Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/NhKTbLiwYlspcrHKljEX_Lj75I8.roa
File: NhKTbLiwYlspcrHKljEX_Lj75I8.roa (raw, json)
Hash identifier: HkUJV2+GG6bA9m6sLaZzgyQN4Oe9wp8jIrlisow3Dq4=
Subject key identifier: 36:12:93:6C:B8:B0:62:5B:29:72:B1:CA:96:31:17:FC:B8:FB:E4:8F
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0193D123C5CB3F453B2491FE7D58D4B98A17
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/NhKTbLiwYlspcrHKljEX_Lj75I8.roa
Signing time: Mon 16 Dec 2024 20:23:22 +0000
ROA not before: Mon 16 Dec 2024 20:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 93.127.148.0/23 maxlen: 24
93.127.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d1:23:c5:cb:3f:45:3b:24:91:fe:7d:58:d4:b9:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 16 20:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3612936cb8b0625b2972b1ca963117fcb8fbe48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:65:c3:73:ab:32:31:7d:c4:8a:58:fa:da:
18:e7:ca:eb:06:a0:89:03:dc:7f:05:6a:0f:5c:17:
93:30:04:0e:2c:d8:3f:d5:24:2e:7d:11:5a:9e:21:
f5:bc:a6:09:f0:d6:2a:2f:99:3d:ef:ab:63:3b:c5:
c4:23:95:43:25:f0:b3:d9:e8:20:09:86:51:d7:31:
29:8b:c0:87:e4:f7:b0:f6:cf:51:5d:dc:72:76:ad:
14:3e:7c:8e:c3:22:7f:37:da:21:c0:f0:5f:b3:96:
2d:8b:ba:e4:04:89:38:e1:cc:93:bb:ac:59:c1:46:
59:84:68:97:73:38:15:85:66:38:45:a0:7d:3d:14:
ef:b4:0f:09:97:06:28:04:86:1c:88:87:cd:f1:83:
20:e0:7e:83:de:6c:0b:94:20:54:a5:ef:bf:6d:78:
16:38:ae:53:65:d9:30:04:48:80:5e:76:ed:af:7f:
7c:50:4c:b7:ec:06:f7:4e:3a:99:4a:af:76:15:cf:
2c:57:53:54:16:24:2f:2e:e3:08:05:0d:c8:78:9d:
ff:87:c9:2f:b8:a0:bd:b2:2e:2b:f7:b4:2c:5e:fc:
c1:7e:eb:b8:8d:e0:f3:a7:bb:11:2d:5f:e2:24:ce:
43:2c:c9:69:9d:f2:99:72:04:ba:0d:b6:8b:e1:5c:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:12:93:6C:B8:B0:62:5B:29:72:B1:CA:96:31:17:FC:B8:FB:E4:8F
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/NhKTbLiwYlspcrHKljEX_Lj75I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.148.0/23
93.127.156.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:ef:13:dc:ce:a3:c5:bc:1e:d4:8c:36:2c:63:56:5b:88:fd:
37:03:dc:b1:ce:0e:cd:0e:e1:0a:b0:f7:9e:1a:90:64:2c:3a:
2a:a3:6d:5f:83:22:cc:75:b8:d9:a9:b9:ec:08:28:2e:ac:58:
07:fe:ce:dd:42:ea:de:b3:17:bd:c3:d5:f2:70:f8:cd:e9:f7:
8a:0b:1b:04:3a:18:c9:13:0e:b0:26:83:81:d3:47:6e:c8:ee:
ce:78:69:3b:c8:a4:40:92:ad:07:83:7c:d2:79:31:c0:6a:be:
64:12:73:27:aa:ec:c3:2b:ef:ad:c4:5d:79:9b:51:e2:54:b0:
ed:9d:95:05:c2:3f:ad:03:e9:c9:8d:eb:30:f9:db:7f:f4:5a:
86:8e:8c:11:4b:52:e5:1f:b4:32:f8:e9:89:93:15:97:1a:33:
f1:a2:96:03:39:af:f2:23:12:d9:9d:47:27:78:1c:33:e8:82:
9c:3f:81:1f:f8:cf:39:48:4d:d5:ad:b6:82:89:8c:8b:0c:e4:
ab:19:7f:63:fa:af:1e:66:1b:67:54:8f:d3:62:9b:be:7d:37:
c9:35:74:9b:b2:9a:e9:98:65:07:20:dd:d4:b3:58:dd:d7:25:
e7:55:05:45:ab:59:59:0b:9c:71:b9:97:98:80:36:16:4f:db:
3c:5c:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:16 2025 by rpki-client