Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/ngQh5dUp9npBOACQWIONz3R5Xk4.roa
File: ngQh5dUp9npBOACQWIONz3R5Xk4.roa (raw, json)
Hash identifier: t653pV8nTjyLsaWC3Zk3Ik5pVuX0VX8PrLjKO3PU3B4=
Subject key identifier: 9E:04:21:E5:D5:29:F6:7A:41:38:00:90:58:83:8D:CF:74:79:5E:4E
Certificate issuer: /CN=9b9319025733da87ed8fca2032e3f8a660495a71
Certificate serial: 0194258F87B3C39FFD8ABA622AF115F62919
Authority key identifier: 9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/ngQh5dUp9npBOACQWIONz3R5Xk4.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49233
IP address blocks: 185.251.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:87:b3:c3:9f:fd:8a:ba:62:2a:f1:15:f6:29:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b9319025733da87ed8fca2032e3f8a660495a71
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e0421e5d529f67a4138009058838dcf74795e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:78:ee:38:d1:5f:23:f4:05:bf:27:01:02:
32:85:61:f4:a5:d6:be:7d:58:5e:1c:f8:00:82:1c:
01:9e:bf:66:54:17:ce:07:91:1d:ad:9a:58:c5:0d:
45:ac:2a:1f:60:67:bf:3c:3b:62:c1:02:51:cd:df:
87:c7:07:10:cc:37:f2:63:64:c0:47:af:ce:6c:fe:
34:b1:88:2d:fd:94:be:c6:9d:1b:6a:56:38:5d:d1:
a7:c0:46:34:c6:f1:ed:c3:70:be:cb:a7:4c:90:d4:
97:f3:b2:03:f9:ae:41:4e:fa:df:5e:5c:1e:88:96:
1b:23:69:5d:6e:c3:46:7d:8a:b6:69:b3:83:39:c3:
2e:98:7f:1b:8c:50:ff:e5:57:e3:fb:96:c0:bf:47:
77:ad:00:03:05:2c:1c:9b:ec:bf:f3:02:de:9c:76:
7b:12:d8:82:bd:6a:13:79:58:cf:a0:1b:1d:13:c6:
e5:5d:90:e6:0c:82:2c:7c:af:4f:3a:e2:a0:25:22:
3d:69:51:e1:bc:d0:d6:37:a3:b4:5d:7e:b7:3e:6e:
3f:35:83:79:45:ca:f9:b0:6f:e3:2b:28:fe:c8:ab:
12:71:b3:d7:e3:64:e5:49:48:cd:3e:28:77:d4:a1:
71:6d:02:af:cd:64:0e:55:3f:c4:3e:28:90:6b:24:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:21:E5:D5:29:F6:7A:41:38:00:90:58:83:8D:CF:74:79:5E:4E
X509v3 Authority Key Identifier:
keyid:9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/ngQh5dUp9npBOACQWIONz3R5Xk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.108.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:f7:2f:ca:2b:c0:28:24:6e:21:d7:a3:29:19:bf:02:8c:74:
8c:55:21:97:ea:6f:f0:0e:30:d5:04:db:16:d4:06:b3:bf:04:
bf:7a:c5:43:59:43:86:90:ec:07:c2:fd:d1:69:b6:d7:a9:60:
48:39:aa:0f:57:60:12:09:a3:fa:6c:e1:d5:9e:2b:eb:3d:14:
31:92:13:4c:92:d5:69:49:10:ee:e5:aa:3f:4d:f8:b5:4a:ad:
71:06:ef:60:39:44:7c:08:41:3d:60:b9:5f:8b:2f:ef:ff:08:
69:ac:dc:73:fe:83:bc:c2:b6:27:bc:20:b3:46:a2:e5:cf:87:
eb:17:b7:0e:a8:af:46:b1:cc:80:be:4b:6f:c4:e9:8c:7e:cc:
39:91:a9:5a:d2:ba:9b:db:ee:e3:31:ee:73:c0:c7:3f:42:79:
cb:13:c1:18:e2:ff:ec:a5:d4:40:4c:f3:c3:9b:f0:5a:a1:a0:
6e:ce:f0:b6:e9:b7:cb:ee:a9:13:b0:fa:32:26:46:9d:d2:54:
6a:31:af:34:0e:7f:46:53:6d:d0:25:23:38:a4:f0:8a:12:ec:
57:a4:7c:eb:a5:02:8c:44:4b:43:ea:53:73:a1:cc:ea:66:f1:
1b:ea:fc:3d:ca:b8:f0:c1:d8:dc:c5:a9:4f:23:86:03:a5:29:
2d:9e:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:17 2025 by rpki-client