Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa
File: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (raw, json)
Hash identifier: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=
Subject key identifier: 9E:98:63:F2:BC:CE:9C:B5:83:27:E1:2F:F6:E2:F1:0B:3B:8F:A2:1D
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019427B5B86C215BECABAEE7855E71B7DCF8
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 195.245.128.0/18 maxlen: 24
213.58.0.0/16 maxlen: 24
2001:a40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b8:6c:21:5b:ec:ab:ae:e7:85:5e:71:b7:dc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e9863f2bcce9cb58327e12ff6e2f10b3b8fa21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:22:90:94:50:94:6c:8c:37:bc:53:85:f8:
4a:c2:65:9b:ae:d6:34:75:e1:52:10:ea:2b:10:9a:
4b:87:82:fd:b9:b8:f7:97:3e:55:18:85:49:bf:a1:
9b:77:12:8b:31:f4:93:69:ba:5e:c0:53:05:4e:d9:
ab:66:34:14:9e:2e:57:2b:07:8d:9d:c4:3b:e9:71:
ea:35:12:0b:52:c8:5a:9e:0b:99:2d:fb:27:37:d9:
1c:39:d4:f7:e0:2e:99:03:8a:7c:a0:69:1a:74:40:
bf:87:31:0f:23:b4:50:14:81:21:df:18:9b:a0:c4:
b1:67:08:cd:5a:1c:00:b3:13:78:72:b7:9c:19:83:
c3:91:8a:3e:27:b7:eb:fa:fc:71:00:3c:bd:e7:fe:
43:d9:d2:c3:53:da:60:c7:49:a0:db:36:c2:b8:91:
09:ab:34:81:ae:f4:ce:41:73:7f:f7:d8:9a:b8:f5:
db:ee:44:89:f4:31:ed:5f:19:41:10:ed:41:a4:4c:
54:0f:ab:4e:c9:f9:1f:73:b0:f3:b6:25:04:11:94:
80:38:37:7c:10:23:a1:e9:b5:3c:c7:8e:a4:27:fa:
04:0f:88:53:b7:97:4d:7b:a4:e4:11:f2:0c:d3:30:
53:75:26:71:db:cc:5e:78:81:57:2c:f5:84:d0:b1:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:63:F2:BC:CE:9C:B5:83:27:E1:2F:F6:E2:F1:0B:3B:8F:A2:1D
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.128.0/18
213.58.0.0/16
IPv6:
2001:a40::/29
Signature Algorithm: sha256WithRSAEncryption
4b:d4:f1:87:d9:38:3d:3a:7a:b7:f2:47:b2:cf:5e:d6:aa:f5:
ac:30:79:f3:4a:d8:99:dc:6b:11:58:ef:4b:57:42:99:22:f9:
c4:70:eb:37:88:61:c0:25:c1:3c:d9:79:b6:5d:76:44:6f:b3:
ef:a5:c1:47:cb:06:a4:bc:59:3b:48:1d:d0:09:75:85:24:c0:
d9:03:52:b2:d0:63:01:99:93:36:ef:ce:17:85:93:5c:8c:6b:
1e:97:15:09:b1:5f:c0:b4:6d:08:bd:da:94:46:85:fd:27:1f:
3d:11:e5:93:49:f8:f1:b5:4d:b1:08:f4:3d:e8:81:00:0c:bd:
45:7a:ac:13:1c:95:d6:fc:4d:d1:dd:68:7a:a4:f0:81:2f:a5:
76:b0:da:8e:95:38:63:d8:ad:73:da:40:aa:f4:64:4c:76:fc:
f3:8f:c2:6c:43:29:cf:b4:20:1b:32:60:78:ce:f7:a2:25:99:
43:b4:92:0f:bf:eb:34:78:6d:f4:f2:aa:e6:b1:02:6a:fb:04:
46:6a:20:6b:bf:3d:29:b2:f2:60:b6:0f:8c:2f:f0:a8:e4:4b:
10:80:f6:b1:d0:36:7d:ea:61:cd:1f:1a:e9:5e:47:d9:02:d5:
c8:c0:a9:a4:30:f3:81:f9:83:0a:e3:ca:18:7d:cc:d6:2d:0e:
1c:f5:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:22 2025 by rpki-client