Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa
File: NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa (raw, json)
Hash identifier: UKGnXTi/GeJEOIoHxk7WzSeeqHfs9EFC0zZJNKKSIz0=
Subject key identifier: 34:08:8C:C8:7B:10:F9:A6:CA:54:FE:94:E5:9A:44:2B:F0:E4:1D:5E
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 0194274861E77544EDECC97AC4C7F0A29B0E
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6712
IP address blocks: 82.117.240.0/24 maxlen: 24
82.117.246.0/24 maxlen: 24
91.250.0.0/19 maxlen: 24
91.250.32.0/19 maxlen: 24
2a00:1210:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:61:e7:75:44:ed:ec:c9:7a:c4:c7:f0:a2:9b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34088cc87b10f9a6ca54fe94e59a442bf0e41d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:94:00:2e:99:59:42:d3:b1:0f:8b:3f:17:
8f:2e:69:f8:9a:82:47:61:15:80:64:e1:ae:bc:06:
e6:db:10:a6:e6:f5:9e:fa:e4:52:1a:eb:b1:a9:de:
a5:f2:03:a8:e2:1c:05:4f:47:88:32:65:49:2b:1d:
fb:cc:30:c7:15:ae:a1:6f:a1:f0:36:69:5a:67:7c:
a8:2e:1b:fc:a0:93:1d:ee:08:e4:ab:59:13:0d:2f:
dd:b7:8a:28:47:29:5b:d5:68:51:1f:d9:09:75:f7:
8f:f5:ee:4b:d1:84:52:6f:ee:c2:57:57:37:5d:a7:
f1:79:73:dc:a6:b0:90:ae:13:8a:8d:18:c6:a7:e1:
1a:ad:11:17:83:e2:74:2e:db:f0:40:c4:36:36:d0:
b9:3b:54:25:d0:5b:71:9a:4f:78:58:b6:2d:27:a9:
86:35:12:89:15:04:d8:54:00:c6:64:1d:fb:ca:98:
05:cd:07:44:73:1a:60:20:af:d2:ad:fa:45:96:0f:
f2:60:b0:83:86:38:19:bc:c2:0b:a6:15:46:81:2a:
18:57:ba:f0:fa:e1:09:4b:05:df:fe:2f:db:32:c5:
ea:8d:e7:0c:98:85:39:9e:71:8c:b0:b7:6f:cd:a5:
e6:da:7c:94:3f:25:21:50:3f:c5:9a:bc:d9:9b:6e:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:08:8C:C8:7B:10:F9:A6:CA:54:FE:94:E5:9A:44:2B:F0:E4:1D:5E
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.240.0/24
82.117.246.0/24
91.250.0.0/18
IPv6:
2a00:1210:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
3e:f3:ae:77:c4:bf:93:f8:52:6c:f6:0c:ad:b3:b0:a3:8e:c7:
be:39:a3:13:e9:cb:b4:fb:54:fe:e2:43:d1:d4:b8:58:92:30:
e9:e5:0e:ad:fc:50:d9:1c:8c:b2:1c:e7:09:b6:20:34:0f:8e:
94:be:0d:7b:a6:f1:e0:b9:2a:5b:6c:a3:c3:79:9b:b5:2a:16:
b9:0b:97:1f:4b:80:e1:e0:0c:59:97:0c:d3:0e:00:36:6f:cf:
77:8c:b1:b4:14:89:4a:d0:14:a1:85:b2:59:a4:76:3a:9a:e0:
1e:3d:b3:07:e0:ac:1c:39:0c:30:26:14:e8:ac:c1:a5:2d:1e:
f7:8c:41:c3:e7:61:e2:d4:ce:b0:e4:e8:b4:7f:b5:31:33:76:
68:05:24:d5:c1:d1:4a:af:2c:5d:f0:08:90:f7:a5:06:51:7e:
60:f3:33:1f:b1:cd:2b:c4:8e:14:75:c0:bd:42:fd:b3:91:93:
37:1f:ee:46:ee:f8:ba:65:7b:48:33:25:16:94:22:fb:a1:bd:
7f:11:6e:9f:49:aa:c3:3e:cc:77:3c:53:e5:d7:2a:6e:8c:c6:
1f:14:30:48:6f:87:89:3f:3d:2b:48:60:ed:c2:1b:d0:02:5a:
89:bb:63:e7:6a:b8:7a:c3:a3:42:9e:16:8e:d8:00:52:d3:7c:
43:20:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:16 2025 by rpki-client