Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/nn8N_U11uSgPsYKzqfF8emHLewY.roa
File: nn8N_U11uSgPsYKzqfF8emHLewY.roa (raw, json)
Hash identifier: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=
Subject key identifier: 9E:7F:0D:FD:4D:75:B9:28:0F:B1:82:B3:A9:F1:7C:7A:61:CB:7B:06
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 01942444A8C62AD9C87735EC5233C9D37ECB
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/nn8N_U11uSgPsYKzqfF8emHLewY.roa
Signing time: Wed 01 Jan 2025 23:47:46 +0000
ROA not before: Wed 01 Jan 2025 23:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41040
IP address blocks: 194.127.180.0/24 maxlen: 24
195.189.92.0/24 maxlen: 24
195.189.93.0/24 maxlen: 24
195.189.94.0/24 maxlen: 24
195.189.95.0/24 maxlen: 24
2001:67c:2da8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a8:c6:2a:d9:c8:77:35:ec:52:33:c9:d3:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e7f0dfd4d75b9280fb182b3a9f17c7a61cb7b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:a5:f2:3e:92:d9:bf:9a:ff:6a:c8:b8:d4:
0a:49:b4:a2:2d:60:f8:cf:77:f4:44:5b:65:83:d1:
c2:82:f4:4f:aa:4d:8d:41:d4:e9:ee:73:54:03:f7:
0a:1a:16:a9:58:8e:99:61:9a:89:4a:8b:63:12:52:
3d:2e:fc:e8:b4:1b:7d:c2:8c:99:91:b7:72:28:7e:
10:63:ff:89:33:f8:87:a2:8e:dc:8f:54:94:e3:d2:
e7:b0:fe:1e:e2:21:ff:fd:68:23:d7:95:7a:2f:e5:
b1:56:4f:de:30:33:12:b2:1f:1a:8f:3c:82:94:ef:
54:d0:28:0f:00:29:cb:71:1e:cb:fd:be:4f:97:69:
d6:a7:86:ed:a9:bc:1f:c4:ea:6b:07:16:54:7c:dc:
ad:04:97:9e:f7:0f:b2:61:aa:f1:46:64:23:ec:87:
14:ef:01:82:d6:6e:ef:73:ed:7a:99:f3:f8:b5:f6:
12:eb:a7:15:57:42:ce:c8:d8:50:f5:86:c0:05:72:
52:41:a6:e9:ad:b6:04:ee:f2:70:51:c0:d7:bc:7b:
c1:09:a4:ee:fc:3a:51:75:a2:31:7c:6d:c3:f2:30:
f0:68:78:59:cd:ef:fc:d0:e9:79:7d:0f:f8:10:99:
2e:2f:b9:2d:3a:60:1c:f0:e4:b7:81:ad:fb:f5:3e:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:0D:FD:4D:75:B9:28:0F:B1:82:B3:A9:F1:7C:7A:61:CB:7B:06
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/nn8N_U11uSgPsYKzqfF8emHLewY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.180.0/24
195.189.92.0/22
IPv6:
2001:67c:2da8::/48
Signature Algorithm: sha256WithRSAEncryption
58:89:f0:a2:bb:d4:ae:f5:3f:a3:15:ba:dd:28:89:ad:c9:eb:
20:2b:44:b4:93:bc:d2:aa:20:1d:ec:31:51:c9:0f:43:fa:12:
08:7b:db:65:56:ac:8a:9a:38:66:4b:23:c3:79:51:82:e4:3d:
c3:01:30:22:ce:ab:c2:e1:c9:75:16:2c:63:97:3f:fd:3c:3b:
76:56:4d:6f:63:e5:c1:ed:39:3b:2b:8c:81:5f:46:51:6b:5c:
5e:3f:1a:63:69:01:f7:15:bb:57:3b:57:7a:49:6d:aa:c9:73:
1f:76:bb:ce:f7:fc:d7:5a:24:06:5a:58:10:ee:3c:8d:0b:4c:
c8:b9:f0:81:74:be:49:e4:98:cc:22:4c:6a:c4:79:b6:20:e0:
7b:ab:37:5c:73:bf:09:3f:d9:27:67:3e:b6:26:b6:f3:51:12:
de:4a:b8:96:c6:ea:a3:e7:e1:dc:da:4d:49:33:1a:9f:bc:9e:
90:2b:01:ea:fa:0c:e1:38:93:e8:c2:6c:ea:1a:09:9b:a9:3a:
8b:c5:6e:8b:2a:4b:59:69:f0:c3:d6:be:f7:aa:98:19:55:20:
b0:4e:f0:93:64:37:ab:e0:6d:96:ce:9b:bd:d6:08:5e:86:bb:
3d:5e:c3:f7:d7:79:a4:8d:4c:b6:99:34:a4:66:bb:eb:19:d2:
8c:59:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:01 2025 by rpki-client