Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/NX-lJMVuq0hFJuXhiTDNigiTMiI.roa
File: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (raw, json)
Hash identifier: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=
Subject key identifier: 35:7F:A5:24:C5:6E:AB:48:45:26:E5:E1:89:30:CD:8A:08:93:32:22
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C77358E97599F3B6DD75C16E3F2D3
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/NX-lJMVuq0hFJuXhiTDNigiTMiI.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210331
IP address blocks: 185.126.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:35:8e:97:59:9f:3b:6d:d7:5c:16:e3:f2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=357fa524c56eab484526e5e18930cd8a08933222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:bb:f6:8f:25:db:53:e7:f8:0e:92:a0:b1:
78:cf:e8:42:73:3a:40:82:1b:9f:3b:da:58:73:73:
15:62:e2:01:b4:e2:0c:90:a5:3a:90:9d:97:0c:10:
e7:5d:12:d8:b6:84:9f:4d:75:8c:83:ad:dc:71:6e:
85:21:e4:92:68:0b:da:8e:a9:d1:c3:02:4b:21:e9:
95:ac:b6:bf:e5:bf:8c:0e:b4:0a:9a:7b:e7:50:79:
0e:b9:90:24:4d:69:5b:b4:3a:a0:44:07:7b:0d:5d:
9a:f6:23:d0:a2:92:00:46:d4:d9:41:dd:10:26:50:
5f:02:66:1e:cc:64:c6:74:14:a0:11:03:de:f2:39:
80:ec:ae:86:c1:f7:be:b5:57:eb:eb:a6:86:af:06:
76:cd:c6:8c:3c:12:2d:49:43:c1:60:7e:8b:21:7f:
8a:6c:85:98:9b:7c:80:72:aa:84:a4:83:b9:0c:a3:
76:65:8e:68:69:02:77:f0:78:41:f9:79:d7:26:d6:
21:b5:6d:e3:21:0a:0f:d8:94:c1:c6:90:11:42:9f:
6f:da:ce:4b:65:89:98:2a:88:3e:bc:c5:fc:8b:5f:
1b:7b:f2:b9:f7:e6:bb:09:3f:bb:75:41:e7:14:a4:
04:95:9f:28:4b:7a:7a:2f:41:37:29:e3:84:9c:7b:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:A5:24:C5:6E:AB:48:45:26:E5:E1:89:30:CD:8A:08:93:32:22
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/NX-lJMVuq0hFJuXhiTDNigiTMiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.93.0/24
Signature Algorithm: sha256WithRSAEncryption
89:97:51:c0:b9:51:15:8b:53:6f:27:fa:ca:f2:ec:4d:f5:72:
be:ca:8a:ac:4c:e4:c2:9e:0d:6c:6c:5d:ea:80:33:dd:f9:6f:
8d:1f:3c:5c:74:b6:64:49:a6:04:60:cb:5e:17:e5:f7:f2:ce:
fb:f3:ab:a9:df:34:27:62:9b:e6:8f:ef:b6:8c:67:da:0a:e6:
2d:2f:9e:ba:97:3e:06:ac:4a:5d:53:52:6c:d4:6c:b0:8c:41:
95:05:8f:3b:e3:3e:41:cd:54:86:b5:5d:bd:49:28:a2:e8:e4:
11:08:8f:49:36:be:de:b8:ed:9c:8f:c8:21:e1:23:ae:39:8e:
5d:a7:62:28:48:c7:f3:25:a0:57:f3:2a:1b:c8:60:f9:08:8f:
83:a7:2f:d3:b7:c8:c1:2c:25:21:95:20:48:3d:05:40:8e:9a:
5b:9a:fb:3c:d4:f9:54:ca:a1:0e:fa:2c:37:5c:78:64:ab:e8:
c1:19:20:72:88:2a:1d:b2:c4:71:f2:09:b2:c2:ec:eb:59:1b:
73:6a:5d:88:7e:c7:a7:42:f8:6c:8c:7f:11:d0:dc:a1:1c:4c:
65:2a:ba:42:7f:f1:09:c1:a6:08:df:08:0d:c4:ed:86:69:6d:
48:2c:ab:eb:ea:37:48:25:47:92:60:32:5c:d3:22:fc:13:ec:
ec:05:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net