Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa
File: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (raw, json)
Hash identifier: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=
Subject key identifier: 35:1C:47:E8:B0:D0:16:7A:B0:96:F4:C8:B0:67:FE:7F:7C:DD:81:93
Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial: 01942521683969EC0308D72FC5C47678F765
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214267
IP address blocks: 193.3.35.0/24 maxlen: 24
2a10:c440::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:68:39:69:ec:03:08:d7:2f:c5:c4:76:78:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351c47e8b0d0167ab096f4c8b067fe7f7cdd8193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:ae:bb:df:88:51:e8:59:bd:00:5d:cf:7c:
ac:8f:36:44:bf:18:2b:87:a7:a3:1d:09:2a:5b:71:
8e:52:c9:70:c6:da:90:5f:9c:98:5f:19:a2:ea:17:
4e:ab:6b:9e:ac:b9:76:89:cf:9c:5c:1d:22:e8:57:
26:c7:99:cc:3d:54:71:86:d7:44:b4:cb:24:85:53:
49:e8:10:43:62:3d:aa:55:ed:82:25:25:f5:4f:48:
4d:9e:57:54:42:b0:50:50:12:84:7c:d7:42:75:f7:
b4:3f:fd:54:8f:aa:c4:30:84:95:99:bf:2a:29:e1:
f5:93:39:6b:22:30:97:89:f8:df:03:8b:16:af:4c:
a1:a4:f8:0a:00:6e:81:21:47:1e:1d:33:49:2a:ba:
dc:54:29:03:6c:29:0e:33:cf:25:6f:85:85:b4:e3:
be:d6:df:cb:4d:8e:6b:6b:23:3d:da:1b:54:cb:81:
8d:4e:57:c9:ef:32:c4:c1:82:45:70:dc:90:65:cf:
82:91:09:3c:0b:53:90:0b:80:cc:97:55:e9:7b:21:
d3:b5:e3:fc:ac:c7:a6:b5:76:91:25:b7:3b:d1:79:
75:66:42:f4:60:73:e7:18:e7:cf:19:72:c9:31:7f:
f0:0f:5e:d0:3e:dc:15:36:30:90:aa:4d:6e:ff:e3:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1C:47:E8:B0:D0:16:7A:B0:96:F4:C8:B0:67:FE:7F:7C:DD:81:93
X509v3 Authority Key Identifier:
keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.35.0/24
IPv6:
2a10:c440::/29
Signature Algorithm: sha256WithRSAEncryption
2b:5e:8a:03:e5:d1:95:31:54:32:6f:12:e8:48:07:fc:ec:7d:
05:f9:8c:52:4b:86:55:ba:0d:6a:11:55:5e:04:3c:38:9a:bc:
15:11:96:3e:40:2f:b4:72:36:58:69:bf:d8:41:fd:2a:8f:8c:
2a:29:1d:5c:72:ad:c3:f7:11:a3:15:63:a4:78:91:de:a3:68:
df:a6:b0:12:f2:f1:45:27:25:76:16:a4:5e:5d:65:23:52:f4:
23:18:7f:a5:40:cd:53:71:e0:4d:6b:5a:87:88:28:76:c9:e8:
1d:91:20:c3:67:54:f2:0a:6a:70:2e:e7:13:11:1a:f4:73:98:
ac:94:26:87:c5:70:23:14:18:9e:03:4d:15:16:f1:af:28:d2:
17:0b:47:82:fd:b7:51:ea:17:a7:4d:67:0d:38:74:32:af:85:
f9:29:95:07:72:28:d9:a5:2f:02:9d:2d:72:3f:4f:94:59:d1:
af:ff:ad:92:a8:4c:1f:63:20:ff:bc:8e:07:2d:67:d7:78:d1:
d0:4e:70:e7:98:f4:12:3d:79:f2:44:46:b7:e3:90:de:91:8b:
b7:21:57:ad:b1:00:9d:ac:be:eb:61:50:1c:71:69:24:77:31:
0b:11:cf:86:26:96:b8:89:47:91:0a:bf:71:56:e1:7a:28:5a:
21:f9:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:03 2025 by rpki-client