Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/NHSj5-Yzjl_G54ZTpMeucpCreEE.roa
File: NHSj5-Yzjl_G54ZTpMeucpCreEE.roa (raw, json)
Hash identifier: 73hYRgtKvWog8Vk82S08EnVKEzRxqZ541a3SgWfwbp8=
Subject key identifier: 34:74:A3:E7:E6:33:8E:5F:C6:E7:86:53:A4:C7:AE:72:90:AB:78:41
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 0194258F75D9FE4A6F8C004C4EAD3579986A
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/NHSj5-Yzjl_G54ZTpMeucpCreEE.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200232
IP address blocks: 194.31.131.0/24 maxlen: 24
2a13:6ec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:75:d9:fe:4a:6f:8c:00:4c:4e:ad:35:79:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3474a3e7e6338e5fc6e78653a4c7ae7290ab7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:d2:4b:75:10:30:2f:34:28:ee:91:5e:09:
6c:b1:1d:d5:4e:0f:71:e3:c2:bd:f7:b1:d1:66:84:
55:dc:7d:7f:c3:4d:c7:1f:cf:61:74:70:70:00:78:
6a:4c:07:bd:90:88:c5:bd:77:32:27:0e:09:38:b6:
8d:d7:b7:f6:4c:0f:08:d0:78:11:51:9d:4c:05:64:
5f:b2:8a:6f:be:98:03:6c:8b:2a:ba:9c:6d:6c:6d:
11:d7:4b:8e:07:d6:da:cb:34:01:fa:c8:86:cf:14:
35:05:1b:55:2e:67:6d:a9:a8:38:e7:76:75:fe:70:
2c:bd:08:2a:38:7c:21:4e:82:26:eb:9f:ef:6b:fd:
08:ca:97:27:38:51:48:63:d1:e0:07:04:26:b7:87:
ff:3d:e1:11:ed:ab:b9:58:66:ea:fb:7d:94:72:df:
40:17:71:f8:78:85:25:cd:32:e6:22:2e:4d:a0:32:
5e:3a:80:11:17:b1:06:11:4e:57:52:10:aa:74:e9:
9b:5c:d4:5f:8c:eb:f1:95:8b:04:7f:ec:74:03:6c:
7b:40:d2:1e:87:19:ea:44:12:3b:67:95:8c:72:f8:
48:f7:81:77:6a:4f:a3:95:bf:4b:a3:d6:29:fb:2e:
08:30:cc:c2:ad:26:f2:0f:9d:a8:5a:98:03:62:d1:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:A3:E7:E6:33:8E:5F:C6:E7:86:53:A4:C7:AE:72:90:AB:78:41
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/NHSj5-Yzjl_G54ZTpMeucpCreEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.131.0/24
IPv6:
2a13:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:8b:ad:31:13:fb:e7:43:2c:99:aa:44:25:d9:9a:d4:7a:91:
10:91:8b:3c:68:c5:1b:4a:58:fd:6f:c2:da:4d:e7:d5:55:96:
82:48:02:52:9f:d6:be:e3:ba:a3:2a:9f:9a:5c:27:9b:00:4e:
5c:33:62:c5:78:cd:56:87:84:74:41:25:8a:8d:ca:35:15:95:
c2:39:0c:ae:21:0d:e9:3f:ec:98:9d:92:de:74:9f:4a:bb:ee:
c5:dd:13:ac:85:29:92:2c:f3:01:81:c3:3b:09:ec:38:33:25:
92:16:23:8b:2e:f8:50:2b:2f:fc:7b:df:67:2e:00:7d:11:d7:
d2:96:48:c1:10:45:18:ba:9c:81:e1:6c:a5:ef:df:ab:5b:f8:
74:5f:e3:a0:b0:1c:85:40:4a:fa:c9:62:d2:4c:6a:cc:24:05:
93:13:cf:25:13:06:98:55:cd:22:9a:2f:35:d9:bf:22:db:7d:
a4:9a:ec:0c:8f:3e:07:93:48:d8:d6:be:30:ba:3b:37:9e:da:
9b:3d:cc:ef:1f:14:6b:43:15:91:af:38:cf:fb:ba:fa:a7:3f:
fa:3b:5a:b1:45:45:19:c4:c5:13:13:75:4f:53:3b:15:e2:f8:
4a:e4:8f:db:4b:fb:db:ac:0f:1e:87:aa:d4:67:7a:fc:48:25:
98:4a:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:21 2025 by rpki-client