Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/n4pnMVZxlX9TG0NR081RempX3Jo.roa
File: n4pnMVZxlX9TG0NR081RempX3Jo.roa (raw, json)
Hash identifier: 8S5TjyfptYQw+P8e6JYICrqdcf6QlYccxjHA7efduik=
Subject key identifier: 9F:8A:67:31:56:71:95:7F:53:1B:43:51:D3:CD:51:7A:6A:57:DC:9A
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019424B3F22194CD4B271D94107D9860A12D
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/n4pnMVZxlX9TG0NR081RempX3Jo.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3331
IP address blocks: 185.106.164.0/22 maxlen: 22
2a04:ea40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f2:21:94:cd:4b:27:1d:94:10:7d:98:60:a1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f8a67315671957f531b4351d3cd517a6a57dc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:b7:e2:3e:d7:59:2b:e3:a8:1b:c1:3b:9e:
b6:f0:92:c5:c6:5c:f6:3d:a6:1b:03:3e:1b:6b:91:
eb:f6:de:0b:db:b0:87:65:b8:86:6c:e4:61:a8:77:
0c:24:9b:b0:c5:d6:c6:af:45:46:39:71:c5:80:b5:
4f:59:c1:88:d6:ca:45:89:00:c0:59:0d:75:53:77:
32:21:9e:4a:49:03:e4:e6:35:98:0d:06:db:fc:a6:
f3:36:f8:3d:15:9a:54:3e:3b:23:6c:40:46:b9:e8:
c4:a8:c6:22:e0:c6:b6:85:26:c5:51:56:fe:e9:93:
3e:64:48:96:1b:0c:60:80:ca:03:79:a7:f6:1e:e7:
fc:89:fc:06:48:a9:19:4e:87:1d:6c:63:94:8e:cd:
41:2f:30:89:88:e3:b1:85:1c:25:c0:42:06:f3:3a:
d4:5e:f5:63:7c:45:c3:c3:4a:a0:cf:01:e3:ec:7c:
1c:4e:5d:d3:f3:0d:25:87:5a:95:fe:c3:3e:0d:f2:
06:dd:92:c0:22:34:57:b6:9d:2c:68:33:89:66:33:
46:24:52:e1:33:d1:f5:37:4b:bd:cc:8f:ef:32:64:
99:bd:b5:a0:25:9e:75:d6:09:ef:87:17:84:6b:30:
c4:1b:28:73:ad:72:dc:dd:bd:87:47:34:2b:7b:b6:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:67:31:56:71:95:7F:53:1B:43:51:D3:CD:51:7A:6A:57:DC:9A
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/n4pnMVZxlX9TG0NR081RempX3Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.164.0/22
IPv6:
2a04:ea40::/29
Signature Algorithm: sha256WithRSAEncryption
31:13:32:08:81:b3:40:56:78:18:a4:0f:ef:0a:69:ce:f2:07:
a3:4c:f9:e0:79:b3:dd:62:d0:ca:b4:56:2e:8c:16:c1:5e:37:
f2:1c:fa:6b:6c:b8:47:40:fd:24:ca:89:7d:d1:6d:0f:0a:74:
5e:42:c6:f8:73:e4:2a:6f:26:89:18:35:c2:5b:ca:e8:4b:64:
87:91:d9:1a:98:bf:a6:0f:42:19:47:93:0b:91:bb:88:d4:85:
a8:5d:c2:b3:3a:e2:26:00:f6:fe:74:fe:de:3f:84:63:9d:44:
80:10:33:1f:6e:cd:ab:91:45:0a:74:8c:92:35:32:ce:5a:18:
f1:49:b1:00:46:d5:c5:4c:86:5c:c9:09:f5:4e:54:e8:68:9e:
6e:29:b2:6d:dd:f5:6c:2a:3c:10:08:c7:ce:46:29:ab:70:5c:
64:b2:24:9f:22:fb:9e:a2:7c:9a:fa:0e:6a:ae:09:89:13:2c:
88:17:c4:eb:57:91:86:3f:9b:ff:19:3b:05:e1:bc:86:ff:1a:
dd:f6:57:a4:89:09:94:4f:2b:f1:77:ea:cd:24:51:c6:c1:0e:
e9:aa:c0:53:16:7b:f2:6d:a7:9a:aa:04:11:7b:ca:c5:1a:93:
e7:f7:9f:3e:e7:40:6a:0b:84:53:9d:c1:24:75:1b:59:72:73:
df:11:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:16 2025 by rpki-client