Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/nUZL90rmkrco30I534YuD3uEoLU.roa
File: nUZL90rmkrco30I534YuD3uEoLU.roa (raw, json)
Hash identifier: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=
Subject key identifier: 9D:46:4B:F7:4A:E6:92:B7:28:DF:42:39:DF:86:2E:0F:7B:84:A0:B5
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 01946E20D526FBAFCBCF8552A2C5DEC9020F
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/nUZL90rmkrco30I534YuD3uEoLU.roa
Signing time: Thu 16 Jan 2025 08:00:32 +0000
ROA not before: Thu 16 Jan 2025 08:00:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48552
IP address blocks: 89.208.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:20:d5:26:fb:af:cb:cf:85:52:a2:c5:de:c9:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Jan 16 08:00:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d464bf74ae692b728df4239df862e0f7b84a0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:c1:9d:96:0f:00:e4:aa:09:b1:4f:ef:5d:
45:da:bf:fb:82:0b:57:70:4f:55:2a:30:ee:c6:54:
1e:e6:60:1b:5a:97:0e:05:9f:25:15:b7:01:94:ae:
ba:d2:b8:40:bb:e7:83:d9:51:5f:55:2f:27:cd:5b:
bd:05:ff:ba:62:37:67:bc:59:66:48:3d:d2:0a:f5:
ec:64:07:28:9a:f9:1d:c6:5b:81:a6:ec:b3:b6:c9:
b0:0c:2c:d5:9c:69:06:8e:24:d3:33:f5:40:61:df:
a7:2a:33:5d:5d:b6:9a:a5:79:02:bc:59:e0:12:d2:
24:3f:28:54:1b:a8:ab:d0:f2:6f:3c:12:ea:b4:89:
af:26:37:79:e9:a9:78:75:be:8c:b5:7e:b5:cd:bd:
29:07:c4:62:04:f4:71:ad:8d:88:ef:ad:02:d1:8a:
8d:26:7d:e2:69:ef:e1:6b:6b:db:55:76:ee:4d:84:
73:60:31:f1:ea:3e:7a:85:c2:0e:be:80:42:dc:b2:
18:9f:d2:42:5f:b9:f3:39:97:9b:cd:2a:be:4f:ac:
c3:61:4a:d4:95:73:b3:43:f1:93:ef:09:9f:31:67:
37:e6:9c:2c:d9:52:d7:76:58:f8:18:b2:d9:64:da:
f6:f1:f9:c8:e7:30:29:16:33:98:11:18:1b:6b:53:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:4B:F7:4A:E6:92:B7:28:DF:42:39:DF:86:2E:0F:7B:84:A0:B5
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/nUZL90rmkrco30I534YuD3uEoLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ec:52:97:ce:77:df:c9:5c:fb:19:0f:6a:51:d9:c2:fe:2d:
23:bb:b4:82:89:85:a3:cd:36:a2:d9:1b:a0:89:77:dd:ba:bb:
11:31:ea:ec:f2:73:c1:e6:5a:d2:e7:12:9c:d5:f4:b6:8e:36:
36:a6:88:a8:aa:c1:f5:2b:d3:1d:e4:d8:ac:2a:f8:ef:59:e0:
fb:c5:3c:80:f9:1a:8a:1b:d6:5f:38:0a:f4:53:31:9c:c2:0c:
94:c5:7a:73:d8:51:9d:44:bf:42:2f:67:6c:b7:4d:57:53:22:
2c:77:b3:c3:2f:c1:1c:64:21:fc:ad:ae:32:a7:4a:e9:03:1d:
28:b6:a4:c0:59:e3:26:d3:9d:3c:14:80:e0:b0:90:c3:8f:bc:
2a:be:29:c5:4e:26:77:40:25:cf:37:d5:04:71:c2:ec:62:1d:
aa:86:ef:82:22:1b:96:05:17:42:1d:bd:72:15:85:2e:05:28:
f3:2d:9d:eb:96:d0:2b:00:e3:84:8c:06:b6:be:cb:a0:a3:1a:
30:95:74:df:3d:1f:a5:7b:8d:73:9c:20:4c:fe:a1:e5:8f:4f:
11:49:9e:a5:ed:90:c9:fd:89:c8:eb:c1:2e:e7:10:3b:ea:ac:
43:f0:85:6d:b8:e1:9f:e9:8c:79:d3:39:d0:90:50:1a:13:a8:
87:c5:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:13:14 2025 by rpki-client