Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51fd5a-9bc9-4dfd-9d73-7148e2bcd16c/1/nkEhSsKbnLOC6Q-hudPIVKZn4U4.roa
File: nkEhSsKbnLOC6Q-hudPIVKZn4U4.roa (raw, json)
Hash identifier: wREbd4eDwlAvwAL3P9ltPo94F2Nt6IytZhj5KSmRU18=
Subject key identifier: 9E:41:21:4A:C2:9B:9C:B3:82:E9:0F:A1:B9:D3:C8:54:A6:67:E1:4E
Certificate issuer: /CN=e3f669166fc6c62c28c066196bb226a1c5955fdb
Certificate serial: A0F26B
Authority key identifier: E3:F6:69:16:6F:C6:C6:2C:28:C0:66:19:6B:B2:26:A1:C5:95:5F:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_ZpFm_GxiwowGYZa7ImocWVX9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51fd5a-9bc9-4dfd-9d73-7148e2bcd16c/1/nkEhSsKbnLOC6Q-hudPIVKZn4U4.roa
Signing time: Thu 31 Mar 2022 08:16:51 +0000
ROA not before: Thu 31 Mar 2022 08:16:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 176.53.145.0/24 maxlen: 24
2a12:7740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10547819 (0xa0f26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f669166fc6c62c28c066196bb226a1c5955fdb
Validity
Not Before: Mar 31 08:16:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e41214ac29b9cb382e90fa1b9d3c854a667e14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:df:28:b5:6c:41:d1:ea:8e:cb:12:74:d6:
09:17:3a:70:35:c5:cf:89:73:c8:26:4e:9d:65:04:
8c:df:91:de:d8:8b:1f:f6:42:cb:f2:87:44:3a:a7:
5a:40:0b:8d:15:46:f0:51:0b:f1:4b:e6:85:99:a9:
26:be:c5:74:6f:61:3f:9c:40:56:03:b0:d6:b5:06:
b8:a5:65:9c:4d:f2:d7:4b:85:fe:14:db:c8:76:d0:
ae:7a:ab:dc:89:9f:7c:84:59:b4:b8:1b:fb:2e:2a:
d7:32:09:d2:90:08:5d:37:84:94:2c:fd:b2:1b:a2:
d1:27:8e:fb:0e:c3:d6:03:7b:ca:8b:d9:12:ed:64:
b0:48:06:b1:1a:76:ca:44:57:d6:92:28:38:d1:eb:
60:1e:7f:11:e4:ae:1b:17:f8:24:49:44:3e:19:16:
4d:21:29:fc:c5:41:2b:2e:2f:97:c8:43:45:2a:c6:
48:9b:c0:30:30:37:2b:fe:1c:15:28:c1:aa:69:7a:
8d:d0:92:2c:a6:a5:ba:a6:3b:95:fb:44:df:22:48:
cd:95:5a:18:5d:ef:cc:70:9f:c8:a9:33:05:61:22:
6f:44:4a:3f:e3:6a:8e:65:94:52:1b:85:46:82:3b:
29:b9:1a:60:53:64:c6:5d:ab:aa:13:63:c7:6d:7c:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:41:21:4A:C2:9B:9C:B3:82:E9:0F:A1:B9:D3:C8:54:A6:67:E1:4E
X509v3 Authority Key Identifier:
keyid:E3:F6:69:16:6F:C6:C6:2C:28:C0:66:19:6B:B2:26:A1:C5:95:5F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_ZpFm_GxiwowGYZa7ImocWVX9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51fd5a-9bc9-4dfd-9d73-7148e2bcd16c/1/nkEhSsKbnLOC6Q-hudPIVKZn4U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51fd5a-9bc9-4dfd-9d73-7148e2bcd16c/1/4_ZpFm_GxiwowGYZa7ImocWVX9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.145.0/24
IPv6:
2a12:7740::/29
Signature Algorithm: sha256WithRSAEncryption
93:ae:e1:eb:22:43:26:5f:02:0f:0b:be:83:46:75:6c:a6:86:
70:04:d8:bb:04:20:00:cc:4a:50:16:d1:fd:92:16:c1:bd:05:
b5:8d:ab:77:87:53:8d:e7:98:aa:66:3b:02:a8:c4:a9:47:36:
59:20:a6:1e:4d:a2:c0:4d:86:11:75:c5:d0:95:b2:81:01:9f:
c2:ad:fb:8e:d3:24:79:53:52:bf:e1:0a:fe:2b:0f:4d:47:17:
bc:81:a7:91:d8:02:8e:58:24:3a:9a:47:5c:f7:b5:2c:82:c0:
ba:8a:2a:e0:9d:14:1f:80:ed:d1:19:d3:d6:19:1a:a6:34:a5:
a9:72:56:1e:54:58:41:0e:08:63:27:17:9f:4a:67:fb:06:fe:
22:86:c3:cf:06:6d:74:93:44:1a:cb:aa:84:a4:4a:4e:5a:54:
e2:78:b2:8b:0e:77:62:14:1e:a2:a4:23:d2:32:3a:22:aa:2e:
ba:07:af:af:24:f7:1a:01:71:ac:51:1f:c4:8b:15:e5:37:ea:
72:8e:5b:a6:f8:33:47:bc:e7:f6:a7:d5:83:e0:0a:6c:d0:e1:
28:d8:3b:eb:7b:2b:cc:f8:83:62:a0:35:b2:a9:6d:9a:a9:ed:
06:d6:53:c1:b2:00:02:11:ef:d6:05:49:c3:d7:09:70:7a:70:
83:b7:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:54:18 2025 by rpki-client