Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa
File: nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa (raw, json)
Hash identifier: uMfkd4wLt8gDn0VUwsQBSdryskjaJgQtls/Bs/4236o=
Subject key identifier: 9D:F6:F0:F2:79:0E:58:B3:05:61:E4:69:40:56:41:0B:69:58:65:68
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 0194274770936D5FECF240470B696E972F7E
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa
Signing time: Thu 02 Jan 2025 13:49:40 +0000
ROA not before: Thu 02 Jan 2025 13:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200302
IP address blocks: 94.242.0.0/19 maxlen: 19
94.242.32.0/20 maxlen: 20
2a00:1838:aaaa::/48 maxlen: 48
2a00:1838:cccc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:70:93:6d:5f:ec:f2:40:47:0b:69:6e:97:2f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: Jan 2 13:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9df6f0f2790e58b30561e4694056410b69586568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:ce:21:63:dd:05:0f:1a:39:c7:63:48:1d:
f5:1f:bf:bd:2e:73:4e:dc:24:53:4e:f8:58:dc:f5:
1d:40:82:65:e8:bb:15:a8:e4:e1:fd:61:7d:c1:85:
61:5c:b8:db:e1:4c:8c:e7:c3:16:64:bd:f9:0f:25:
01:23:b3:cf:1b:22:05:52:6c:0f:98:fb:02:a0:e7:
27:7a:53:fc:18:d3:07:68:9a:26:d2:60:5e:b4:06:
72:12:f3:10:f7:f6:9a:f8:7a:14:38:e3:4b:a0:11:
40:71:b5:8c:b2:38:b1:80:6b:ac:b6:cd:8c:cd:a6:
ab:44:39:58:4b:68:d0:ba:8d:91:cd:55:10:c1:d9:
fd:f6:cd:d2:88:05:17:6e:5d:05:98:b2:ef:81:cd:
20:9f:54:63:15:93:89:fe:4f:66:7c:b6:85:52:6c:
42:35:58:ab:14:0c:8c:d3:38:3c:3b:b8:92:28:71:
7a:a3:c3:5a:fb:8d:2e:80:f4:de:28:38:22:28:2f:
df:b3:97:a5:a7:f3:a7:92:88:e0:07:06:43:f8:f1:
77:5f:05:53:74:f7:1e:aa:ee:02:5f:ac:ae:3f:c2:
4e:70:06:14:3d:2e:32:4d:5b:22:f8:8e:20:38:45:
84:38:8f:d7:fe:28:21:19:38:7a:3c:fd:e1:7d:7e:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:F0:F2:79:0E:58:B3:05:61:E4:69:40:56:41:0B:69:58:65:68
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.242.0.0-94.242.47.255
IPv6:
2a00:1838:aaaa::/48
2a00:1838:cccc::/48
Signature Algorithm: sha256WithRSAEncryption
6a:99:30:fb:4b:f0:66:5a:01:f5:ef:2c:22:8e:7e:7f:9b:66:
60:f6:8c:4a:c3:e2:40:d4:e6:31:99:7a:38:12:df:21:5a:a0:
2a:e4:cb:e4:15:56:3e:92:02:49:86:1e:19:78:ab:5f:f0:56:
e1:5a:da:81:2f:2e:cb:a5:96:3f:80:80:ab:82:5d:10:89:15:
bb:d5:9a:cf:92:1a:21:5b:b6:47:64:d3:7d:b9:7b:c7:5d:67:
3e:98:f1:39:8a:dd:e5:b9:96:6e:52:be:5d:a2:62:26:f4:a5:
4d:df:09:ec:68:ab:ff:8d:c0:0f:d4:f7:67:67:14:4d:e5:6d:
22:5a:e7:5f:de:f4:0f:81:36:45:39:42:70:db:a5:52:34:42:
b3:b6:84:da:3d:55:92:5b:fc:81:59:0b:31:4c:f5:82:28:c1:
bd:e7:67:94:60:f2:9e:5e:d0:a3:ad:30:b6:57:07:d7:55:43:
e8:88:f0:d7:4f:f9:96:e2:98:c1:76:02:5b:11:dd:d0:dc:5b:
bc:44:eb:54:75:9c:1b:a6:23:68:40:76:3a:a0:b1:25:ce:18:
ad:e4:22:52:3c:5d:55:20:8d:a8:6b:41:6e:3b:17:97:aa:35:
28:57:29:36:0d:3c:05:b3:ca:3c:62:9c:fb:b2:b5:6b:ad:c0:
b3:8c:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:29 2025 by rpki-client