:97:24:37:e8:9b:02:a6:fc:
76:c4:b1:74:f6:86:da:9e:94:aa:9e:38:ef:cc:49:
25:c1:1d:2d:c6:9a:64:aa:9f:c2:b8:2d:3c:de:3b:
7c:e9:7b:07:12:23:8d:6c:1d:56:05:ae:89:f3:1e:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:86:3C:8A:35:62:87:1F:B0:97:0A:51:60:2C:21:3E:9B:6B:56:00
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/NIY8ijVihx-wlwpRYCwhPptrVgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.174.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:44:9c:34:d5:1a:4d:a2:2c:b8:07:c7:9d:7f:9b:2d:b3:fd:
94:f6:b9:41:c3:1a:37:71:8a:b0:75:fe:16:b1:ea:01:02:f6:
6f:67:6b:1a:a2:2b:72:9d:35:34:d7:6f:a3:88:90:ed:64:2c:
ca:da:18:a5:59:9d:81:c4:df:aa:50:b8:3a:61:42:16:88:21:
6d:e2:bf:8f:7e:69:47:47:eb:ec:58:ce:17:ee:a6:45:88:8b:
35:fb:40:bc:59:c8:9f:58:ad:f9:60:9a:84:7e:8c:37:7b:b0:
0f:90:a6:98:a6:6b:5c:81:78:a1:fb:44:bd:a4:1f:09:90:4f:
be:b9:f0:69:58:f3:a1:65:22:c0:93:10:2b:40:ca:bf:b5:26:
ef:54:14:57:c2:ea:d1:3a:e8:9f:57:33:6f:70:cd:a6:95:33:
3a:cc:20:0d:19:59:ac:7f:a6:c0:67:be:2b:69:42:95:ca:12:
7c:fc:9b:df:a4:a9:62:71:54:09:97:b0:1b:15:65:c3:1a:fc:
d1:bc:ee:fd:01:5d:b1:82:3d:c9:c1:d5:02:82:21:63:9e:9f:
91:34:e1:37:c7:04:e8:ed:90:fa:6b:29:e8:71:ec:b3:e3:82:
d7:f6:e4:e7:0c:10:fe:ce:fc:59:c7:ca:5f:9f:c4:cd:da:e4:
c0:d6:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:46 2025 by rpki-client