Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/N2qV5YQb5W1epd7drhbbYWeDzW0.roa
File: N2qV5YQb5W1epd7drhbbYWeDzW0.roa (raw, json)
Hash identifier: s6taKOmCqNjm3LC9TGmDbV/25/St/aCUYh2vIUbEIS0=
Subject key identifier: 37:6A:95:E5:84:1B:E5:6D:5E:A5:DE:DD:AE:16:DB:61:67:83:CD:6D
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 019543212D88EC1AA70187FE6493C6EAA173
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/N2qV5YQb5W1epd7drhbbYWeDzW0.roa
Signing time: Wed 26 Feb 2025 16:40:02 +0000
ROA not before: Wed 26 Feb 2025 16:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200315
IP address blocks: 91.216.13.0/24 maxlen: 24
138.128.224.0/22 maxlen: 24
2a13:90c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:21:2d:88:ec:1a:a7:01:87:fe:64:93:c6:ea:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Feb 26 16:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=376a95e5841be56d5ea5deddae16db616783cd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:18:4e:fe:2b:2b:31:7a:0e:e2:83:53:8f:
60:b6:7f:ec:0b:43:cd:9b:1a:3b:b3:26:65:87:23:
57:94:c5:e2:d1:ab:63:ce:44:13:f8:8d:6a:62:a9:
c4:b8:85:2d:0f:6a:02:6f:9d:13:68:20:fe:eb:e0:
9f:5c:1e:3f:3d:60:15:6e:92:5d:6e:80:e4:df:06:
60:03:7f:f6:c0:00:3d:24:8a:f0:0f:69:0b:51:71:
4a:2a:1c:0c:be:42:63:67:dd:67:b7:75:ab:a0:de:
e6:8c:47:5e:5d:67:99:de:17:df:ec:b0:ae:86:cb:
0e:0f:ba:e4:78:a0:31:27:a6:fd:cc:77:dc:93:14:
f5:3f:a7:57:ea:08:23:45:66:47:cc:95:2c:56:47:
61:23:ae:bd:40:5b:f8:68:26:ca:d1:3d:ff:db:62:
34:e3:37:da:8e:bb:65:bf:55:24:7b:ac:d0:72:88:
6f:c1:7c:23:59:09:d5:5a:d0:fa:fa:b5:95:f8:cd:
ec:38:d7:c6:4d:26:6a:3e:c7:14:2e:c3:e0:ef:bd:
bf:4d:34:34:8f:e5:72:3a:97:94:17:4e:c5:0e:88:
67:77:88:ac:9d:1f:22:b8:a6:ca:a7:c3:1e:18:e2:
60:0f:2e:d8:b0:44:13:fb:27:96:b7:88:cd:91:da:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:95:E5:84:1B:E5:6D:5E:A5:DE:DD:AE:16:DB:61:67:83:CD:6D
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/N2qV5YQb5W1epd7drhbbYWeDzW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.13.0/24
138.128.224.0/22
IPv6:
2a13:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:4c:0d:85:d2:29:3d:15:f7:83:41:af:b7:da:c7:f0:e3:96:
1c:7a:a5:4b:76:d9:86:08:28:d2:af:bf:0b:23:8a:bb:4a:36:
29:ac:62:ec:ea:e7:d8:4a:9f:e6:b2:c2:57:2d:a9:75:04:02:
ec:c6:80:e5:3e:2b:4b:60:5a:89:f2:71:e6:eb:8f:43:a1:8e:
87:c4:91:fd:a9:eb:81:aa:1e:6e:6e:22:90:19:7a:4d:e7:33:
50:fc:c9:ce:d6:e1:93:8a:5d:ab:39:2f:da:ef:25:5f:7d:97:
43:ea:39:34:c1:b9:61:36:f0:29:6d:3e:c4:84:ee:7d:fb:a9:
c9:cc:98:a5:3d:0b:de:9a:a3:29:59:45:44:b3:e7:96:21:e5:
61:8c:46:2c:79:7b:90:c8:79:e7:88:ac:5b:a1:51:73:83:74:
80:51:06:f4:50:b2:75:b9:29:7f:ee:e2:b6:2d:72:45:b6:67:
ed:d9:de:e6:88:87:34:53:b6:40:0f:e7:22:65:dc:cb:b1:ce:
24:a3:18:08:b3:e8:f8:32:e8:e1:5a:7f:2d:88:20:cc:52:7e:
e9:76:60:9b:ce:54:f2:48:b6:c4:35:c6:1b:d1:20:e9:b0:b8:
e6:94:34:38:9b:71:18:5b:9d:50:23:bb:7f:06:2d:0f:30:b5:
1b:41:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net