Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/NUgqfXnBfo9eMy_-yxzup0D3znk.roa
File: NUgqfXnBfo9eMy_-yxzup0D3znk.roa (raw, json)
Hash identifier: ox85vZOd9BM1hSOGTr99NT8yqq2pYzS+i/E/twBRHpc=
Subject key identifier: 35:48:2A:7D:79:C1:7E:8F:5E:33:2F:FE:CB:1C:EE:A7:40:F7:CE:79
Certificate issuer: /CN=9766354188ee68dd038f8b90a6574cce8e95add3
Certificate serial: 01857102C5F0D066F23CBFC4BB15169960B8
Authority key identifier: 97:66:35:41:88:EE:68:DD:03:8F:8B:90:A6:57:4C:CE:8E:95:AD:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/NUgqfXnBfo9eMy_-yxzup0D3znk.roa
Signing time: Mon 02 Jan 2023 05:44:45 +0000
ROA not before: Mon 02 Jan 2023 05:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:c5:f0:d0:66:f2:3c:bf:c4:bb:15:16:99:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9766354188ee68dd038f8b90a6574cce8e95add3
Validity
Not Before: Jan 2 05:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35482a7d79c17e8f5e332ffecb1ceea740f7ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:04:43:6a:f2:e5:77:5c:28:14:61:c8:b0:
04:03:f3:7e:64:b3:85:16:25:4c:7b:f4:1e:ec:31:
79:8e:6d:d0:d5:b6:07:6c:67:70:5f:62:24:09:04:
a7:83:bf:67:6c:97:4a:4e:59:46:ec:a7:dc:ab:f1:
30:41:7b:5f:64:4e:0f:4b:3a:96:a2:8b:5a:48:d9:
c7:6b:a0:ec:8b:49:eb:42:a8:76:d6:43:7f:4f:28:
f3:c8:0b:75:cb:ec:44:dc:51:15:b4:3e:3b:68:fe:
e9:59:dc:71:76:2f:9d:4d:ff:04:de:6d:ee:ea:99:
33:5d:87:8f:69:c6:4c:95:fd:c1:6b:ca:88:f4:34:
4c:21:96:16:80:b5:93:c7:15:8c:04:48:c4:10:1a:
3a:1d:b2:75:d0:eb:5e:e7:cb:26:09:0a:e8:df:41:
b0:16:88:17:d3:46:cc:f2:ae:e0:9d:08:c2:77:f7:
1d:0e:b6:a0:83:90:b0:01:98:5d:36:cc:34:f8:fe:
9f:1c:c6:d9:15:f4:d3:1e:f1:d1:38:82:4e:20:99:
41:93:b5:cd:99:2f:1b:e1:22:97:af:c8:1e:9d:5a:
02:0d:4e:27:9b:94:06:a8:ed:33:1a:c8:c9:a7:77:
51:5d:45:63:00:82:72:f4:e1:9f:d1:df:dc:2b:08:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:2A:7D:79:C1:7E:8F:5E:33:2F:FE:CB:1C:EE:A7:40:F7:CE:79
X509v3 Authority Key Identifier:
keyid:97:66:35:41:88:EE:68:DD:03:8F:8B:90:A6:57:4C:CE:8E:95:AD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/NUgqfXnBfo9eMy_-yxzup0D3znk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
41:61:52:37:95:f7:25:1e:83:23:44:46:a2:0b:9c:78:2b:ad:
6e:ef:40:70:e5:82:42:b6:18:49:a3:60:40:a4:d5:8e:21:f7:
da:24:6d:46:9d:f9:e6:64:5b:3d:ab:6c:da:03:95:89:3c:33:
f0:f9:67:13:46:06:63:dd:5e:70:df:7d:35:40:db:67:82:92:
e1:0f:0c:8a:95:57:1b:26:90:fa:76:76:1b:70:7b:5b:ba:d3:
25:81:fa:99:f4:81:ff:25:b0:f0:5b:46:53:40:54:41:ea:85:
e6:87:21:ae:02:2e:8e:c7:1e:26:39:83:22:46:4c:4d:04:10:
72:a0:49:ee:2c:58:e4:b7:aa:95:8f:86:24:89:30:81:ce:fa:
0d:ed:bb:21:13:f7:81:34:32:8f:7c:77:67:a2:41:19:7a:60:
05:4a:36:ea:99:e4:ba:53:2e:94:17:96:38:1a:e0:e7:e2:25:
70:41:b9:4a:0d:09:47:60:8f:76:12:17:5c:7a:ac:1b:c1:1d:
b4:89:2d:52:96:b9:65:4a:90:d3:0d:0f:3e:52:76:11:e7:e9:
bf:ab:fa:9a:f7:e9:c2:ba:68:b5:d8:d5:d3:2e:18:bc:96:54:
ef:de:eb:dd:d6:13:c7:6b:6e:41:09:af:8f:99:6f:98:66:d0:
ff:e7:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:16 2025 by rpki-client