Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/nPx-Za7VbY-Ebikh4E82FJ056JY.roa
File: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (raw, json)
Hash identifier: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=
Subject key identifier: 9C:FC:7E:65:AE:D5:6D:8F:84:6E:29:21:E0:4F:36:14:9D:39:E8:96
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 01942444CBC7F8EE35DDD155BE4CDC2C7CF1
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/nPx-Za7VbY-Ebikh4E82FJ056JY.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200996
IP address blocks: 143.51.0.0/17 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cb:c7:f8:ee:35:dd:d1:55:be:4c:dc:2c:7c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cfc7e65aed56d8f846e2921e04f36149d39e896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:1d:67:60:c9:2c:86:3b:93:d1:eb:2c:22:
28:a2:b6:e7:83:2e:07:4b:37:98:4c:ab:bd:30:36:
6c:61:2f:99:4b:16:99:ca:97:ee:1a:57:9e:33:6a:
5b:d9:d9:0d:35:3c:d9:f3:5b:49:c0:5a:4a:5f:f9:
f2:b9:35:ff:98:0e:78:ed:60:8e:ae:86:fa:f6:58:
45:81:64:de:e0:82:bd:a4:25:4f:fd:d2:78:1c:6f:
a9:21:f9:7f:68:e2:75:3b:76:93:2d:77:8d:33:b7:
bc:83:91:a9:00:49:20:02:31:13:b1:a4:4d:97:20:
8d:e9:be:f5:fb:5f:50:07:0f:49:2f:85:1f:6d:d6:
ff:61:fa:32:81:27:3e:33:09:9a:22:87:f0:d2:1c:
f3:77:78:70:84:70:38:f2:b7:04:0d:a2:90:c5:76:
2a:5c:54:9f:ed:f6:a8:1f:ce:ac:fe:ec:dd:1a:4f:
73:d6:92:7a:4d:2a:5f:ab:ed:22:b3:c5:4b:ad:26:
4d:a9:5c:6d:0b:ce:a5:df:ec:d9:1c:dd:de:41:62:
ff:0e:34:ba:e9:dc:85:b8:c3:bc:af:db:50:90:ba:
4f:47:b1:1e:f8:b9:4e:db:d4:ee:77:65:5b:b0:4f:
06:bf:45:bb:d4:ca:92:aa:1f:bc:34:83:8e:ca:8f:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:7E:65:AE:D5:6D:8F:84:6E:29:21:E0:4F:36:14:9D:39:E8:96
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/nPx-Za7VbY-Ebikh4E82FJ056JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.51.0.0/17
Signature Algorithm: sha256WithRSAEncryption
66:cc:d5:8a:eb:fb:6b:d0:0d:24:69:e8:d6:12:28:63:bc:90:
9b:fa:61:ef:1f:6e:0f:d4:d5:80:dc:98:6b:11:7f:6b:7d:e9:
75:ce:b0:39:c6:04:25:d4:af:a0:76:df:9a:e3:a7:8a:77:b7:
f1:5b:21:4d:d2:ae:9e:e4:8f:6e:3b:3e:41:c2:8f:8d:5f:e5:
b7:90:d4:ee:00:d9:c7:46:63:45:e5:37:6b:8a:6e:28:a3:70:
7f:09:6d:70:10:bd:50:f7:82:28:e5:50:a5:ab:3a:5f:62:b3:
5f:5e:71:6f:bf:33:83:39:fd:c7:bb:cb:6c:6f:dd:b0:2e:e9:
45:2e:c9:32:88:84:02:14:da:20:ad:68:d6:5d:8c:ca:b1:44:
a7:f9:39:8d:c9:32:61:69:32:d8:d6:28:1a:a1:e6:c7:53:06:
ac:f4:8e:49:8d:2c:81:85:af:f2:b9:3e:5a:d2:8b:ce:cc:1b:
8a:c1:28:37:e7:29:0c:76:1c:30:97:15:97:c0:6d:63:3f:9e:
44:83:64:7b:f6:63:9c:7f:aa:ed:da:fe:3b:f9:ee:6b:2b:2c:
02:8c:fc:7c:37:fa:93:6f:4f:6e:07:43:d9:3a:93:cc:77:e4:
56:f3:6c:98:82:2a:c6:f0:30:6e:a0:04:dc:a2:33:50:c5:4e:
62:d6:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:57 2025 by rpki-client