Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/n6tTr6zCJWcy243UaHGcvc68Cuo.roa
File: n6tTr6zCJWcy243UaHGcvc68Cuo.roa (raw, json)
Hash identifier: 0ym6kX5GeiUQfUcNj5Jvc+XuXgOTW8J6SoBaRmr08MM=
Subject key identifier: 9F:AB:53:AF:AC:C2:25:67:32:DB:8D:D4:68:71:9C:BD:CE:BC:0A:EA
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 01942368F41E26B3432E2815F52D57228818
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/n6tTr6zCJWcy243UaHGcvc68Cuo.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56430
IP address blocks: 77.81.64.0/24 maxlen: 24
86.105.152.0/23 maxlen: 23
86.105.155.0/24 maxlen: 24
89.36.18.0/24 maxlen: 24
89.36.93.0/24 maxlen: 24
89.40.214.0/24 maxlen: 24
89.42.42.0/24 maxlen: 24
89.43.174.0/24 maxlen: 24
185.82.172.0/22 maxlen: 22
188.212.250.0/24 maxlen: 24
188.241.13.0/24 maxlen: 24
193.33.200.0/23 maxlen: 23
193.105.218.0/24 maxlen: 24
2a05:91c0::/32 maxlen: 32
2a05:91c4::/32 maxlen: 32
2a09:1340::/29 maxlen: 29
2a0f:8b80::/29 maxlen: 29
2a12:aec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f4:1e:26:b3:43:2e:28:15:f5:2d:57:22:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fab53afacc2256732db8dd468719cbdcebc0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:dc:75:98:12:db:57:ac:0e:a8:d7:ff:ab:
7d:fa:6e:e7:dd:4c:ba:4d:f7:60:03:b5:16:a3:5a:
f5:50:47:24:d8:ba:0b:38:27:33:7f:c6:68:d9:65:
bf:5f:fa:fa:8b:10:3f:2e:a6:dd:46:5b:3c:37:45:
95:c4:7d:7f:98:e6:d3:83:0b:30:02:68:aa:a3:24:
66:37:2a:0e:00:13:55:d9:e6:cb:43:21:2d:f6:8f:
0c:74:5e:96:15:a3:c5:60:6c:e7:5d:0e:89:2e:3b:
e5:2c:6c:11:f4:8e:b7:d7:2e:e3:48:82:be:ca:53:
b8:c2:87:cc:ec:b4:0b:26:f0:84:f0:c5:d1:e5:99:
b1:0b:ee:9a:ac:8a:6e:31:47:f0:91:96:2f:16:57:
d3:7f:37:43:2e:f2:60:7f:29:24:25:fa:b2:7f:de:
b3:12:c2:64:24:6e:6d:79:e9:c0:1e:28:da:5c:21:
a1:4e:93:60:77:57:9d:b0:ac:30:60:f7:7a:09:10:
e2:17:13:00:ae:7a:34:7c:7d:ef:40:62:a2:23:c9:
63:d1:6f:92:fb:b4:49:e8:96:a1:7f:d3:99:06:55:
b6:bb:b9:00:96:6b:36:36:2d:1e:67:16:df:b9:fe:
e6:1d:a1:d7:8b:8c:70:d1:bd:83:4d:10:7b:70:fd:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:53:AF:AC:C2:25:67:32:DB:8D:D4:68:71:9C:BD:CE:BC:0A:EA
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/n6tTr6zCJWcy243UaHGcvc68Cuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.64.0/24
86.105.152.0/23
86.105.155.0/24
89.36.18.0/24
89.36.93.0/24
89.40.214.0/24
89.42.42.0/24
89.43.174.0/24
185.82.172.0/22
188.212.250.0/24
188.241.13.0/24
193.33.200.0/23
193.105.218.0/24
IPv6:
2a05:91c0::/32
2a05:91c4::/32
2a09:1340::/29
2a0f:8b80::/29
2a12:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:c1:13:c8:7c:f9:b3:1e:45:f9:09:41:71:f1:6b:7b:ab:fa:
e2:b7:3b:83:bb:71:64:8f:c0:55:d5:d9:64:ad:14:65:47:ae:
89:87:e7:e6:46:37:b8:16:7c:48:20:a1:e2:b4:5f:0e:b9:a2:
de:ef:53:e2:94:b9:c0:a2:68:3a:10:ce:33:29:25:d8:e8:8b:
5a:57:4b:c7:37:ad:96:e8:e5:55:0a:0b:41:9a:73:b0:7a:98:
73:b1:14:49:d8:79:03:9a:91:70:2a:7c:85:7d:ff:38:90:ac:
d5:d4:32:b2:41:8c:8b:72:13:7d:d7:0e:58:61:4f:03:f5:75:
2d:da:b7:76:25:4e:fc:cb:07:cf:00:88:e0:30:89:94:a2:52:
78:ac:8e:ba:38:48:0b:58:f8:79:cc:01:f5:23:d8:19:16:1a:
db:07:c9:a4:71:10:cb:fa:fa:e5:a8:2a:24:3e:b5:8d:87:ab:
86:27:b4:3a:16:31:dd:4d:32:17:82:50:6c:36:66:15:5e:02:
cd:82:cb:0a:40:4b:be:31:1e:10:d3:ce:8a:39:6c:f6:05:f8:
ee:77:0a:4d:02:6e:b9:e5:6a:24:b3:e7:82:c3:d2:49:60:b6:
50:8b:b7:5a:40:70:a1:64:b0:a9:d9:48:03:e7:d0:a5:e7:83:
67:4e:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:45 2025 by rpki-client