Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/NgWmbAJgungmvuD2b4lhPyG9HS4.roa
File: NgWmbAJgungmvuD2b4lhPyG9HS4.roa (raw, json)
Hash identifier: t3vC0+4VBb5wCcDlMDg2W8fzOL4JtbOA3CytBK/gjwA=
Subject key identifier: 36:05:A6:6C:02:60:BA:78:26:BE:E0:F6:6F:89:61:3F:21:BD:1D:2E
Certificate issuer: /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Certificate serial: 0194EA40750286C5AC9316361B445B17E35F
Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/NgWmbAJgungmvuD2b4lhPyG9HS4.roa
Signing time: Sun 09 Feb 2025 10:28:00 +0000
ROA not before: Sun 09 Feb 2025 10:28:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35795
IP address blocks: 91.196.120.0/22 maxlen: 22
91.196.120.0/24 maxlen: 24
91.196.121.0/24 maxlen: 24
91.196.122.0/24 maxlen: 24
91.196.123.0/24 maxlen: 24
195.10.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:40:75:02:86:c5:ac:93:16:36:1b:44:5b:17:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Validity
Not Before: Feb 9 10:28:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3605a66c0260ba7826bee0f66f89613f21bd1d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:eb:7b:15:b5:3e:2c:06:f4:2a:96:9e:4a:
10:41:9d:3d:75:4f:93:19:ba:6e:2a:94:42:04:10:
60:c1:33:a2:69:fd:d4:42:99:26:65:b7:2f:f4:c2:
d9:2a:c3:78:16:08:ee:dc:2d:75:94:a0:13:58:e9:
0b:b1:02:9e:ae:58:43:ad:9b:ad:c8:a9:85:7e:87:
59:57:bf:d3:b1:88:fd:e3:c9:a8:41:dd:72:b8:30:
22:67:cf:91:93:49:c4:de:de:8a:7e:38:a4:d1:30:
d6:e0:c9:35:77:7f:a7:40:02:2d:ac:91:b1:39:ca:
63:8e:68:d6:f4:6f:3c:91:53:96:d5:3f:c2:4c:78:
c3:1c:dd:61:38:a0:fe:68:bd:d4:b0:ed:10:c4:9d:
42:b2:78:2c:d2:bc:e8:63:3e:ac:1d:4e:46:16:4c:
c3:c9:f5:ba:17:dd:3f:b2:24:6f:8b:1f:b4:60:24:
ef:7e:6a:a7:a6:9c:85:7a:3d:03:14:c2:41:e5:29:
82:96:57:33:e3:88:52:34:4d:50:ac:7a:f0:96:c9:
09:a5:a7:35:25:54:d0:ea:8a:5e:37:ab:b1:68:91:
38:41:01:bc:b6:a3:41:91:5e:b9:90:77:bf:df:b0:
13:d7:c2:e4:b9:19:6d:97:3c:b7:10:8d:1c:d3:a5:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:05:A6:6C:02:60:BA:78:26:BE:E0:F6:6F:89:61:3F:21:BD:1D:2E
X509v3 Authority Key Identifier:
keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/NgWmbAJgungmvuD2b4lhPyG9HS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.120.0/22
195.10.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0a:b0:0c:a2:fc:87:ee:a6:ad:e6:54:c0:2d:84:73:3f:22:
de:5e:ec:c9:8b:05:5c:5d:cb:8f:0b:4d:21:c8:8f:c4:2e:01:
89:69:6b:60:8e:14:48:af:05:ad:d6:89:98:38:02:53:ed:c4:
d9:80:e7:f3:24:24:b6:0b:56:4d:b8:9a:06:fe:1c:0b:50:33:
4f:7d:e8:57:aa:25:f3:4b:48:94:30:00:be:4b:52:a8:cb:35:
af:b0:8c:07:b2:07:5a:45:e9:17:f5:69:93:a1:1f:57:e4:3a:
58:29:07:0e:9d:21:cd:40:5e:b6:be:b9:1a:0c:f3:d7:7d:3c:
81:5d:de:19:d6:c4:a5:6e:26:cd:03:73:1a:1b:c8:8f:75:c8:
9c:d9:25:c0:50:ef:fa:c9:4d:8d:49:c6:db:16:4a:6a:7c:27:
98:89:7c:71:e1:f4:12:76:18:76:e7:b2:97:27:01:ef:7a:8d:
c2:91:42:d4:ee:4b:75:8c:e2:cb:77:1b:19:cd:45:e8:39:29:
80:78:2e:cd:25:f5:a8:cb:1a:12:34:92:cf:04:7f:07:e3:1e:
bd:2e:1e:3d:72:af:3e:5a:9b:96:bf:a0:52:71:a6:fa:90:fc:
17:6b:83:c5:dc:b3:ff:36:e8:83:6a:08:a3:97:ae:b6:39:0f:
a5:f1:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net