Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa
File: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (raw, json)
Hash identifier: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=
Subject key identifier: 9C:00:4C:6C:72:D9:DB:D1:B3:DC:0F:40:52:FD:BD:AF:53:B4:9C:14
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01942068273DB93D5332B9ED04AF4E7783B5
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199978
IP address blocks: 193.8.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:27:3d:b9:3d:53:32:b9:ed:04:af:4e:77:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c004c6c72d9dbd1b3dc0f4052fdbdaf53b49c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:9e:62:7f:bc:5a:f0:c6:9e:3b:19:31:98:
94:1f:53:f8:0f:a4:fb:53:a8:cc:07:9f:ac:37:9d:
a7:39:41:0c:82:15:9a:43:a0:3c:c6:ea:a0:0e:6b:
d3:da:66:ca:f5:43:4c:11:9a:40:2c:44:9b:7b:8c:
2e:c7:52:f8:56:62:12:4d:de:5d:4e:4d:e9:d6:ef:
f1:f8:92:6f:d8:88:95:8d:7e:cf:8d:82:08:5d:f8:
fe:88:98:8f:11:d8:d0:09:4a:69:b7:c9:45:58:31:
4e:70:d2:52:65:6a:94:34:ea:1a:0f:c9:07:8d:e5:
67:17:bf:e6:91:d7:2a:82:6c:a2:ba:6c:2f:9a:75:
ed:08:9c:e6:4b:61:07:b8:cd:f9:ed:94:e2:a8:6f:
ee:99:c9:1a:0d:29:b7:bb:47:af:3a:14:3e:10:76:
0f:a4:2b:69:44:18:bb:6e:e9:ae:44:db:b3:70:67:
62:1d:d0:2c:d8:90:ed:d1:72:49:2a:56:96:5d:58:
4d:f2:8b:bc:46:bb:07:cd:3c:4e:23:b1:6c:04:2d:
16:68:f1:ce:25:9f:76:78:6f:6e:c6:8b:c5:d4:a6:
79:c5:80:24:3b:3d:54:27:78:f1:37:18:0a:fb:1d:
77:c5:39:da:63:2e:f4:09:ff:1b:62:32:d5:16:15:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:4C:6C:72:D9:DB:D1:B3:DC:0F:40:52:FD:BD:AF:53:B4:9C:14
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.54.0/23
Signature Algorithm: sha256WithRSAEncryption
51:f6:c4:ae:01:38:34:cd:de:ae:d0:de:2a:5e:c1:c6:71:9d:
e7:48:61:57:94:35:a1:42:85:64:24:4e:7d:42:84:e6:b3:0e:
6a:1c:5c:53:da:4c:5e:a7:e0:f3:12:fa:a8:af:04:c5:6f:1b:
6a:7c:8d:15:f2:db:87:bd:0f:3c:56:11:78:a9:59:17:30:1e:
03:b1:97:d9:af:25:85:26:29:12:54:d4:eb:ca:81:80:0b:b2:
a9:7d:d6:b5:78:99:90:96:56:c4:44:60:7c:40:29:a0:cf:71:
53:26:5e:08:e7:64:82:d9:e7:6a:e5:98:db:f8:62:04:d5:c8:
37:17:77:7f:06:da:f8:28:db:6a:24:cb:8b:13:04:35:aa:a5:
02:35:0c:37:ca:6d:28:33:95:ac:4a:4a:99:5c:3d:09:9f:bd:
13:a4:66:be:a3:25:49:aa:51:28:59:fc:8a:a5:a1:ef:a0:6b:
fc:54:43:0c:22:28:99:d9:ac:21:6c:a5:11:90:ed:c0:41:c5:
83:07:78:7f:7e:25:73:d2:81:33:59:40:5b:69:42:db:f6:74:
c3:7e:38:a3:e2:a6:e5:a0:1c:c1:d4:70:d5:a7:92:04:b2:9a:
1f:40:bd:02:73:60:0b:f0:ba:15:15:6b:53:1c:cc:d8:f2:ab:
bf:89:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:40 2025 by rpki-client