Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/nqRXNoUiyTb4TmIe2_b86I-CG4w.roa
File: nqRXNoUiyTb4TmIe2_b86I-CG4w.roa (raw, json)
Hash identifier: uh5jetKJYfrnWeF7nxGsrvO4F6Y6S/Ud8IP3anKzhdE=
Subject key identifier: 9E:A4:57:36:85:22:C9:36:F8:4E:62:1E:DB:F6:FC:E8:8F:82:1B:8C
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 01942068398F96AD5BDF5262F0D639BB6FB2
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/nqRXNoUiyTb4TmIe2_b86I-CG4w.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50036
IP address blocks: 193.104.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:39:8f:96:ad:5b:df:52:62:f0:d6:39:bb:6f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea457368522c936f84e621edbf6fce88f821b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:b0:11:43:cb:60:b7:b2:b5:ee:cb:10:9a:
fd:07:6f:b9:90:24:29:ac:1e:8e:36:35:ce:c8:65:
49:00:1c:61:99:80:2a:bf:d3:aa:2f:67:43:86:41:
c9:e4:a3:08:51:91:b4:37:8a:71:94:26:6c:cc:91:
b9:86:9d:72:ef:27:f4:2e:9f:b7:2c:58:1b:9d:63:
26:45:23:d7:19:f0:cb:cd:f0:8c:b3:94:8e:fc:4c:
78:10:84:39:12:5f:ef:ff:eb:88:4e:31:94:d7:99:
8b:a8:75:94:92:46:52:38:a0:5f:b3:a9:0c:38:2a:
44:ee:7b:c1:9e:d4:bf:c7:30:30:ae:0d:16:3f:28:
25:c1:d0:1a:84:bb:32:1c:18:5f:ae:70:7c:a4:a7:
c4:c7:0d:f6:c6:46:e2:4b:8b:ec:47:8f:e2:13:de:
c5:c0:f9:84:18:94:5f:84:ed:b6:76:5e:49:b2:22:
61:43:7e:9d:82:e4:7e:41:30:9e:81:a5:a6:e2:bc:
f6:47:c5:b6:ea:fb:44:c9:64:66:28:98:bd:5e:a5:
45:b2:da:55:a4:19:4e:87:ea:14:6a:e1:e0:f6:de:
91:46:f5:c4:3b:d4:91:2d:30:0e:da:f4:89:83:20:
9b:92:7a:4c:8c:2f:2d:01:94:5a:60:00:4a:00:79:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A4:57:36:85:22:C9:36:F8:4E:62:1E:DB:F6:FC:E8:8F:82:1B:8C
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/nqRXNoUiyTb4TmIe2_b86I-CG4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0f:73:3f:4f:33:88:40:5a:0a:4d:51:f3:36:8f:68:ff:d5:
82:e7:55:d0:7c:34:c2:f1:af:1d:ab:9d:f5:12:f9:05:9a:d8:
e3:48:a3:76:df:7c:08:23:65:e1:e3:73:8d:77:0c:cb:7c:5f:
28:28:0a:d3:95:da:b1:89:d5:b7:32:7d:f0:c5:33:e1:f8:35:
28:e6:c4:57:34:10:29:b5:34:ef:e5:d6:15:14:8c:13:d1:d9:
c7:ee:49:a3:e6:c5:b8:75:a8:fc:3e:2b:28:b2:b4:96:4c:b4:
fe:d9:5e:3e:a2:c2:d1:b1:5d:3e:24:76:f3:bd:97:e2:1b:bb:
70:80:ce:a4:0e:3a:99:6d:0b:b2:1d:db:9c:19:79:1f:b4:31:
47:89:78:29:ac:2a:11:17:8e:49:0a:6d:c5:8e:42:59:b1:bc:
31:16:62:38:36:a3:80:a1:dc:cc:a5:20:19:42:d7:de:e7:ab:
6d:49:87:bf:66:91:fa:6f:4a:44:8f:df:40:7d:82:2e:5c:7d:
d8:87:a1:80:52:85:b5:15:7e:0e:41:5e:3d:49:d7:15:99:81:
fa:ac:c4:f1:fa:a5:74:c9:5c:2d:4e:86:7e:3c:f1:59:ee:03:
c4:ae:bb:f4:c1:a2:14:42:7b:a0:79:59:ab:04:8d:63:ac:88:
e0:8f:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:39 2025 by rpki-client