Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/nfcB4W3-frcdsttLFxfqKvUAYPA.roa
File: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (raw, json)
Hash identifier: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=
Subject key identifier: 9D:F7:01:E1:6D:FE:7E:B7:1D:B2:DB:4B:17:17:EA:2A:F5:00:60:F0
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 0194258F16720D23610DB7910B600986B7C7
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/nfcB4W3-frcdsttLFxfqKvUAYPA.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3250
IP address blocks: 185.14.156.0/22 maxlen: 22
2a03:b240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:16:72:0d:23:61:0d:b7:91:0b:60:09:86:b7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9df701e16dfe7eb71db2db4b1717ea2af50060f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:9d:34:8e:db:49:d5:1f:3a:56:76:89:6a:
9d:e3:b4:df:19:73:37:11:4e:ca:50:7e:35:89:7b:
9c:73:57:95:8f:dd:65:c0:29:dd:ee:90:16:be:e9:
76:9a:1c:ef:4f:4a:f8:a2:4c:aa:82:67:86:3f:d3:
54:06:a9:28:41:f7:ab:dc:ca:32:e9:ba:b4:fd:ec:
49:45:79:78:82:c1:82:ed:62:a3:31:90:83:9e:29:
6f:0a:59:df:bc:56:f9:31:fc:a0:cd:a6:6e:01:de:
c4:3d:74:fe:46:1d:b2:35:82:72:94:2a:fe:77:ed:
c8:41:92:8e:12:63:b1:52:b2:b4:16:01:c7:3b:44:
47:55:b2:5b:dc:8e:b6:96:82:9f:dd:1e:de:44:fc:
3f:52:ed:36:ac:03:86:9e:37:0d:12:5b:8d:31:ae:
06:7b:66:80:1b:4a:8c:bb:02:14:51:7d:b3:57:0d:
81:2b:c2:97:89:05:43:da:ed:d8:95:6e:f5:51:14:
6d:58:ff:f6:1f:82:73:60:ea:59:5f:e2:c9:6a:21:
f7:f7:8b:cf:06:2e:34:6a:28:6c:85:19:99:de:45:
b3:fe:e8:73:8b:12:d5:82:71:4d:70:8f:43:79:30:
de:ec:54:c4:4f:a4:7c:e5:84:c9:ca:aa:98:c8:2f:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:01:E1:6D:FE:7E:B7:1D:B2:DB:4B:17:17:EA:2A:F5:00:60:F0
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/nfcB4W3-frcdsttLFxfqKvUAYPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.156.0/22
IPv6:
2a03:b240::/32
Signature Algorithm: sha256WithRSAEncryption
58:ac:69:3a:2f:3f:33:d7:96:f9:95:ae:39:04:7c:23:b7:c2:
0d:46:8a:5c:5f:c1:bc:a3:79:ea:1c:6f:52:ee:f1:3e:9a:fa:
d3:4c:1d:c4:2b:3a:59:72:d5:33:24:f8:6a:3e:25:6a:2a:d0:
83:20:7d:0e:b5:34:31:3b:50:6f:d4:80:6d:f0:99:fc:3a:50:
3b:5a:26:c2:a8:6d:55:a3:68:6d:8b:f8:25:9d:f1:32:85:4c:
ee:8f:3d:32:c8:c2:51:ec:9b:f2:1d:b4:9c:cd:f7:ed:9b:4c:
05:95:36:42:a5:29:dd:35:d5:26:1b:4d:d7:63:ab:2e:d9:f5:
29:b4:34:b3:60:38:3d:d1:d1:7e:ac:84:95:31:78:ca:42:54:
cd:51:6c:12:81:55:03:d6:f6:ca:58:46:34:b2:9d:dc:b0:9d:
82:cf:9c:31:7a:14:f0:14:f4:f1:5d:ca:f6:78:e2:b5:e6:11:
1c:d5:48:18:c1:54:01:87:b8:0c:a7:79:d0:6b:59:81:f6:d0:
03:0d:8d:a5:be:33:59:2c:d5:86:7b:32:a7:88:a8:19:7c:85:
f2:4b:b7:22:d7:3a:02:53:49:be:60:3d:a3:f5:3f:dd:86:a1:
50:18:79:92:77:7d:00:af:0d:be:4c:63:20:c3:71:17:e3:1e:
85:5d:08:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:37 2025 by rpki-client