Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/nxjwQzR_g0NkuNQhX0IcgXIHyS4.roa
File: nxjwQzR_g0NkuNQhX0IcgXIHyS4.roa (raw, json)
Hash identifier: 8t0ndYFl2joKPlGUWosmxZGhBJM3lCwL1cJCWtuXic0=
Subject key identifier: 9F:18:F0:43:34:7F:83:43:64:B8:D4:21:5F:42:1C:81:72:07:C9:2E
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 0193BFE62E9B7FE33F8C115E2592A1A8D813
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/nxjwQzR_g0NkuNQhX0IcgXIHyS4.roa
Signing time: Fri 13 Dec 2024 12:02:33 +0000
ROA not before: Fri 13 Dec 2024 12:02:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 91.223.95.0/24 maxlen: 24
2a0e:9640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:e6:2e:9b:7f:e3:3f:8c:11:5e:25:92:a1:a8:d8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Dec 13 12:02:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f18f043347f834364b8d4215f421c817207c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:af:e9:72:fb:91:67:51:d8:81:46:14:a0:
36:5a:39:93:ef:71:ba:05:ad:70:ca:cc:73:8b:0e:
ef:b5:f7:da:7b:8e:48:d7:1b:47:7a:2f:c9:3c:e5:
6f:28:10:25:cf:5c:3c:35:b8:82:b4:35:e7:88:e0:
ea:ff:96:e3:20:ec:68:7d:58:86:9d:0c:d5:8e:7a:
d6:bc:33:21:af:39:57:43:98:e9:19:be:a0:e2:f3:
ba:20:a1:d8:cb:a4:b9:27:c1:e5:ba:92:f4:ec:d8:
71:2d:3a:5b:c4:28:a3:3a:37:85:8e:80:06:04:b3:
e0:a6:73:cf:d9:3a:f3:77:26:c8:f3:48:5c:6d:b5:
1b:ce:82:e0:0c:15:54:94:9e:e3:84:80:e8:9b:b8:
10:db:06:4e:60:bf:16:03:8f:85:95:2d:1d:12:4a:
11:4a:bd:c4:f4:44:ee:1d:08:e9:61:21:02:ca:9a:
24:44:df:d6:9f:ba:f7:c4:d4:d5:9a:f0:00:1c:4f:
4c:5c:9f:b9:b1:5b:d5:c1:7d:8e:3f:0b:2b:11:99:
99:c0:7d:0f:fd:3d:82:c6:14:d4:53:45:f5:22:a3:
a9:fd:5d:dd:95:7c:d1:93:7b:c9:a5:bf:5f:4a:27:
a0:d8:ed:79:5a:de:d4:6a:40:c5:f6:d8:bc:40:b9:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:F0:43:34:7F:83:43:64:B8:D4:21:5F:42:1C:81:72:07:C9:2E
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/nxjwQzR_g0NkuNQhX0IcgXIHyS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.95.0/24
IPv6:
2a0e:9640::/29
Signature Algorithm: sha256WithRSAEncryption
05:d6:80:c9:bf:26:2c:aa:bb:b9:14:14:b4:dc:89:01:02:e1:
c4:54:de:52:e5:49:cf:0c:f5:57:3e:7e:86:e2:10:42:5c:04:
50:10:6a:2c:8a:44:7e:97:5f:56:c6:90:73:f0:45:a9:4c:71:
49:d1:94:6f:d6:02:c6:65:44:11:4e:ba:fb:90:67:00:48:8d:
33:f3:b0:28:d8:ac:c1:0c:de:b0:d7:e5:13:96:6a:31:f2:02:
09:90:6b:ec:67:59:21:8e:a6:50:2e:db:89:a1:47:82:4f:2b:
c8:22:14:2e:8c:2c:04:55:d8:b4:06:4b:f7:19:b1:26:7e:15:
88:e6:a8:8f:57:ab:6c:41:f4:3c:56:62:aa:a1:7b:38:e4:84:
e9:fc:00:35:b9:44:2c:c6:7d:27:f1:bf:76:e2:8b:40:42:bb:
02:85:1e:a8:fb:cb:c4:88:ac:0e:a7:b8:13:e1:04:40:06:4c:
48:97:63:fc:8c:80:15:58:49:36:1c:79:fd:61:8d:d8:3c:ce:
1e:76:8c:35:af:1c:c6:1b:96:27:11:26:37:bb:7a:1f:67:47:
f9:a4:60:c4:7d:b7:93:92:1d:67:e4:84:aa:c7:b3:b0:6f:d1:
2e:66:77:fc:3f:7f:e9:95:fb:e8:5e:88:5d:27:79:5a:5f:21:
de:9a:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:12 2025 by rpki-client