Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/nikcVRLPEkpjmj22Ziw5gbk7U3I.roa
File: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (raw, json)
Hash identifier: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=
Subject key identifier: 9E:29:1C:55:12:CF:12:4A:63:9A:3D:B6:66:2C:39:81:B9:3B:53:72
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 0194214445A58A0F4641D9692121F20DD774
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/nikcVRLPEkpjmj22Ziw5gbk7U3I.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48402
IP address blocks: 185.141.128.0/23 maxlen: 23
2a07:2400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:45:a5:8a:0f:46:41:d9:69:21:21:f2:0d:d7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e291c5512cf124a639a3db6662c3981b93b5372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:d6:38:09:15:5d:4c:f5:f1:8b:27:f2:24:
1a:ff:a4:50:2b:0e:de:82:12:ee:ac:06:90:c5:f5:
97:8e:9d:e6:28:85:a4:ca:a6:bc:e9:99:cd:0e:cd:
a6:74:2f:37:b7:89:14:ab:0c:28:5b:ee:f2:77:da:
76:6e:b4:ed:ec:8e:ba:7d:ad:22:a7:70:ee:48:a0:
51:42:12:e6:51:89:e0:53:1a:39:da:cd:e6:e8:19:
59:c0:02:69:fb:11:78:32:c8:17:e3:51:c2:88:31:
33:57:c1:75:8a:5b:3e:0b:b0:af:a3:71:93:dc:34:
e0:5b:78:cd:14:03:80:5a:47:d2:a0:a9:1e:42:17:
57:dc:18:10:d7:d3:4c:3b:e3:f1:18:65:8f:e1:c5:
1d:83:ce:c6:37:e3:4d:63:5e:22:fe:9f:60:20:26:
81:54:fc:3d:be:df:39:a8:60:90:1b:f0:75:bd:7f:
ad:8c:17:7a:62:e8:0a:88:f7:14:45:fe:a2:24:9f:
4c:01:ee:c0:5a:f2:69:6f:61:62:05:8c:d2:b5:f1:
61:f7:86:f8:66:4a:df:c5:a8:3f:40:37:58:c8:78:
47:fd:48:9c:65:4c:71:c0:55:25:02:85:32:96:b6:
cf:88:33:ec:ad:ff:51:1e:9d:d8:bf:e0:5f:9f:01:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:29:1C:55:12:CF:12:4A:63:9A:3D:B6:66:2C:39:81:B9:3B:53:72
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/nikcVRLPEkpjmj22Ziw5gbk7U3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.128.0/23
IPv6:
2a07:2400::/29
Signature Algorithm: sha256WithRSAEncryption
b5:07:7c:89:f6:f7:ff:b7:97:23:75:18:1b:2f:cf:93:7e:f1:
69:df:9a:c3:9c:67:0e:f3:14:c9:6b:61:84:d7:43:95:cd:c6:
32:6a:d3:79:43:b9:4d:4c:54:b0:39:d7:89:76:90:a7:4d:c0:
c9:41:14:e1:0f:a0:e0:cb:25:b9:98:7f:b7:80:5b:e0:86:c2:
0e:c4:5a:1c:e9:f6:54:b2:02:ac:29:a3:bb:90:24:28:ad:cf:
71:16:fd:7d:42:b5:15:4e:d9:65:ad:f7:b2:76:76:84:e3:eb:
d1:d3:84:81:fb:17:01:63:d1:61:8b:a0:6d:41:0a:1f:43:b1:
5c:c8:ab:a3:3f:5b:9a:f2:40:3e:2b:2c:a9:6b:97:87:d1:af:
a0:ce:ca:d0:96:75:8d:a4:ba:d4:14:51:ac:a2:6c:53:cc:03:
e6:4a:7e:32:55:12:ae:98:0c:ab:c9:c5:c5:d3:dc:3f:ca:6e:
12:68:77:13:df:a1:f2:a9:ae:ac:b6:5f:fe:b9:19:5a:e6:67:
d1:c1:94:dc:6f:fd:86:b8:36:8d:cc:b7:c0:dc:e6:5d:03:bd:
4d:7d:a8:82:ef:23:77:6e:db:94:11:e3:41:17:17:bc:df:8b:
29:c3:60:fc:be:2d:b3:db:f9:82:1c:18:d5:84:21:64:5d:1c:
4d:ad:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:52 2025 by rpki-client