Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa
File: nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa (raw, json)
Hash identifier: XcrtvYg+nckzsoLJ7c2APLoMZ/zvgXA8RQMD/XcqPuE=
Subject key identifier: 9C:5A:BC:1E:16:9A:38:72:31:1B:03:46:65:69:DE:4A:09:D3:0D:E4
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B68231035B4B9EE4EDCB4FD14C70DC
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204259
IP address blocks: 185.76.83.0/24 maxlen: 24
212.110.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:82:31:03:5b:4b:9e:e4:ed:cb:4f:d1:4c:70:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c5abc1e169a3872311b03466569de4a09d30de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:d4:45:e0:92:51:94:12:af:e1:54:ea:fe:
28:68:cb:e6:5c:43:d1:92:e8:4b:d5:f2:b7:d5:f1:
e1:4d:34:44:73:ce:1c:d5:22:f9:74:24:85:a3:b5:
27:9a:bb:2d:38:76:84:87:e7:4f:95:bd:6f:96:05:
cf:ba:5a:5b:00:12:df:b1:7a:60:e8:b9:4b:4b:b4:
81:b7:b7:d3:39:55:a8:db:d8:7b:97:75:b9:c3:34:
72:5e:55:2e:93:11:4e:51:64:51:e1:be:25:fc:4c:
18:3c:cd:50:4e:db:30:d7:f8:8f:68:d1:a7:48:11:
14:b3:c2:7b:90:9c:53:bc:c2:e2:5f:ec:13:15:7c:
dc:58:08:be:cb:22:2e:e9:a3:ba:fa:80:a0:53:15:
80:4a:89:ed:4a:a2:1f:42:9a:aa:c8:09:72:6a:c5:
f1:8f:db:2d:e0:56:f8:22:31:1a:f6:dd:fa:33:78:
b9:bf:f1:eb:8a:26:40:1e:47:c4:4c:4e:f6:ae:18:
24:60:98:ab:c8:51:85:fc:6f:1c:8b:7b:8f:5c:fa:
c9:8f:f2:64:d5:63:4c:0b:77:e6:61:4d:0f:bd:9a:
46:18:06:bc:3e:3f:b1:65:b4:c2:d5:c2:08:01:2a:
9c:66:78:29:c4:06:71:14:e4:09:bd:4a:b0:66:17:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:BC:1E:16:9A:38:72:31:1B:03:46:65:69:DE:4A:09:D3:0D:E4
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.83.0/24
212.110.159.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ea:5c:bc:99:61:30:cb:99:d2:2a:91:fd:10:ce:15:ec:22:
e3:97:6a:11:23:db:e3:3a:b1:9a:e2:21:6a:02:03:70:55:e0:
8b:70:3a:7b:e6:71:e6:f4:5e:2e:0e:14:26:38:7c:69:b1:04:
c8:c1:b2:34:73:62:c9:ad:e8:13:28:14:48:f0:48:09:90:e0:
db:19:fc:8c:3b:9e:a8:27:7c:d3:fe:ac:a6:5a:fa:10:71:8b:
cc:07:70:fb:42:4e:4d:b4:ab:7f:28:6a:7b:03:2f:a7:6d:4e:
f5:e7:41:95:aa:54:e1:ea:2e:87:38:d3:d4:c6:dd:ae:60:55:
e3:11:b4:65:da:a0:85:e4:01:11:1c:66:83:8d:c7:f0:91:d6:
26:64:d4:ab:66:50:7f:8e:24:01:27:52:f8:d6:23:36:d1:7c:
66:c9:ab:44:2d:2c:01:d2:e4:e1:30:7c:0a:d2:89:91:38:7c:
0f:50:16:ff:eb:5b:0a:bb:bb:51:a3:9c:e2:cb:7a:e9:7a:c7:
57:4a:eb:9a:45:18:04:08:05:f8:26:fd:0d:27:f8:73:4a:fc:
de:3e:58:f6:a8:c2:93:01:8b:08:8a:a8:89:05:9e:80:cc:80:
db:14:8c:e1:fc:79:15:4d:c0:12:eb:23:3e:61:b6:a7:7c:68:
d4:64:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:40 2025 by rpki-client