Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/NR9HV4acGoApHHDJDWYupOCz2zg.roa
File: NR9HV4acGoApHHDJDWYupOCz2zg.roa (raw, json)
Hash identifier: FriwYpmfuXTn7afUyv1p7OwXj5qQDdCL6/trn8iuuXo=
Subject key identifier: 35:1F:47:57:86:9C:1A:80:29:1C:70:C9:0D:66:2E:A4:E0:B3:DB:38
Certificate issuer: /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial: 0194266C4874EF44F0C450C7BB9CBB441233
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/NR9HV4acGoApHHDJDWYupOCz2zg.roa
Signing time: Thu 02 Jan 2025 09:50:18 +0000
ROA not before: Thu 02 Jan 2025 09:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197942
IP address blocks: 2001:67c:2384::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:48:74:ef:44:f0:c4:50:c7:bb:9c:bb:44:12:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Validity
Not Before: Jan 2 09:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351f4757869c1a80291c70c90d662ea4e0b3db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ae:82:8c:1e:17:45:a8:c0:79:c4:a0:3b:47:
2a:72:43:52:50:fb:09:15:56:84:79:d1:c4:1d:1c:
ce:50:08:0f:b7:51:68:6c:69:d5:08:26:92:25:c5:
64:21:88:00:98:4e:1d:32:14:35:17:88:bd:5a:c6:
57:78:b5:c8:54:9d:f7:3e:09:64:f1:64:fe:7a:d0:
d4:7b:0e:1e:02:30:1b:68:ad:25:02:ae:8b:e6:d5:
26:ec:c8:20:e8:8e:12:11:b8:35:5e:99:09:20:e3:
18:64:cf:4f:37:99:32:a0:11:7e:76:da:7f:63:60:
e1:3e:3e:93:ce:07:af:3a:22:f2:25:a3:2f:cf:32:
48:62:9f:81:f0:6f:36:75:38:20:b2:25:2f:b3:c0:
b9:e4:c1:35:e4:3a:03:09:e7:23:ec:72:54:7d:94:
0b:57:b6:6c:72:85:22:0d:b0:1a:19:b9:b2:20:90:
68:9f:4f:b6:46:b3:07:e8:80:1f:c3:12:59:90:aa:
b6:03:f3:1d:06:2b:ad:49:dd:fd:dc:14:61:20:b3:
aa:e8:18:f7:94:14:fc:d1:9c:40:9c:fd:5e:2d:20:
d2:bc:4e:0d:40:79:24:44:92:72:ef:3a:fa:ba:c9:
11:8e:c4:e2:ba:d3:12:f0:2a:3a:a4:c9:43:90:a1:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:47:57:86:9C:1A:80:29:1C:70:C9:0D:66:2E:A4:E0:B3:DB:38
X509v3 Authority Key Identifier:
keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/NR9HV4acGoApHHDJDWYupOCz2zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2384::/48
Signature Algorithm: sha256WithRSAEncryption
64:fd:89:da:bb:5a:54:48:c0:76:64:80:ae:c0:38:23:5b:0d:
dc:23:e3:15:1c:9d:2b:58:d6:19:cf:fd:34:9f:eb:1b:26:a0:
9d:c2:82:be:37:20:81:83:77:99:4d:8a:6d:40:86:bb:13:bb:
0a:95:70:d4:77:e4:ad:a9:e5:c2:17:d2:31:c4:ed:f2:71:a7:
81:a4:79:30:c9:9f:f4:1d:92:f8:95:0f:00:0a:01:f7:e6:76:
d7:9b:e5:48:d1:6e:df:a6:7e:8d:e9:5c:c4:2e:10:46:25:90:
aa:67:b2:a9:b5:2e:cc:27:99:02:e7:55:43:05:2a:f6:a2:e8:
6c:c4:4e:81:28:51:99:ab:71:9d:d2:c4:c9:72:bd:bc:8d:0f:
8e:18:b1:7e:50:f0:6d:4f:45:75:05:ba:18:2a:61:79:2a:5b:
24:28:68:9d:99:9c:dc:77:b4:27:94:9b:a7:20:7c:a1:80:cc:
a5:4e:87:76:41:ef:74:21:22:0a:da:d2:b3:c7:dc:63:35:e5:
63:9d:2e:bc:df:70:2d:74:02:7f:cb:fb:97:1c:8f:fb:de:12:
1a:c8:7c:27:c1:ee:95:73:30:f8:5f:89:e0:61:9a:be:12:b8:
40:0f:34:73:5e:00:46:7f:74:c4:2e:13:73:98:8d:60:97:d5:
3f:5e:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:58 2025 by rpki-client