Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/NcQKvxmtrYw-jrNoZNkRcv77JN4.roa
File: NcQKvxmtrYw-jrNoZNkRcv77JN4.roa (raw, json)
Hash identifier: 3Uzym40miS7PlDIapcSMHwpqDBF42PS4SEf8vIe4LFs=
Subject key identifier: 35:C4:0A:BF:19:AD:AD:8C:3E:8E:B3:68:64:D9:11:72:FE:FB:24:DE
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 0194244562A50EE1DA399B900A610E0F458F
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/NcQKvxmtrYw-jrNoZNkRcv77JN4.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44407
IP address blocks: 91.234.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:62:a5:0e:e1:da:39:9b:90:0a:61:0e:0f:45:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35c40abf19adad8c3e8eb36864d91172fefb24de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:5e:3b:f3:11:c4:8c:14:72:1f:86:85:8e:
08:d3:9c:9d:22:bc:84:96:6b:4c:f4:a6:6b:86:1f:
6a:30:c6:a8:b3:42:f1:e1:1b:bd:ff:77:54:97:89:
49:c6:5d:b9:70:50:6c:b5:f6:77:5c:ce:4d:80:1f:
fe:10:2c:97:5a:fa:15:d8:21:8e:a2:83:c7:4c:b7:
a7:d6:5a:6e:b6:ab:1f:69:8a:64:39:49:fd:bc:70:
d3:21:f4:a8:36:a9:7f:89:3f:b0:05:63:2e:01:a0:
db:ef:bc:4f:1b:9d:ab:e9:a5:6a:a8:25:99:9f:52:
40:4f:a1:64:c4:82:0f:ef:e5:8d:35:75:7b:ed:2c:
0a:d6:e1:05:75:01:a8:af:44:0d:5f:8b:bf:5a:4a:
83:07:47:9e:6a:c8:a9:bb:e1:8f:ee:9b:b7:23:16:
44:ed:7f:7c:e6:9f:4c:77:99:83:fb:10:94:42:98:
da:8d:54:c7:98:e0:0b:6d:da:d0:1d:30:83:08:56:
fc:1a:5b:22:74:69:af:37:84:f6:72:5c:ea:16:3c:
9e:c2:9f:ba:15:00:87:3e:07:ed:b7:c5:ba:47:78:
d4:91:dd:78:55:72:bf:ec:ef:9b:64:24:59:09:0f:
2e:14:fe:ec:b9:92:22:e4:3a:2d:2c:d0:41:37:2d:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:0A:BF:19:AD:AD:8C:3E:8E:B3:68:64:D9:11:72:FE:FB:24:DE
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/NcQKvxmtrYw-jrNoZNkRcv77JN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c4:53:92:75:0d:d3:e4:db:11:bd:09:c7:5d:76:69:d3:f4:
24:cd:76:a0:1b:dd:40:a6:2a:4c:9e:cc:b8:90:04:20:53:cd:
ad:e9:6a:02:29:f8:31:cb:67:a3:52:fb:98:9d:b7:78:a6:2b:
c1:5b:e1:a7:b2:5f:96:1e:f7:7a:d9:1c:41:b9:86:c2:9f:fc:
89:59:d1:e6:54:96:d2:27:83:96:d9:c4:27:20:f0:29:77:f5:
93:bd:12:b1:72:be:81:9d:1d:a9:3c:3d:a9:24:e0:ae:0a:ef:
b6:c8:0a:ab:53:ed:ca:73:db:2d:3b:66:b4:58:db:48:91:54:
27:71:a6:1f:89:92:a3:9f:9a:1e:c4:10:a3:10:62:f0:48:21:
2a:74:df:36:b3:19:6b:52:e0:b5:0c:5b:01:7b:5e:47:be:dd:
81:34:47:c0:8a:10:75:ba:3f:da:d0:ef:5b:78:21:25:bd:ea:
59:de:d0:9c:73:90:8d:af:f3:6a:de:15:56:15:47:53:2a:7f:
4b:4a:82:f6:6b:4e:5d:38:52:e3:1f:ca:37:60:c6:03:32:62:
2a:6c:a4:ce:73:c6:3e:2a:17:2d:e7:27:6f:c7:d4:d9:04:d4:
f4:a0:2f:dd:e6:4f:f1:ae:dc:91:40:a4:2d:1a:ac:25:66:d5:
2a:10:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:11 2025 by rpki-client