Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/V0WuD8VRAXpoH9WCkjCY95N9EPk.roa
File: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (raw, json)
Hash identifier: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=
Subject key identifier: 57:45:AE:0F:C5:51:01:7A:68:1F:D5:82:92:30:98:F7:93:7D:10:F9
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 0194228D5FA6164FB81CB0BE020F73033D5B
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/V0WuD8VRAXpoH9WCkjCY95N9EPk.roa
Signing time: Wed 01 Jan 2025 15:47:57 +0000
ROA not before: Wed 01 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20795
IP address blocks: 193.109.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5f:a6:16:4f:b8:1c:b0:be:02:0f:73:03:3d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Jan 1 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5745ae0fc551017a681fd582923098f7937d10f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:69:b5:1b:c2:f4:4f:54:75:e0:a6:9f:44:
2b:6f:4d:10:1b:8f:b6:dc:a1:fc:11:d3:07:de:38:
b9:f0:a9:7f:79:d4:0d:20:17:ed:02:89:6e:2d:43:
46:58:21:49:45:a0:6f:60:7b:84:d9:b0:6d:bf:c5:
d4:92:b2:ee:70:c4:cb:df:ec:a0:0d:60:41:a3:91:
4f:49:6a:4e:19:6f:8f:7e:6b:ca:4b:f1:f8:ee:dd:
f3:10:e5:49:83:f4:5d:46:c7:37:f8:6f:b3:fc:f3:
59:25:6b:3c:61:d9:47:0a:f8:4f:87:3f:af:2c:56:
f9:89:a6:de:b0:9f:77:b2:2a:32:be:cd:20:67:f0:
f1:ea:2d:34:43:91:01:ed:e9:97:ec:b0:03:6a:eb:
ec:ae:5b:50:da:30:d7:2a:3f:f0:36:81:10:b3:39:
dd:0a:29:59:55:66:ac:29:b2:cc:f5:81:2c:82:71:
69:f9:2f:5c:bc:7f:ad:bc:b5:90:8b:fd:f7:f9:0f:
31:c4:ed:13:cb:83:89:f7:c6:3d:24:e8:c3:82:27:
cb:a3:20:bb:62:d0:41:57:5b:d0:0a:1a:32:3f:d3:
e9:fa:62:5a:62:95:ae:67:0d:58:12:2b:4e:a6:df:
de:32:35:5d:3b:21:b5:1f:2c:15:90:7a:32:71:a6:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:AE:0F:C5:51:01:7A:68:1F:D5:82:92:30:98:F7:93:7D:10:F9
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/V0WuD8VRAXpoH9WCkjCY95N9EPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:e9:f8:eb:bb:95:2e:f6:fb:01:19:2e:b2:85:97:db:d3:ab:
ef:c7:82:f3:15:8b:63:aa:e5:60:95:ce:21:13:34:e5:de:0c:
58:c9:c1:22:04:06:c2:16:ea:8e:23:dc:e2:79:34:06:e5:ce:
80:54:b3:c2:0a:78:47:12:aa:b3:8c:3b:e5:c9:70:e9:b5:0e:
b7:5f:37:2b:67:57:db:f2:10:10:30:07:2c:72:e1:ad:87:1d:
f1:e7:78:75:9c:59:0a:0b:96:de:4d:53:02:93:fb:00:ee:ac:
28:60:cd:43:c9:a3:be:16:e1:ba:00:ba:b4:6e:6c:1d:0b:6f:
24:ad:43:6d:a8:d2:af:32:41:38:4a:28:21:52:4c:36:d3:78:
06:91:74:f2:89:a7:aa:05:9f:2a:94:ac:29:d9:e6:a0:1b:ce:
0c:fe:78:78:1f:84:b8:c2:94:69:56:9e:a1:89:b0:4f:c6:a1:
38:b1:78:f9:35:e7:97:74:07:9b:d5:fc:65:e3:a9:56:70:9a:
ed:c3:2a:a8:eb:cc:ff:34:67:d4:1c:7c:4b:d9:fe:88:ed:a2:
c2:53:69:fe:24:39:de:14:14:b9:43:e2:36:e6:1a:30:48:d0:
b8:2d:43:d3:a0:f7:ec:17:f2:76:61:27:9c:97:ab:0e:93:5f:
60:fa:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net