Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa
File: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (raw, json)
Hash identifier: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=
Subject key identifier: 9E:5F:3E:7F:86:38:4F:AA:D3:B2:A6:10:8A:38:6E:88:D8:9F:2F:54
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01942746C3D4DAF06F8861811691DF954D2A
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa
Signing time: Thu 02 Jan 2025 13:48:56 +0000
ROA not before: Thu 02 Jan 2025 13:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15685
IP address blocks: 92.63.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:c3:d4:da:f0:6f:88:61:81:16:91:df:95:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 2 13:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e5f3e7f86384faad3b2a6108a386e88d89f2f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:71:92:a4:1f:f8:ec:cc:02:37:20:17:ec:
3e:6c:47:82:b4:11:c9:3e:e9:77:24:1c:8c:a1:59:
84:10:d1:50:4e:db:46:e5:5a:48:19:dd:68:de:c9:
1f:22:d9:f7:22:b3:e9:07:c4:c7:19:b0:a7:f2:bd:
54:d6:77:6b:48:a8:91:28:7b:b5:55:81:6f:ef:b9:
24:36:8b:88:2d:6d:f9:e4:74:19:ba:99:b3:57:65:
8b:dd:02:8b:85:e6:ea:08:4a:e4:c7:f1:d1:dc:1c:
b8:bb:85:89:3a:29:2c:ba:43:a6:4b:67:eb:cb:5e:
30:fb:76:34:f9:b6:93:02:3f:4f:46:07:b2:0f:e4:
0b:26:f2:de:d3:3d:6d:cb:2e:19:2f:73:d9:8c:a0:
ed:ac:5b:cc:66:c2:62:b0:df:30:de:fd:f2:84:99:
8a:47:4b:ec:a1:da:e7:9b:99:07:ee:88:33:de:27:
26:a2:21:23:be:3f:e7:35:62:7e:f0:2f:5a:87:f1:
66:e2:e4:1f:20:90:3f:8a:c7:72:26:42:23:52:f7:
b8:e4:be:6e:33:7a:fa:03:21:d9:1b:67:0b:99:eb:
14:4d:ef:9f:e5:70:c0:86:9e:d1:6e:4a:1e:da:63:
47:77:59:55:29:dc:5b:31:40:b5:44:9c:1b:49:49:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:3E:7F:86:38:4F:AA:D3:B2:A6:10:8A:38:6E:88:D8:9F:2F:54
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.57.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a7:fa:c6:9d:1f:e1:ef:21:4a:f3:68:02:c7:e1:a4:aa:33:
7c:de:e7:8c:a6:45:36:f9:a2:a3:43:9a:9d:c0:0d:38:e5:8e:
49:4c:75:34:3f:c3:fa:77:00:56:19:7f:f5:2c:12:ec:bd:fc:
08:0d:5b:07:a5:1c:42:08:e8:b2:30:eb:84:a4:fc:fc:09:e1:
47:fa:df:d9:b1:2d:30:c2:0a:69:04:c0:04:18:14:ea:ab:23:
90:93:39:ba:a9:59:73:30:0f:ad:8a:b6:87:27:4a:ea:12:23:
50:be:d6:6f:98:da:a6:1a:24:46:4b:b3:b9:c5:65:e7:0c:2f:
b0:ae:e9:11:a8:87:b4:fb:86:f5:cd:f1:8d:89:ec:7e:09:67:
3b:7c:a9:12:b9:2a:55:db:e9:43:d0:5d:9f:77:0f:17:a9:e1:
31:89:0f:12:99:c4:c0:af:05:c1:c8:ce:a0:03:17:91:88:b8:
12:ba:01:e3:d9:16:9d:c0:5a:1b:38:41:d1:1d:bd:63:88:cc:
33:ae:c1:66:15:76:d1:03:9d:54:f1:dd:05:0a:f1:dc:b7:72:
e6:ac:32:82:1c:1d:d3:e1:13:7f:a0:12:74:4f:53:3e:db:13:
f4:66:ba:89:06:bd:e8:65:a8:c6:1c:7c:e1:f7:2b:31:b1:4b:
b5:99:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:19 2025 by rpki-client