Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nnK9sBNz8F6oqIJNiEqdyUKpxBU.roa
File: nnK9sBNz8F6oqIJNiEqdyUKpxBU.roa (raw, json)
Hash identifier: 4pYw53tp6LoTRJOiuUYEH+f4SmiKvacrxPCRdUZzbtg=
Subject key identifier: 9E:72:BD:B0:13:73:F0:5E:A8:A8:82:4D:88:4A:9D:C9:42:A9:C4:15
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B5748D34C042D7DE6595D3BCE63A0F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nnK9sBNz8F6oqIJNiEqdyUKpxBU.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 89.23.123.0/24 maxlen: 24
194.28.225.0/24 maxlen: 24
194.28.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:74:8d:34:c0:42:d7:de:65:95:d3:bc:e6:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e72bdb01373f05ea8a8824d884a9dc942a9c415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:67:c5:c1:69:7e:39:c8:ff:ea:62:31:f6:
8c:34:78:e8:c7:0c:ea:02:9c:c4:3a:e8:ec:3e:7f:
40:ed:80:7d:61:51:51:02:18:51:e5:49:d5:4f:63:
65:50:11:67:96:97:c0:8b:27:cf:86:39:8d:60:5a:
d0:e0:15:09:e5:f5:2d:4c:89:07:54:13:6c:d8:86:
cb:c3:f9:59:59:23:2c:77:5e:69:87:bd:5d:f1:7e:
dd:23:e9:04:2f:74:bb:aa:9b:95:bb:1e:fb:b4:9d:
fe:e6:ab:fe:5a:b1:b0:80:3d:78:78:e8:9c:86:b9:
d5:b1:83:0d:ab:13:4a:84:58:6d:c1:dc:0a:46:07:
8f:f1:32:fc:3c:6b:9a:d5:97:a0:2a:20:37:76:a3:
53:7b:2f:43:83:3d:0c:1e:10:aa:59:36:a0:6f:5e:
5d:74:12:c3:9f:d7:4b:2e:a0:30:1c:f6:31:f0:16:
ee:36:77:89:bd:a4:2e:1f:63:8d:62:a2:c1:e1:3c:
71:b9:2c:d1:b2:cb:bc:7d:2d:5f:7d:e1:4d:81:aa:
96:fd:48:51:0e:fa:5a:e8:d9:a4:a1:0d:1f:df:72:
5e:34:58:c6:87:ea:d9:65:ed:62:ad:d0:86:a2:85:
7c:1e:67:89:4d:99:b3:87:88:c2:22:1f:aa:a0:9c:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:72:BD:B0:13:73:F0:5E:A8:A8:82:4D:88:4A:9D:C9:42:A9:C4:15
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nnK9sBNz8F6oqIJNiEqdyUKpxBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.123.0/24
194.28.225.0-194.28.226.255
Signature Algorithm: sha256WithRSAEncryption
8d:73:b5:3d:56:20:8f:58:8c:fc:06:17:e5:80:cd:35:d5:c5:
38:20:9b:ff:2b:b1:dc:34:27:7e:0a:cb:93:47:bc:69:d5:eb:
30:2f:48:c0:4d:cc:c8:5d:d7:b4:b6:a7:54:16:7d:4d:95:93:
cb:b5:7e:c7:b2:38:be:23:a7:93:da:6a:00:7b:a2:eb:88:58:
ec:ee:46:e7:08:25:0c:f6:66:92:55:5a:12:f2:44:27:56:a5:
57:97:e9:e8:e2:ca:24:97:19:55:a6:68:24:a7:b5:6b:22:78:
8c:1e:e3:42:49:3c:5a:fd:5c:14:a2:b9:13:33:2d:e2:84:48:
61:43:1d:95:2d:76:8e:f0:85:fb:68:71:22:fb:3d:8b:66:88:
99:81:0b:5c:62:c1:25:ca:fc:12:2d:f9:73:c3:dd:eb:e3:52:
9b:3d:22:92:57:bc:73:a0:4b:9c:f9:d8:8f:34:db:18:45:93:
82:74:7b:28:83:6e:cb:2e:d7:b0:92:2e:c7:4c:92:88:a4:2e:
a4:6d:a9:e1:e9:95:2a:16:71:55:8b:05:b6:f9:76:bd:72:9b:
3f:97:e4:aa:fa:b2:05:0a:2e:37:65:9f:5b:df:17:49:8e:c9:
3b:ae:1b:bb:6e:b7:a7:80:d1:14:82:ad:50:1f:24:04:36:a8:
ad:f7:9c:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:12 2025 by rpki-client