Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/0nspkNZBD4AF3c6BuZHawbNEn4s.roa
File: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (raw, json)
Hash identifier: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=
Subject key identifier: D2:7B:29:90:D6:41:0F:80:05:DD:CE:81:B9:91:DA:C1:B3:44:9F:8B
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019420D597EA50837A5ED56DC344658F351F
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/0nspkNZBD4AF3c6BuZHawbNEn4s.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24972
IP address blocks: 195.244.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:97:ea:50:83:7a:5e:d5:6d:c3:44:65:8f:35:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d27b2990d6410f8005ddce81b991dac1b3449f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:9b:e8:cd:53:fe:21:90:61:28:cd:e5:84:
3e:42:ef:c3:f2:4a:db:b2:fb:df:37:f7:82:b8:26:
1e:9b:49:49:d5:dd:78:e2:44:68:86:d4:b1:76:61:
bb:97:07:8a:7a:5f:47:ca:b8:30:71:97:ea:ff:74:
3c:8a:5f:05:68:c7:34:12:3c:e1:8e:92:47:ce:4c:
1d:40:80:39:98:2b:12:87:fc:6a:30:6b:f5:a0:e1:
cf:0f:e1:44:f1:37:06:da:f2:fa:e0:55:10:24:4c:
d8:04:76:63:7a:f4:2c:c2:d6:a0:c4:95:2f:53:9a:
ff:d6:ab:42:e9:ec:48:11:fa:4e:88:82:ee:01:7c:
01:58:86:a9:8a:b2:40:f3:5a:9e:7c:4e:79:cd:44:
ad:44:b7:af:87:2b:17:81:af:ed:bc:72:50:31:60:
40:ad:26:3e:33:07:7c:dd:d8:1e:ca:5e:78:48:31:
bb:8a:5c:cd:e5:9b:f4:ea:d7:8c:2f:df:6d:09:f1:
f6:16:c8:bf:b7:1e:e3:8c:df:98:11:76:ba:75:63:
6c:97:bb:63:b8:4b:bf:11:0d:cb:56:69:87:17:63:
60:99:3a:86:1a:cf:4a:2c:66:1f:05:3e:e9:c2:05:
6a:35:0c:77:14:cb:fd:6c:94:0b:42:ac:c3:2b:61:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:29:90:D6:41:0F:80:05:DD:CE:81:B9:91:DA:C1:B3:44:9F:8B
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/0nspkNZBD4AF3c6BuZHawbNEn4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.157.0/24
Signature Algorithm: sha256WithRSAEncryption
79:24:26:55:ad:d1:51:aa:aa:d5:f0:40:5e:8c:2b:d8:d7:86:
98:98:51:7c:19:dd:60:df:1e:58:20:29:4c:d9:e7:cc:25:69:
2b:15:30:15:99:80:7c:8b:ed:10:3d:69:bb:21:18:55:58:57:
9b:57:20:2f:f7:2f:6b:75:b7:2c:8a:32:bf:4e:53:6e:2e:fa:
4e:96:30:86:08:9c:49:27:97:5e:97:7d:9a:3f:8b:10:1b:40:
9d:b2:df:2a:79:23:e3:c7:35:98:82:51:e7:74:d0:f2:7c:b8:
e6:f9:68:c9:c9:11:65:9f:21:32:45:33:5d:bb:2d:77:8b:9f:
24:a2:22:7e:fa:f8:b7:31:c0:fc:4e:d1:96:94:3a:cb:76:dd:
8f:41:f4:29:ce:db:b9:9d:ae:be:bf:5c:71:63:a5:94:10:a1:
5b:2d:ce:e9:75:d9:e9:13:2e:60:31:45:ce:6b:13:2e:83:32:
67:e4:76:e0:9e:30:eb:7f:ec:76:00:69:ef:b4:9d:d1:e6:4a:
11:1b:5a:56:71:85:16:f9:03:d5:f9:58:49:f5:58:99:f8:7b:
83:07:7e:16:db:2c:da:62:1d:56:a2:b0:30:a9:64:fc:7f:7d:
48:e2:25:ef:e7:f2:b7:bb:9d:ec:cc:c7:79:0a:d5:8f:65:d4:
78:dd:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:06 2025 by rpki-client