Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/nMthV73xKQot_nDw1BjaSeVp1wM.roa
File: nMthV73xKQot_nDw1BjaSeVp1wM.roa (raw, json)
Hash identifier: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=
Subject key identifier: 9C:CB:61:57:BD:F1:29:0A:2D:FE:70:F0:D4:18:DA:49:E5:69:D7:03
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 019422FC4680CFD03F6CE689CF398FAEE7C9
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/nMthV73xKQot_nDw1BjaSeVp1wM.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211251
IP address blocks: 79.98.176.0/22 maxlen: 24
79.98.176.0/24 maxlen: 24
79.98.177.0/24 maxlen: 24
79.98.179.0/24 maxlen: 24
213.171.64.0/23 maxlen: 23
213.171.66.0/23 maxlen: 23
213.171.66.0/24 maxlen: 24
213.171.67.0/24 maxlen: 24
213.171.68.0/23 maxlen: 23
213.171.72.0/23 maxlen: 23
213.171.72.0/24 maxlen: 24
213.171.73.0/24 maxlen: 24
213.171.74.0/24 maxlen: 24
213.171.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:46:80:cf:d0:3f:6c:e6:89:cf:39:8f:ae:e7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ccb6157bdf1290a2dfe70f0d418da49e569d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:06:28:2d:bd:b9:9d:a3:86:07:05:ad:89:
08:7a:82:05:31:02:26:a4:85:64:df:15:23:c3:35:
e4:73:91:50:3e:d4:61:7b:bb:5d:b8:e7:5c:e9:23:
90:17:8a:3e:c1:60:4a:ea:4d:27:8b:0b:e4:93:78:
ff:d3:c6:e6:bb:1c:cf:68:97:9a:cc:0f:5f:4a:e9:
c8:de:4e:05:b4:27:08:ad:33:f4:de:ac:41:37:8b:
d1:91:04:5b:b7:5f:7c:c6:8e:3e:90:09:cc:31:52:
42:f2:46:9f:13:ca:c0:69:62:ec:04:5a:11:49:a7:
62:10:6a:8c:97:de:eb:1d:34:5f:d2:a8:5e:c7:c7:
2c:58:fc:c7:f2:ad:4a:6f:3a:8c:a0:27:37:a8:1e:
75:d3:d5:36:2f:31:60:fa:76:de:16:7f:a2:82:67:
e2:30:5e:06:20:7f:ee:e3:74:fe:57:27:bc:e0:f6:
b6:1c:f3:52:3d:09:a0:aa:cd:23:2c:ba:91:a6:67:
0c:18:0d:0b:93:dc:d8:37:19:40:0b:90:37:77:1b:
a6:98:c1:13:99:72:2e:8c:3b:09:f0:67:f8:3d:9e:
ee:38:a9:9b:9b:d5:1e:e5:40:cd:b2:ed:25:e6:1c:
57:8d:d8:10:e1:ac:d7:3e:7b:d6:7c:17:d2:61:90:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:61:57:BD:F1:29:0A:2D:FE:70:F0:D4:18:DA:49:E5:69:D7:03
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/nMthV73xKQot_nDw1BjaSeVp1wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.64.0-213.171.69.255
213.171.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:bf:f8:20:db:91:c1:aa:a6:33:83:6e:bd:8f:90:b7:26:ad:
a1:36:cd:0a:09:21:74:b9:93:3f:9e:fd:07:c6:33:03:25:8f:
ac:90:0b:ed:e2:19:97:0c:26:f5:a8:07:24:98:db:17:b2:c7:
53:f2:dd:42:bc:ee:28:f6:23:bd:19:2a:99:cc:6e:9c:8e:ca:
23:37:a4:be:5e:3c:db:bc:6f:81:c5:37:db:fa:e6:a9:16:ff:
29:79:46:31:a1:17:ef:11:71:51:7b:0b:28:85:06:87:3d:97:
0f:d9:11:e4:ec:15:f4:72:9d:f9:eb:2e:7b:4f:01:12:06:5d:
6c:68:75:30:41:12:a9:1d:f2:f3:a8:c3:5e:11:9c:d5:57:ff:
f6:f4:4c:4a:f9:11:1e:31:7a:74:4f:68:f4:15:70:2c:0f:1c:
c6:c8:04:5e:d6:8d:ba:c8:08:eb:74:9e:e1:c0:fe:8b:10:ec:
60:cd:46:87:b7:ff:fd:2e:87:20:84:74:f3:ad:65:3d:ea:52:
0a:ad:c1:b9:3f:66:fe:61:7e:00:9a:28:55:e8:a6:68:79:59:
82:33:af:69:7b:24:16:96:4f:fd:21:64:d5:ff:9c:17:5c:0b:
0e:97:b8:b5:f1:ed:96:ad:1f:73:3e:df:74:43:aa:c4:66:34:
72:5b:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:36:30 2025 by rpki-client