Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa
File: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (raw, json)
Hash identifier: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=
Subject key identifier: 36:68:AA:CD:BE:4E:28:32:85:3C:40:D9:F4:08:4E:C1:FC:D6:E6:34
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 019422FB5D8C59BA18C71F4C2CD56C36ECAF
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa
Signing time: Wed 01 Jan 2025 17:48:06 +0000
ROA not before: Wed 01 Jan 2025 17:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8874
IP address blocks: 194.120.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5d:8c:59:ba:18:c7:1f:4c:2c:d5:6c:36:ec:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3668aacdbe4e2832853c40d9f4084ec1fcd6e634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:73:3c:bf:81:27:ec:16:67:f0:62:10:b1:
25:e9:5a:c7:f7:01:bd:0f:5a:cc:a6:9b:a3:bd:0f:
65:6c:3c:ea:75:b2:46:41:30:c4:b4:11:e4:f3:04:
41:e0:8d:a9:7d:b5:66:31:40:e4:e2:35:f1:a8:12:
3e:33:4c:a5:94:60:65:75:ec:39:6d:d6:1e:e1:ae:
fa:20:de:fe:5a:17:28:89:6d:80:87:b9:a3:63:4a:
1c:f7:e3:16:d6:b5:ff:b7:cd:a5:b8:89:4f:63:53:
6e:17:76:d0:77:f7:ae:cd:39:5f:6c:a8:79:00:6c:
03:77:9b:b2:41:08:4b:45:1c:b6:83:91:85:dc:db:
2b:6b:7e:9d:fe:17:52:15:99:56:66:60:bb:6c:82:
a9:8d:73:5d:93:c0:1f:06:a1:fb:7a:cc:0c:f7:c8:
94:bb:53:eb:c2:fe:fe:0b:04:6b:02:11:5d:0b:a9:
2f:48:e8:da:fc:b1:28:4e:20:6f:2e:fb:e4:2b:86:
23:dd:1b:9d:1b:8a:74:e5:77:b1:8c:38:6a:1d:0f:
7d:ff:2b:53:74:42:6e:10:b1:4c:aa:df:8e:0e:9f:
3e:dd:9a:3b:6c:3c:61:37:ab:d9:57:90:92:e6:a6:
76:f6:17:10:0c:8d:55:98:31:ed:dd:9f:68:3b:0f:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:68:AA:CD:BE:4E:28:32:85:3C:40:D9:F4:08:4E:C1:FC:D6:E6:34
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.55.0/24
Signature Algorithm: sha256WithRSAEncryption
00:45:57:90:be:79:ef:34:6c:ee:21:6c:e9:bd:b8:c7:65:88:
88:15:ae:a1:ba:98:9a:47:a7:1a:9b:04:34:b0:17:a7:7c:dd:
41:61:32:7d:e1:d3:4d:c3:9d:af:67:9b:db:11:5f:7b:8f:b1:
5f:27:a4:0b:76:7c:6f:09:5f:24:84:7f:db:b5:d6:8c:4e:51:
76:63:c0:16:13:68:ca:43:25:a9:44:6e:b8:d0:d2:67:8d:53:
c6:6c:9e:c5:4c:04:3d:37:54:17:66:5c:a2:9f:64:4f:6b:98:
72:f3:62:c2:f7:59:c9:21:ad:06:db:d2:b0:d9:ff:4d:61:6c:
00:9e:ac:03:80:89:53:0c:2b:3b:7e:ae:46:ac:99:9b:54:62:
da:2c:0c:16:1e:d7:7e:31:58:ea:e1:3d:5a:6c:4d:b7:33:df:
da:70:16:97:38:d7:76:ad:f8:99:86:ea:94:00:9d:1c:fa:b9:
11:c0:ad:48:9d:79:af:ba:e7:dc:fc:c9:38:c5:b8:e2:00:33:
1c:c7:7e:c4:fa:d1:43:6d:d6:71:6e:f4:ce:5a:f2:0f:4a:23:
9b:f7:01:2a:19:70:1f:1c:47:cd:e8:eb:05:fd:ed:eb:ec:50:
70:ed:de:ab:47:cf:59:e5:af:f4:63:bc:d0:08:3d:bf:72:55:
a2:19:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:23 2025 by rpki-client