Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa
File: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (raw, json)
Hash identifier: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=
Subject key identifier: 9E:A7:02:36:55:8E:6B:1C:C1:4B:A5:7F:89:1A:44:C2:49:3E:C4:3E
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 01942746C6F289C57F600A97DA6E106984D8
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa
Signing time: Thu 02 Jan 2025 13:48:57 +0000
ROA not before: Thu 02 Jan 2025 13:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52012
IP address blocks: 192.109.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:c6:f2:89:c5:7f:60:0a:97:da:6e:10:69:84:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jan 2 13:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea70236558e6b1cc14ba57f891a44c2493ec43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:84:49:bd:12:da:62:8d:00:59:f5:08:88:
70:18:c9:71:a9:30:93:2c:fc:0b:80:0f:6e:31:3e:
3c:63:c9:a3:30:2a:13:06:22:4e:14:20:3e:e2:51:
3e:bf:3f:78:76:30:52:0d:ad:1b:3c:7e:5e:92:33:
8a:70:93:61:3f:fc:f2:99:b6:c3:19:df:08:4e:e1:
d6:86:67:2f:ac:6e:49:59:00:74:c0:03:a5:bc:28:
40:31:48:86:18:6c:fc:8b:77:57:32:2b:c7:12:e7:
b3:9f:2d:c3:ce:ee:8f:90:f7:b0:70:7c:4c:3a:7a:
56:2c:e7:68:7a:c8:bb:07:78:1d:22:3d:59:3c:2b:
ae:cc:6e:f2:49:f8:f8:d3:fc:97:f3:19:ce:14:c5:
94:c9:76:96:41:0e:6a:4e:98:49:7c:58:ad:3a:52:
ec:b0:b1:b6:08:8b:4f:70:68:ad:92:52:04:bf:5b:
5e:c8:93:c9:99:b3:90:9b:11:79:3f:98:31:1e:56:
99:7f:a3:a1:f4:82:22:a9:39:69:79:91:fd:81:36:
aa:4d:23:02:99:52:0a:0b:5e:2e:6c:4d:a5:2d:49:
30:94:a8:8d:06:4e:3b:8c:fc:dd:fe:7a:fb:07:12:
4c:fe:12:a1:e1:31:d4:df:5f:f6:a8:eb:b1:f3:b4:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:02:36:55:8E:6B:1C:C1:4B:A5:7F:89:1A:44:C2:49:3E:C4:3E
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
23:02:30:72:15:39:c3:8e:0c:a1:c6:b0:67:2e:91:ad:6b:24:
8a:76:5e:b7:0e:2c:82:a3:8e:3a:13:44:72:e2:78:d1:50:37:
3d:0f:52:9e:cc:e5:5f:c0:c5:2c:40:21:8a:39:78:a7:30:49:
35:67:e2:f6:29:2e:38:7c:e6:6c:67:1d:73:7e:b2:4b:fa:1f:
96:f7:01:73:e3:03:17:40:95:53:9d:d1:63:9d:15:0f:3f:d6:
e5:8f:92:77:f5:b8:14:d6:57:53:af:00:2f:88:ae:0a:1d:8e:
56:81:91:7b:92:fa:df:3b:6f:33:80:dd:a8:cd:0a:1f:a1:bf:
10:eb:ab:0e:81:68:56:84:d0:86:11:ad:60:67:6b:bc:b3:63:
2a:e6:60:6c:ad:2a:db:7a:12:12:01:6a:81:4a:3e:20:ee:f9:
6c:8a:c2:05:7f:db:36:30:1f:d5:e9:d9:7a:32:5e:fc:3e:e4:
66:17:ee:0e:7a:ef:d6:84:82:e6:b5:95:36:d8:61:c3:46:88:
6f:1b:6c:4c:ae:e8:9f:0c:2c:19:6a:e3:d0:a3:29:c1:43:0f:
99:65:7e:7d:2b:3e:68:46:3f:42:e7:16:ce:18:54:de:22:16:
1e:07:e3:42:d1:77:e8:7a:0e:75:d6:7f:f0:03:b4:0e:4e:dd:
8e:c2:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:00 2025 by rpki-client