Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/nwCOxkv66koG3i9Jl8ELNt3ecAc.roa
File: nwCOxkv66koG3i9Jl8ELNt3ecAc.roa (raw, json)
Hash identifier: c1Xrb1XKWY7eyfpfP9ZBqFg/HdAuRE4CbCHJwAAtsDs=
Subject key identifier: 9F:00:8E:C6:4B:FA:EA:4A:06:DE:2F:49:97:C1:0B:36:DD:DE:70:07
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019427B3F2E101C58856E475001D01842068
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/nwCOxkv66koG3i9Jl8ELNt3ecAc.roa
Signing time: Thu 02 Jan 2025 15:48:12 +0000
ROA not before: Thu 02 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8308
IP address blocks: 194.92.0.0/16 maxlen: 16
2a0a:3a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:f2:e1:01:c5:88:56:e4:75:00:1d:01:84:20:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Jan 2 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f008ec64bfaea4a06de2f4997c10b36ddde7007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:2d:04:a7:52:2a:cd:b3:2d:06:d2:e8:46:
f4:a0:44:c5:5d:6d:dc:c2:ec:62:2f:5c:e0:81:f8:
f6:fe:c5:9d:8b:47:05:3c:28:4a:74:37:c7:ca:c5:
0b:90:39:7b:1e:73:b8:ba:72:a7:50:cb:54:ce:d3:
f0:1a:47:4a:94:bd:b1:23:58:52:49:de:34:d4:cc:
91:03:e0:36:6c:8e:64:eb:83:82:9f:cf:bc:60:4c:
82:2c:52:e7:0c:37:8b:42:75:8e:8a:6e:1b:77:69:
ee:98:2e:a1:2e:bd:7c:71:8b:18:50:43:dc:2d:86:
eb:53:9a:eb:49:fc:ab:0c:69:64:39:5c:e2:27:7e:
32:5b:d1:ac:4c:6c:06:df:51:aa:98:aa:a4:d1:80:
a4:99:f2:02:71:f1:31:cf:4a:88:c2:29:8b:f7:ca:
7f:f1:98:0d:92:69:a7:f5:e7:1c:d6:63:bc:29:0d:
e5:7a:c5:a8:97:1d:4c:43:c7:07:c8:5a:78:e9:00:
0b:ba:5f:e2:07:ed:65:df:2a:89:0b:71:26:b3:98:
2a:12:87:0b:be:7c:36:57:19:6c:07:20:12:e5:c1:
4b:0e:a2:ca:53:45:8f:a4:88:c7:92:72:6a:4b:a2:
16:94:94:86:1e:cb:e9:4f:c1:16:d8:64:b3:48:1d:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:8E:C6:4B:FA:EA:4A:06:DE:2F:49:97:C1:0B:36:DD:DE:70:07
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/nwCOxkv66koG3i9Jl8ELNt3ecAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.0.0/16
IPv6:
2a0a:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
5d:4f:5e:c8:8e:2e:02:59:1e:8b:06:63:bf:79:26:ab:31:ec:
42:e5:bf:38:e9:ce:b5:28:da:cb:73:74:77:9e:ff:bb:3a:67:
83:81:9c:16:9d:d1:3d:b2:95:1d:e9:35:7f:cf:91:90:1b:63:
51:bd:e9:b1:dd:e7:97:0b:e0:81:ec:12:79:6c:56:a4:d4:ad:
98:a6:52:57:3b:b0:49:4a:47:04:15:d0:9e:89:28:10:aa:55:
f6:e1:e2:f2:2b:31:83:56:29:ec:b5:77:86:f4:f3:c6:ff:a1:
14:30:1a:42:69:17:00:c7:69:02:9b:6c:85:c2:26:4f:a6:af:
ac:c8:8d:76:0c:f3:31:de:a6:5d:32:d2:59:c3:85:68:dc:0b:
3a:dd:d8:d5:d5:c5:72:35:02:e9:14:8a:e4:1a:3d:b3:78:55:
6b:02:e5:3c:c9:04:53:6b:16:17:e5:7b:4b:16:60:3c:04:8c:
69:4d:a8:03:c2:35:b2:aa:5f:5a:65:a8:e9:b8:d0:d6:9b:32:
a9:d8:27:1a:9a:27:5c:ef:52:8c:90:3d:a7:d8:67:c2:99:58:
e5:c6:0c:b5:5b:13:ad:62:8b:e4:d4:5d:23:6d:55:a7:d0:f5:
02:91:1f:56:e2:5e:52:ad:4e:ab:ea:cb:c2:c9:c9:b1:31:cd:
df:6a:cc:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:17:06 2025 by rpki-client