Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/nSd7WOvr_0CymAGFuFGxQG8uERk.roa
File: nSd7WOvr_0CymAGFuFGxQG8uERk.roa (raw, json)
Hash identifier: oxAYFJs/BkRj16OyoGvLMP4H+34E+HiQsXaVyCL5wLE=
Subject key identifier: 9D:27:7B:58:EB:EB:FF:40:B2:98:01:85:B8:51:B1:40:6F:2E:11:19
Certificate issuer: /CN=ee8470f640487378be9d77a6ede477435a06ca99
Certificate serial: 01857139BF668BEAE34EA6316949512D603E
Authority key identifier: EE:84:70:F6:40:48:73:78:BE:9D:77:A6:ED:E4:77:43:5A:06:CA:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oRw9kBIc3i-nXem7eR3Q1oGypk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/nSd7WOvr_0CymAGFuFGxQG8uERk.roa
Signing time: Mon 02 Jan 2023 06:44:48 +0000
ROA not before: Mon 02 Jan 2023 06:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 191177
IP address blocks: 195.191.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bf:66:8b:ea:e3:4e:a6:31:69:49:51:2d:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8470f640487378be9d77a6ede477435a06ca99
Validity
Not Before: Jan 2 06:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d277b58ebebff40b2980185b851b1406f2e1119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:81:26:66:93:0b:f6:ec:2e:1f:49:a9:34:
d4:4c:56:f7:4f:db:38:a1:cc:05:33:a2:d7:51:25:
f2:5f:50:98:91:c8:78:ee:39:27:9f:b0:a9:08:f5:
bb:1d:a2:41:67:8b:77:ae:c5:dd:21:10:f6:aa:70:
b5:0e:98:37:08:1e:a0:e3:4f:4f:6e:0f:67:60:74:
bc:58:01:4a:47:ee:ac:4e:a8:c1:1c:39:72:57:72:
7e:c9:78:24:fa:6b:3c:5a:0d:48:13:68:6b:69:12:
07:be:7b:4f:98:18:5c:11:70:64:17:54:e4:d5:9e:
55:04:56:f6:9f:65:db:c3:be:c9:cd:a8:e0:18:c5:
72:3d:a6:6f:ae:83:29:3a:ab:6c:86:e4:bd:7b:12:
05:ac:a9:26:b7:b9:eb:a0:ea:ef:6a:46:3c:b4:f3:
d0:dd:3c:7c:ae:dd:ff:4f:eb:a0:88:b7:d2:d9:76:
e7:a6:d3:6a:6d:ad:72:2a:7e:f1:ce:86:45:ae:e2:
98:5e:b9:a6:5a:c4:09:68:c4:a4:ff:20:60:64:fc:
f7:48:5a:e7:71:9b:5a:70:19:fb:5b:1e:cf:03:bc:
6f:63:cf:dc:57:9a:d2:67:19:67:ac:57:dc:18:55:
f9:b6:d1:c0:37:6d:13:22:9b:db:27:08:21:79:67:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:27:7B:58:EB:EB:FF:40:B2:98:01:85:B8:51:B1:40:6F:2E:11:19
X509v3 Authority Key Identifier:
keyid:EE:84:70:F6:40:48:73:78:BE:9D:77:A6:ED:E4:77:43:5A:06:CA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oRw9kBIc3i-nXem7eR3Q1oGypk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/nSd7WOvr_0CymAGFuFGxQG8uERk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c820f-1a78-423b-8196-5bdf5932f4f0/1/7oRw9kBIc3i-nXem7eR3Q1oGypk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:de:c4:09:e4:30:2a:1b:7c:b9:08:9c:43:4a:bd:2c:13:2b:
a8:c7:d7:65:78:32:82:e6:f3:4f:8a:7f:0a:bb:ad:0d:cd:b8:
d5:15:a5:3e:5d:e7:ef:47:88:d1:ca:60:83:9d:39:19:6d:45:
4d:d9:dd:36:61:0d:00:7f:ed:02:eb:2f:ab:36:60:0b:18:de:
d8:93:5b:6c:97:48:64:a8:17:3a:43:4a:f2:0a:32:ef:4b:ff:
06:ee:b8:cb:f5:23:4e:88:1c:cc:cd:d0:b6:a5:6b:76:d5:2b:
2e:8a:09:fe:3f:c8:43:dc:ba:79:a5:b3:dd:3e:21:01:e3:97:
af:d3:82:14:74:64:13:e5:e7:64:7b:54:65:7f:bd:b9:ba:0d:
37:4b:3e:29:4a:8b:91:2f:b1:50:c5:7c:58:d2:f3:3b:35:f5:
85:b2:02:2d:5b:6b:88:fb:db:8f:f1:a0:75:0e:26:2c:bc:0e:
84:c6:f1:d1:d2:fc:c8:b9:b6:16:d9:78:45:ee:79:8c:21:1b:
8c:a5:fd:5c:ad:37:57:91:50:f7:30:a9:c0:2e:65:32:20:f5:
9d:8b:81:b1:5e:87:38:5c:ea:ba:e5:e9:55:d6:0f:6a:4b:8e:
59:42:17:10:14:19:a8:c4:96:e3:3b:f7:1a:e6:95:42:06:d8:
c7:c5:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:24 2025 by rpki-client