Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/n5KP5ufURfzYm-dc-9TpGgegI9M.roa
File: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (raw, json)
Hash identifier: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=
Subject key identifier: 9F:92:8F:E6:E7:D4:45:FC:D8:9B:E7:5C:FB:D4:E9:1A:07:A0:23:D3
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 0194266BE82A17A4D4B24176D860B1FE9627
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/n5KP5ufURfzYm-dc-9TpGgegI9M.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6776
IP address blocks: 193.247.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e8:2a:17:a4:d4:b2:41:76:d8:60:b1:fe:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f928fe6e7d445fcd89be75cfbd4e91a07a023d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:1c:6a:5e:34:47:70:fc:5e:69:ab:3a:91:
60:91:34:01:5c:f9:c1:fb:d7:63:6d:94:1b:ef:21:
27:a5:b5:a1:ff:52:d8:98:72:53:f7:9a:37:20:8d:
9f:5f:af:fb:5f:54:34:ca:0c:db:80:e8:8c:b7:fb:
03:f6:56:7f:5c:bb:dc:d5:b9:e2:2b:3c:11:7c:37:
f2:8f:73:a2:71:35:2d:96:c3:a3:ac:60:91:36:f0:
b0:42:9d:d1:ea:39:8d:97:0d:4e:cf:75:ef:9b:0b:
b3:f2:7a:43:2c:3b:14:20:80:25:49:e0:90:9e:f9:
1a:63:f0:e4:2c:bd:2c:2a:86:fa:aa:9f:1c:04:13:
b0:30:cb:60:07:ea:7b:c9:55:b6:3e:35:4e:2c:8a:
9c:0d:49:76:72:4c:24:ed:e9:25:e8:c7:69:2c:7f:
e7:a4:4f:2e:0a:01:90:85:e3:96:4d:73:bd:fc:cd:
06:0b:f9:52:f3:66:7f:24:73:e1:ff:68:8e:a7:08:
9e:49:02:50:75:df:42:6d:51:33:3b:20:2a:cb:b4:
71:94:01:86:8f:37:de:23:b1:73:61:71:82:ac:43:
ed:d0:48:d7:34:91:57:d2:65:b5:61:a9:d9:e4:1a:
b1:26:a0:4e:37:14:42:dc:71:fe:94:7b:b1:c4:bc:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:8F:E6:E7:D4:45:FC:D8:9B:E7:5C:FB:D4:E9:1A:07:A0:23:D3
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/n5KP5ufURfzYm-dc-9TpGgegI9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.150.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d7:d6:26:09:8e:b9:a2:e2:6b:ed:7d:3a:9c:94:ac:2f:d8:
79:5b:9e:f8:99:93:9a:a9:7d:4d:60:f3:f8:09:34:51:6a:2c:
15:1a:44:92:d3:05:a0:8e:af:b1:05:23:4b:89:cd:77:0f:08:
25:50:8b:f8:63:c8:39:df:9e:cc:8c:d3:48:81:cf:b0:98:12:
1d:9a:b5:bb:58:41:61:84:c3:81:07:e6:b4:73:71:51:0d:06:
18:80:b6:44:cd:16:b6:43:3d:ee:61:79:2f:2f:11:64:ca:5f:
42:49:62:f0:8d:a0:18:74:89:fa:54:2d:9e:e0:2e:12:d0:d9:
86:e0:1c:46:af:37:c5:2f:66:10:c2:06:cb:d6:92:81:f7:8a:
8f:20:42:6b:51:94:2d:b6:cf:8e:71:5d:9b:ff:b0:70:01:6f:
3e:d7:65:2d:b9:fb:c0:fe:b7:ed:e1:2b:bc:41:10:e3:3e:28:
72:95:cc:b4:d1:77:03:44:8b:03:a6:df:76:66:14:d9:13:75:
65:c3:87:f9:6e:b5:16:77:da:e5:0a:ad:24:e6:e5:8b:63:62:
93:76:ee:e5:8d:88:a4:3d:ce:48:90:0f:00:28:a8:ea:ff:f9:
b9:86:d4:e0:1b:1e:f8:5e:43:4c:25:45:07:c4:1d:c9:5a:4c:
dd:bf:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:28 2025 by rpki-client