Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/NOS2phI0mCKN8vvba7iknsg1tg8.roa
File: NOS2phI0mCKN8vvba7iknsg1tg8.roa (raw, json)
Hash identifier: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=
Subject key identifier: 34:E4:B6:A6:12:34:98:22:8D:F2:FB:DB:6B:B8:A4:9E:C8:35:B6:0F
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019422201A8EF243D1DD30E25E241F4DD775
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/NOS2phI0mCKN8vvba7iknsg1tg8.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49972
IP address blocks: 194.32.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1a:8e:f2:43:d1:dd:30:e2:5e:24:1f:4d:d7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34e4b6a6123498228df2fbdb6bb8a49ec835b60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:08:fc:ff:0e:7b:91:68:f6:87:8d:86:40:
6e:d9:fe:09:a5:5f:7e:40:41:cb:8f:97:1c:df:c5:
73:cf:07:a9:a3:f6:ba:86:64:c1:95:9b:5c:11:30:
80:17:85:2b:9e:e6:d0:bf:bd:58:b4:8c:0b:7b:1d:
7d:fd:85:55:e1:ec:0b:48:a9:8c:cc:6a:b4:7c:f9:
f1:1e:2f:45:23:2a:18:98:50:6e:a3:0a:ba:8f:45:
84:6b:ff:cd:b4:61:d6:19:77:4e:6f:67:b5:8f:18:
5e:c1:e6:78:54:3c:52:9b:f6:a2:b5:f1:a8:a5:b3:
e9:64:1f:5e:eb:e1:f5:28:44:78:7d:36:08:ca:77:
9e:38:7c:03:e9:b8:59:4a:f4:26:0b:4d:49:4b:f7:
bf:ac:70:bc:77:00:ae:0b:61:53:52:b1:14:5a:ac:
98:f8:ee:d9:e2:cf:5f:f1:1c:b1:77:47:35:a7:a7:
f9:80:71:ae:24:4d:1b:eb:bf:7c:db:3c:59:ac:cf:
62:25:16:f5:cb:87:e7:09:8c:6e:9c:1f:1c:27:41:
0a:61:4c:87:4c:7d:7b:56:23:0a:76:48:9e:25:eb:
92:e0:48:ba:3c:e2:89:20:30:72:1e:11:74:44:13:
44:d6:05:4b:35:20:40:a8:2f:1d:db:c0:3b:ba:4c:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E4:B6:A6:12:34:98:22:8D:F2:FB:DB:6B:B8:A4:9E:C8:35:B6:0F
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/NOS2phI0mCKN8vvba7iknsg1tg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f1:bf:f6:17:f0:23:1a:4b:54:c0:e0:fe:84:cf:eb:07:14:
61:e6:c9:cb:da:9b:11:25:dd:d7:e5:58:f5:6b:93:64:b7:99:
58:86:92:c9:be:db:75:83:10:d3:96:6a:19:ff:9b:c2:52:d7:
1f:12:08:84:c5:ac:7e:71:06:f3:61:94:38:88:0f:93:ac:12:
14:26:79:b4:f5:f6:19:a8:c1:2b:27:e3:6f:d2:f5:a5:b8:1f:
68:7d:e5:59:64:b2:be:3f:5e:52:32:57:0c:b5:75:fa:5f:25:
68:72:78:f2:6c:c6:a5:0e:2c:6c:5c:9f:cb:b0:fa:af:ca:80:
c5:09:71:5d:dd:11:3a:9f:dd:94:7c:a2:0a:1b:ee:ac:4e:99:
de:da:f3:db:2c:71:d1:ad:0d:9b:31:4c:27:38:f4:aa:09:e3:
3b:fe:98:92:81:fe:57:83:6e:3e:62:d5:48:8a:63:e8:15:df:
ae:6a:ef:75:64:aa:dd:50:47:24:33:11:87:24:db:bf:10:96:
49:5e:ed:66:8a:1c:06:12:fb:73:0e:1b:79:89:97:fb:b1:f4:
73:bc:87:d1:72:fb:f7:84:73:20:62:ff:16:ce:51:66:a3:41:
be:66:9b:dd:8c:f8:bf:f0:25:ef:ce:f3:af:77:70:90:2b:d3:
3f:dd:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:10 2025 by rpki-client