Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa
File: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (raw, json)
Hash identifier: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=
Subject key identifier: 9F:4A:49:09:A5:22:44:29:79:3E:CE:7F:56:EE:51:F5:8D:C8:F6:A5
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 01941FFA3C71CD10917FE1BDA11AD520B26F
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201463
IP address blocks: 128.127.8.0/22 maxlen: 24
193.8.68.0/22 maxlen: 24
194.55.42.0/24 maxlen: 24
194.56.168.0/22 maxlen: 22
194.56.172.0/23 maxlen: 23
2a07:ce40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3c:71:cd:10:91:7f:e1:bd:a1:1a:d5:20:b2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f4a4909a5224429793ece7f56ee51f58dc8f6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:2e:53:f3:cd:50:aa:39:15:cc:ac:03:19:
f1:80:7b:5d:0c:f5:9c:72:f9:26:ed:87:16:7d:4c:
7f:d1:f4:46:9c:82:2b:bc:5b:e8:d4:49:fe:df:9a:
72:d0:2c:80:ea:54:b2:cc:55:2a:d2:e3:ea:b7:71:
a9:7d:f6:ee:f8:64:fa:84:ed:1e:db:25:a5:67:22:
7e:29:cc:fb:13:3f:7a:da:5a:9f:b7:3a:51:c3:e0:
f9:be:7e:c7:a0:1f:fb:3c:94:bf:30:fb:7c:6d:54:
61:06:c3:70:ff:52:20:15:37:ad:11:ab:9e:c8:c4:
97:56:5d:55:de:00:4a:02:89:5f:2f:77:5a:1e:ae:
e1:57:ef:c9:84:d0:f2:16:47:c9:38:96:06:c1:c9:
10:04:03:75:7e:29:36:97:cf:a7:60:e7:0a:52:63:
88:7a:17:68:50:2c:f3:d3:14:ff:4a:6b:0d:02:e5:
f8:5f:74:77:d7:2f:88:12:5f:a9:a5:75:fe:90:be:
b1:ca:2f:2f:f1:7b:fc:1b:a3:43:03:87:17:1b:bc:
bc:17:56:d9:31:82:0f:58:08:e1:40:4f:d9:47:21:
68:1a:87:29:be:42:f1:ca:bc:58:a2:07:c9:7a:44:
b4:c0:02:04:40:5c:d1:56:22:61:0e:54:a8:4d:1f:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:49:09:A5:22:44:29:79:3E:CE:7F:56:EE:51:F5:8D:C8:F6:A5
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.8.0/22
193.8.68.0/22
194.55.42.0/24
194.56.168.0-194.56.173.255
IPv6:
2a07:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
08:d8:5b:27:59:60:70:5c:d3:08:3b:78:7b:0a:87:b3:b7:fd:
9d:62:5a:48:ff:6f:5b:cf:a3:5e:31:3e:b0:08:65:f2:b3:d8:
4d:39:ae:dc:6c:e8:6e:17:39:43:ed:6c:19:c2:9f:7e:09:b4:
30:fc:c1:c0:22:bc:83:c5:e2:bf:e7:3a:84:c1:fd:9b:77:b9:
41:d2:05:ce:6c:f4:12:96:0e:a0:f1:49:87:98:b6:e0:1d:f5:
52:5f:60:f3:37:5a:6c:50:e9:a1:f5:6c:0d:45:39:aa:83:e6:
8c:a9:d4:45:86:78:ad:0b:5e:17:d2:a2:98:14:e4:d4:fe:94:
54:59:2f:21:54:12:34:0d:b8:7e:cc:b0:f2:23:35:52:e1:4d:
ad:40:bf:9a:a1:33:e4:59:41:ff:d2:e7:34:bc:ff:50:97:02:
97:1f:fe:82:d9:c9:b2:a7:f8:f8:ae:7a:5c:5f:38:6e:f6:68:
22:46:2e:30:be:1b:c8:97:37:ba:c4:c1:f9:71:88:46:79:11:
3c:3f:ba:37:b7:3b:a5:ee:52:00:45:8e:bd:0c:fa:ec:26:6a:
4d:09:25:2e:2d:2b:67:eb:03:b0:fe:61:a6:ca:b6:d5:5e:c2:
fd:68:bf:b0:e7:ac:2b:d1:7f:9a:97:a6:9f:50:a1:e1:9a:a4:
f0:6f:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:18 2025 by rpki-client