Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/NXFNvPreWKmytgudduJxNubp9ag.roa
File: NXFNvPreWKmytgudduJxNubp9ag.roa (raw, json)
Hash identifier: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=
Subject key identifier: 35:71:4D:BC:FA:DE:58:A9:B2:B6:0B:9D:76:E2:71:36:E6:E9:F5:A8
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 01946A2E9C90E17B062D68885B34295B8572
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/NXFNvPreWKmytgudduJxNubp9ag.roa
Signing time: Wed 15 Jan 2025 13:37:07 +0000
ROA not before: Wed 15 Jan 2025 13:37:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31077
IP address blocks: 91.192.184.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:2e:9c:90:e1:7b:06:2d:68:88:5b:34:29:5b:85:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 15 13:37:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35714dbcfade58a9b2b60b9d76e27136e6e9f5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:72:d4:dc:95:95:3d:7c:3b:ac:0a:50:e6:
11:29:c8:de:97:9f:44:c5:51:50:fc:11:58:9f:2b:
21:54:4d:62:9e:8f:29:4f:cd:04:90:a4:b6:08:68:
9c:4c:62:4b:e3:ec:d2:de:d1:dc:c3:35:8f:72:3e:
75:eb:ba:95:25:49:e1:27:17:52:27:27:ae:16:dd:
6c:d4:0c:e6:57:1a:a9:dd:fe:3d:e9:73:ba:88:37:
d2:08:2a:48:7f:cc:b6:70:76:af:32:d6:e7:2a:c8:
e5:ae:dd:b1:41:a1:6e:ad:22:ee:2e:87:84:2d:47:
8d:63:7f:2d:e3:1f:73:92:31:05:e5:52:04:45:90:
88:04:53:28:64:6b:38:ad:1d:67:8f:21:e9:6d:7d:
6c:31:2b:3a:69:cf:a0:9f:5e:a2:da:da:aa:3c:21:
a1:01:c0:04:0d:e2:44:2b:84:21:ab:5f:b1:af:31:
4a:ca:cd:1e:9d:08:d3:89:27:2f:d2:89:7c:f6:ee:
4a:50:24:63:05:06:ce:23:03:18:2c:a7:b2:ba:64:
6d:c2:25:ae:d0:69:b1:93:6e:b1:16:8c:d8:2c:1d:
a3:07:4f:66:ec:f5:d8:c9:6c:c8:39:f7:73:b7:3d:
d1:b7:1f:ee:bc:3d:95:ef:94:e3:ae:1a:99:0d:8c:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:71:4D:BC:FA:DE:58:A9:B2:B6:0B:9D:76:E2:71:36:E6:E9:F5:A8
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/NXFNvPreWKmytgudduJxNubp9ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
de:b0:fc:60:d5:4d:8b:e3:84:b4:50:4b:46:ba:88:ee:55:d3:
34:a3:b2:8f:83:31:6f:30:c6:6b:34:ff:c9:c5:a9:6b:bf:b0:
1d:55:75:21:d4:d6:5d:9c:d4:9d:8c:8c:38:57:4c:34:43:5c:
57:ad:3a:ed:58:33:29:5e:dc:a6:fa:4c:fa:d2:8e:1f:06:84:
ed:39:b2:32:e3:29:10:8f:cf:f3:05:22:a2:1e:87:2e:da:0b:
4e:53:4b:10:1d:a8:e9:c1:b3:2b:46:b4:56:a0:9f:d9:7b:be:
08:9c:88:c9:67:93:14:25:f1:25:b9:4f:b4:af:3a:13:83:fd:
84:e1:3d:85:2e:60:5a:7b:a6:24:29:41:2d:3e:31:6c:d9:e7:
45:a8:4c:0e:d6:91:1a:b5:25:49:34:4d:43:a7:a7:9e:02:f0:
60:1d:18:3b:44:b9:c6:54:c5:5f:b4:50:2e:43:c4:9a:37:35:
97:e9:0c:17:b7:5b:56:b5:99:3b:b7:c9:e5:2f:1a:99:21:b4:
1e:81:f4:65:84:4c:23:a1:bd:9a:23:92:1d:85:5d:2e:43:e9:
6b:78:fd:c4:97:d6:04:70:89:dd:0a:f9:7f:02:09:71:9c:f9:
1b:13:fc:1c:bc:16:11:20:db:ca:59:1d:7b:fd:a8:01:2d:40:
27:19:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:42 2025 by rpki-client