Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa
File: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (raw, json)
Hash identifier: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=
Subject key identifier: 36:47:6C:7C:1A:95:CF:8F:17:E4:7D:98:D5:64:09:4A:EF:2F:96:DE
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019420D5987432E4E154E4472E633281FDB0
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47352
IP address blocks: 185.1.236.0/24 maxlen: 24
2001:7f8:126::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:98:74:32:e4:e1:54:e4:47:2e:63:32:81:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36476c7c1a95cf8f17e47d98d564094aef2f96de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:e3:d6:39:82:02:7b:72:53:ed:e4:03:b4:
21:18:59:96:9f:b1:6d:05:14:8c:02:9c:44:c1:8f:
da:1a:e9:6e:84:90:c4:2c:e1:0b:b1:6e:eb:76:7d:
20:92:26:b4:5d:a3:f7:d7:91:f6:11:71:dc:a4:5a:
f5:3a:24:bb:39:85:51:ee:47:22:8c:d7:3b:5a:5a:
67:6b:3f:63:7a:73:e2:30:52:52:6e:9b:61:6f:e3:
d2:77:cd:b0:4d:ee:4d:be:d8:90:7a:8e:bc:f3:c7:
ea:f9:30:25:c1:37:4a:ac:9e:fd:db:e3:8d:dc:01:
86:18:33:ce:1c:2b:26:35:4b:c2:3e:62:8b:a0:23:
61:5e:8e:89:ba:6a:2e:60:39:d0:e9:c2:97:31:e0:
f6:54:93:94:2a:50:bb:43:58:1c:55:5b:50:db:f1:
fd:5c:39:8e:6d:08:93:bf:48:6c:f6:89:73:26:d3:
d6:17:d2:c1:fb:49:1c:5e:53:a8:07:96:3c:98:c6:
ae:dc:97:2b:2a:dc:1b:8b:ff:63:bf:b7:74:5e:6e:
70:31:4e:25:e5:8a:fc:e7:f5:b7:1c:3e:3a:ac:64:
85:03:9e:b0:68:1b:5b:72:31:35:2f:eb:06:dd:e7:
d1:cd:6f:d6:38:38:7f:b0:8b:d6:4c:a9:cb:12:2f:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:47:6C:7C:1A:95:CF:8F:17:E4:7D:98:D5:64:09:4A:EF:2F:96:DE
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.236.0/24
IPv6:
2001:7f8:126::/48
Signature Algorithm: sha256WithRSAEncryption
7e:18:78:63:a1:94:8d:56:47:ce:a9:9f:c0:ad:c1:07:56:f1:
1a:42:10:3b:16:05:57:a5:04:75:44:b4:41:98:5b:1c:7e:47:
7a:fd:47:01:e5:e7:c2:a0:f1:f0:8c:77:57:04:05:59:85:27:
53:7b:6d:df:91:5f:27:58:e0:38:46:ad:ec:6f:04:18:f3:36:
fe:ed:18:0e:51:b3:7e:9a:31:e5:67:17:8d:27:7c:07:32:37:
d9:dc:66:61:44:a4:60:f1:9c:f9:2c:30:bd:0d:ba:21:5e:69:
c5:9b:63:b7:6b:e4:44:1b:50:3d:99:fe:82:a6:3b:72:57:03:
f0:72:65:f2:d6:8f:1f:0e:97:83:b4:35:c3:41:2f:35:b2:cc:
8b:3d:d4:86:28:b1:fe:f8:51:85:e0:70:f3:fb:88:59:55:b4:
10:f9:98:12:41:34:9e:c6:d1:35:25:e9:ce:c7:1c:5c:35:88:
83:d4:4a:08:3d:94:f7:38:c9:25:76:dd:65:16:5a:0a:c3:e7:
73:12:82:19:52:3d:45:2d:21:3b:9f:34:41:ac:ee:a2:67:ce:
77:d0:59:25:2b:b2:7a:50:73:d4:a4:78:ad:9a:94:06:a7:17:
37:db:81:05:81:8b:d6:3b:ff:53:a9:d4:36:3e:ce:93:ba:4b:
06:86:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:26 2025 by rpki-client