Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/nTT0TyM5N3ly5yMdXzhx4HHtEso.roa
File: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (raw, json)
Hash identifier: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=
Subject key identifier: 9D:34:F4:4F:23:39:37:79:72:E7:23:1D:5F:38:71:E0:71:ED:12:CA
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 01942747B97E2C26FE53712CDD2FE4ED68DE
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/nTT0TyM5N3ly5yMdXzhx4HHtEso.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59586
IP address blocks: 94.136.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b9:7e:2c:26:fe:53:71:2c:dd:2f:e4:ed:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d34f44f2339377972e7231d5f3871e071ed12ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e6:54:3a:16:6d:06:b9:0d:b5:89:a8:92:22:
9f:d9:90:db:e5:68:6b:6c:74:c5:01:b6:49:d0:e1:
a0:a6:2d:48:3b:0b:1c:61:ef:d9:9e:c0:07:6c:29:
2c:92:f4:34:58:62:9e:d4:6d:19:c8:f3:14:0e:e9:
61:b5:fe:02:03:55:56:fd:fb:73:35:a2:84:7f:26:
37:09:23:95:4c:00:5a:9b:1b:72:97:4b:37:49:99:
5b:84:dd:73:93:ad:98:b0:b5:c7:56:7f:e4:d8:98:
1f:08:9e:40:08:3d:7b:98:02:c3:2a:43:32:71:b6:
29:d3:30:ee:cf:cf:e2:fd:a9:67:e7:b0:e9:a8:e1:
7d:0c:dc:d5:66:0e:51:98:5b:7b:28:77:83:c5:2f:
5e:4c:98:17:d2:15:fd:eb:74:99:93:0e:56:36:57:
29:e3:54:17:5f:f3:b0:78:3d:67:3e:eb:a2:80:88:
e1:2b:6d:7c:ce:dc:ef:e5:a2:d2:4b:e9:09:60:94:
18:70:2d:e9:98:7d:93:8a:c8:f8:05:40:b0:80:39:
0b:19:c5:44:f0:7f:a2:38:07:4d:d8:3e:f9:42:c5:
f8:c5:c5:88:2c:f5:79:92:70:35:6a:2a:62:07:78:
2f:4e:f0:f3:a2:9e:5c:1a:47:b5:6f:24:8d:ce:41:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:F4:4F:23:39:37:79:72:E7:23:1D:5F:38:71:E0:71:ED:12:CA
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/nTT0TyM5N3ly5yMdXzhx4HHtEso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:22:9d:77:92:25:6c:49:ca:6e:b0:44:8c:03:c0:61:74:13:
2c:3c:0b:41:4b:e4:88:c3:39:d6:72:d4:cd:92:48:d1:5f:51:
69:10:7d:24:21:2f:b8:64:19:6f:5f:5d:b8:ff:f2:b4:a5:8a:
32:3c:fd:52:14:40:0d:bc:df:5e:02:25:85:06:69:e5:37:2f:
49:ad:e5:7e:bf:b4:74:49:4b:af:94:0e:cd:d5:ac:76:63:48:
7a:e5:8d:6c:50:a6:c5:63:ca:60:87:07:d4:e4:80:72:96:23:
22:ca:22:28:41:1f:2e:96:61:2d:32:97:84:40:0b:e6:07:43:
59:d2:0b:d8:5d:be:20:0c:88:2b:17:19:0e:63:1e:51:a1:ff:
35:af:9c:63:4c:5d:2b:9d:21:59:a1:eb:c5:21:16:20:c7:d5:
9b:24:0f:d1:75:34:28:b8:7a:9c:be:08:49:32:db:88:f4:ec:
77:ec:69:f1:14:65:49:70:24:0f:1e:95:0c:fc:2f:c9:7c:ad:
1c:73:b2:b2:0f:80:ea:3a:7f:04:d7:a3:a1:3b:c1:37:10:92:
37:58:ea:74:a6:e3:d4:18:68:40:0c:bb:b5:25:f8:42:33:2b:
49:4f:0c:5b:bf:6e:07:a6:eb:6f:fd:e7:f0:0b:68:69:03:65:
2c:3d:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net