Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/nCIxCjPPY6DWPKx_WJ_D213f1h8.roa
File: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (raw, json)
Hash identifier: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=
Subject key identifier: 9C:22:31:0A:33:CF:63:A0:D6:3C:AC:7F:58:9F:C3:DB:5D:DF:D6:1F
Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial: 01942521ADC2BDEAB2A7B4D794453F52F500
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/nCIxCjPPY6DWPKx_WJ_D213f1h8.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41828
IP address blocks: 195.191.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ad:c2:bd:ea:b2:a7:b4:d7:94:45:3f:52:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c22310a33cf63a0d63cac7f589fc3db5ddfd61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:bd:c1:c7:e9:82:7c:65:0c:91:79:47:dd:
0a:19:7e:cc:be:48:86:83:b5:36:aa:16:c7:6a:84:
e6:be:af:c7:a7:67:7d:b6:9a:26:b6:b1:9a:46:d0:
63:8b:8a:cc:e0:a4:4f:92:ca:07:46:07:79:e2:75:
ca:ce:70:89:68:da:e9:d1:08:ae:b6:fd:d1:19:ad:
cd:1b:26:b7:e9:40:6d:f2:10:6f:f7:fb:76:76:3f:
84:02:c0:50:e1:14:94:94:21:72:a9:85:6e:c0:74:
00:84:bd:1e:17:8b:09:bb:4a:fc:96:c0:e8:f0:3f:
e3:00:37:3c:db:dd:db:03:d9:94:13:87:06:7b:d5:
8f:4f:73:6d:73:94:a7:85:21:16:85:97:ab:98:67:
42:74:bd:a7:1c:89:84:aa:07:62:e0:47:63:57:a0:
f2:3a:ab:66:18:0b:c0:54:55:01:f6:b0:02:cb:a0:
42:7d:28:8b:e5:23:79:fb:e9:f5:43:77:e3:8b:2e:
83:75:80:01:d9:68:a9:c6:01:6f:59:f5:29:df:c8:
d9:be:d2:85:b4:fb:b7:cb:b2:e5:51:ff:b4:35:a0:
00:28:55:b3:13:fb:ea:9b:09:cc:4b:bb:d5:e0:38:
95:8f:4c:70:dc:7e:21:fb:75:d0:c5:1f:65:e4:98:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:31:0A:33:CF:63:A0:D6:3C:AC:7F:58:9F:C3:DB:5D:DF:D6:1F
X509v3 Authority Key Identifier:
keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/nCIxCjPPY6DWPKx_WJ_D213f1h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e3:ed:16:d5:49:ef:cf:c4:b2:99:ba:87:86:c6:83:ca:3e:
19:07:53:ae:2f:9b:3f:cb:74:60:51:17:d0:b5:db:01:14:03:
dd:8b:22:d0:c6:87:60:6e:d0:d7:09:6d:ab:f4:22:1e:4b:10:
db:07:8e:bd:d5:a0:8f:b1:aa:e2:24:bf:c0:af:ab:a6:17:76:
86:d1:b9:94:ca:de:4d:71:41:cd:f8:5e:98:51:a4:cd:90:d0:
17:e5:2e:7a:6c:c5:df:b0:9e:0f:2a:31:e3:ba:bd:54:8d:6f:
31:d4:ce:9f:bd:98:a9:c0:53:f3:80:0f:12:ee:cb:eb:ae:fd:
b8:aa:f1:88:0b:5b:44:6a:56:95:5b:d7:bb:e6:14:05:1c:21:
1d:4a:09:89:4c:a3:cf:73:26:50:d8:ce:10:bb:36:a2:0c:c7:
e5:a7:08:c4:94:77:4a:f2:8b:38:ed:42:86:b4:f5:f4:2b:1f:
20:d3:15:69:f6:45:c1:88:00:4c:af:54:51:9d:5b:1c:14:ab:
cd:cf:dc:cf:f2:e7:46:e6:8e:20:ac:85:22:c8:f9:b8:a7:bc:
2b:3b:d6:54:f8:f2:34:9a:ab:32:16:15:cb:ea:c9:81:2e:3d:
2e:04:99:4a:d3:3b:fc:9a:f8:31:c5:5b:db:62:ae:d0:21:8f:
1a:b3:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:28 2025 by rpki-client