Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/nJCyjIsWdPchQmqQbO_MPjGVVDE.roa
File: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (raw, json)
Hash identifier: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=
Subject key identifier: 9C:90:B2:8C:8B:16:74:F7:21:42:6A:90:6C:EF:CC:3E:31:95:54:31
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 019420D5A89E0202D0726AE19F6282F7DB94
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/nJCyjIsWdPchQmqQbO_MPjGVVDE.roa
Signing time: Wed 01 Jan 2025 07:47:40 +0000
ROA not before: Wed 01 Jan 2025 07:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30798
IP address blocks: 45.154.68.0/22 maxlen: 24
62.204.0.0/19 maxlen: 24
89.236.64.0/18 maxlen: 24
213.185.32.0/19 maxlen: 24
217.112.240.0/20 maxlen: 24
2001:40e8::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a8:9e:02:02:d0:72:6a:e1:9f:62:82:f7:db:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Jan 1 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c90b28c8b1674f721426a906cefcc3e31955431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:78:b8:7e:66:c7:be:c5:0f:28:81:42:25:b3:
8a:e2:25:9e:ef:1f:05:0c:5a:8a:80:c9:62:8e:e5:
55:fb:b0:9f:eb:f8:47:a5:86:74:e2:e2:86:52:d0:
51:d7:a5:c8:79:60:a0:67:9b:c1:8c:c6:14:46:14:
7a:59:2b:e4:ba:48:7b:73:0f:ba:4e:95:0a:03:7f:
ab:7c:7f:c4:73:ec:7e:36:bf:1b:9b:24:6f:1c:a3:
07:a2:00:a6:7b:54:ac:70:1e:9a:64:52:d8:68:7b:
8b:59:1b:10:91:de:f8:cb:2a:85:57:c8:cf:78:be:
08:18:37:0a:44:e8:58:41:d9:e9:3d:03:82:ee:e4:
53:3c:e2:6b:83:0e:aa:e5:67:ad:48:96:9e:79:f1:
d1:28:7e:9c:49:79:ce:ed:52:00:df:87:a3:dc:55:
d5:23:21:08:83:b8:a2:c5:2e:a2:bb:39:4b:53:2f:
fe:1e:bd:2c:67:84:40:15:bc:7e:a2:32:82:e5:1d:
5a:36:67:4f:2d:f3:39:01:2d:71:96:ac:35:8e:b0:
12:24:85:b2:57:b0:ae:08:ef:f7:a6:7a:45:e9:cb:
c5:49:50:65:67:9d:5a:27:d1:50:f6:e6:53:86:6d:
29:71:50:47:a7:89:35:5a:e1:79:37:17:f3:b9:2a:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:B2:8C:8B:16:74:F7:21:42:6A:90:6C:EF:CC:3E:31:95:54:31
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/nJCyjIsWdPchQmqQbO_MPjGVVDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.68.0/22
62.204.0.0/19
89.236.64.0/18
213.185.32.0/19
217.112.240.0/20
IPv6:
2001:40e8::/32
Signature Algorithm: sha256WithRSAEncryption
00:63:5f:2e:51:15:87:1f:73:4b:7c:b6:45:1e:8b:ef:7c:c5:
b2:b8:6c:fe:43:89:1d:63:cc:81:c2:a1:56:7a:7f:4a:04:e2:
69:d4:03:b1:85:e9:87:ad:01:1a:21:47:3d:4b:71:4c:45:31:
b1:7c:18:4a:ad:66:a9:7a:45:73:51:9b:4d:eb:30:76:55:9e:
3e:60:3c:a5:93:d6:4b:4e:f5:4d:f2:51:09:22:87:45:89:1d:
d3:ac:07:13:00:b9:a9:a9:ff:ea:a9:05:cd:72:45:98:91:b7:
0e:03:9b:a2:3b:1b:6d:eb:69:75:6d:35:c9:77:5f:2f:f1:79:
f5:cb:e6:58:95:84:5a:33:8d:2b:56:0f:8f:80:42:a2:6a:07:
a3:2c:a1:b4:28:7d:fc:bf:8f:56:57:88:88:32:56:a0:83:01:
f6:9c:7e:6c:33:bf:a9:47:23:18:c6:2e:21:cf:1e:a4:0e:76:
4f:b2:d6:3e:1d:89:87:cb:20:a6:51:d2:01:60:eb:37:93:0d:
3e:dc:4f:9f:eb:f2:e3:26:3f:ba:ff:ce:3c:bd:1a:07:e6:35:
d8:63:64:b8:de:6b:6f:be:d1:ab:38:97:44:5c:e1:b1:5b:7a:
05:a3:09:4d:3c:ca:b9:f2:05:19:4b:4c:5e:80:d9:24:22:f2:
16:8e:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:19 2025 by rpki-client