Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa
File: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (raw, json)
Hash identifier: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=
Subject key identifier: 9C:79:EE:BB:81:7E:21:CF:D6:52:41:E0:36:53:3D:1A:8E:65:AF:05
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 0194266C0E36D902CDE6AEE8D23C88C2B11C
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45034
IP address blocks: 185.106.232.0/24 maxlen: 24
185.106.234.0/24 maxlen: 24
2a00:a700::/48 maxlen: 48
2a00:a700:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0e:36:d9:02:cd:e6:ae:e8:d2:3c:88:c2:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c79eebb817e21cfd65241e036533d1a8e65af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:de:f5:f4:e3:43:d9:80:ce:b6:ef:d5:93:
55:3d:8c:a5:62:80:cd:b4:c5:c6:bf:d7:06:87:97:
1c:b0:0f:45:85:57:92:81:f4:16:f9:0a:4e:62:2d:
c2:18:df:58:02:c1:7f:34:e2:8a:48:a0:62:d9:d2:
c6:7c:58:b1:4a:30:22:58:c9:90:96:66:eb:fb:2d:
63:31:49:f0:dc:d7:4a:98:a4:3b:bf:ec:5d:34:8f:
84:9d:a4:93:c6:df:ee:01:ea:85:58:91:a6:40:a8:
ea:0c:73:74:0d:f9:89:1b:ea:04:f2:6a:3e:38:1b:
cb:f3:1f:49:05:8d:0a:77:95:3f:53:97:b6:2e:43:
8a:b1:6b:4d:d1:e5:18:b7:50:6c:b4:61:22:87:53:
6f:4e:75:c2:a2:bf:12:4c:99:76:99:3f:de:51:01:
80:f5:20:2f:3f:be:9f:23:d3:e3:f4:8d:b7:ea:a7:
50:a4:22:8e:a1:3c:03:fe:5c:70:65:d3:3e:35:0d:
3b:a2:f7:fb:fd:c7:09:45:1d:07:81:bf:fe:9d:31:
f9:c2:d6:b5:91:9d:bb:e7:e6:28:3b:7a:ae:04:a0:
39:99:60:48:30:d6:b3:74:1d:d5:0f:34:1c:c1:01:
30:fb:f2:f9:85:b8:2c:64:27:8e:8d:f6:97:db:67:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:79:EE:BB:81:7E:21:CF:D6:52:41:E0:36:53:3D:1A:8E:65:AF:05
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.232.0/24
185.106.234.0/24
IPv6:
2a00:a700::/48
2a00:a700:a::/48
Signature Algorithm: sha256WithRSAEncryption
58:ee:7f:1d:5f:c6:fa:c2:66:52:51:94:19:e0:cb:52:53:56:
6a:72:39:7f:95:7e:6c:73:75:34:ef:01:06:8c:ab:dc:65:ce:
c1:ea:9b:2d:02:fa:fe:5f:7a:ba:1b:fd:f2:c7:a2:9b:fe:de:
96:52:89:dd:55:05:96:60:88:30:62:4a:eb:33:41:35:13:34:
47:91:66:d6:df:9a:f7:34:e0:c5:b8:c5:f8:2a:68:80:48:69:
17:2e:55:de:6f:31:8e:4c:75:6c:ae:e5:70:39:d6:bb:d3:60:
c9:70:a3:dd:6f:32:9c:2f:89:c8:b4:7b:a9:fb:4c:4c:2f:fb:
a8:11:e4:10:df:6c:d3:fd:ab:03:8c:94:fe:d1:c9:dc:fe:be:
fe:af:5a:c2:f2:8c:67:bc:38:6a:45:18:29:55:be:f1:d3:fc:
4e:a4:a2:38:3d:e7:ee:1d:6e:56:01:35:9e:6c:8a:62:bd:79:
fe:0f:3d:f1:56:6a:10:3b:69:4f:77:3f:87:53:4e:e9:88:6a:
75:fa:6f:e4:6f:b9:00:b1:c7:c7:64:38:81:35:71:43:1c:c7:
8b:b8:0f:7f:13:b9:c8:25:5b:6f:75:80:89:a7:80:73:b9:aa:
07:62:7a:a4:0b:cb:c5:28:6c:6f:af:a2:47:fc:27:8a:07:98:
e9:e5:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:31 2025 by rpki-client