Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa
File: nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa (raw, json)
Hash identifier: HsNAyKM2xYLYihaIQPq7p3bRxHDLIVC8wZ1mzcn3eIM=
Subject key identifier: 9C:8B:32:0B:F4:50:E1:FC:B5:D3:E4:B5:6D:B1:D0:98:C1:63:01:FE
Certificate issuer: /CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Certificate serial: 01941FFA5999C380F1080AE8C2F00FB87F57
Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41037
IP address blocks: 195.95.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:99:c3:80:f1:08:0a:e8:c2:f0:0f:b8:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c8b320bf450e1fcb5d3e4b56db1d098c16301fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:c7:59:16:09:64:74:f0:aa:2f:46:57:af:
42:c3:19:79:a3:96:4f:49:cd:6f:d2:63:e0:0a:c0:
b9:62:f0:53:cf:95:34:c3:0c:4b:a3:55:30:2f:bf:
bf:93:74:d8:b2:27:7f:20:7e:89:1b:5a:b6:59:2f:
28:25:79:dc:7e:43:f5:25:ce:c1:a8:56:b3:ba:1a:
91:3b:3a:1a:85:29:7d:a5:4e:60:5d:d3:8e:1b:a8:
2c:24:ac:93:f9:0e:99:b9:e0:7b:ac:93:05:a0:f9:
11:05:09:e6:5f:43:b5:3c:7b:6c:4d:bc:c7:05:dd:
f0:c8:07:25:1a:bd:40:dc:b3:e0:98:83:bc:90:c2:
fc:ae:5b:2b:ca:81:f9:de:b0:e0:d3:e2:5d:fb:61:
73:ad:b1:2a:dd:8e:11:69:5f:2c:b4:8d:82:84:c2:
61:a2:69:e7:f3:0d:d6:ed:f7:23:fe:65:c2:b4:ae:
0e:1c:76:e2:e3:e1:d7:02:0e:bb:ae:3e:41:32:b7:
35:b3:d3:b3:48:d7:75:c6:ef:a8:2b:ea:be:95:0a:
b0:3c:7b:8c:5d:e7:10:d1:ca:4e:00:ba:9b:6f:59:
10:ee:d5:77:63:7c:67:70:c0:12:89:b0:1f:92:c8:
1a:d9:95:68:ae:da:41:fa:cb:fe:90:dd:10:35:e2:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:32:0B:F4:50:E1:FC:B5:D3:E4:B5:6D:B1:D0:98:C1:63:01:FE
X509v3 Authority Key Identifier:
keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fe:81:7a:57:af:54:69:01:3b:22:a5:c7:3f:8e:0b:61:cc:
ba:a9:77:93:a1:20:9a:26:5b:64:1a:c7:b1:06:98:b6:09:6f:
1c:5f:67:4f:c4:6c:03:5f:c4:85:e1:ca:c8:f1:19:f6:8f:bb:
b1:31:82:e1:d4:90:78:f5:65:4f:64:fe:75:86:fb:85:4c:b6:
07:04:50:97:b9:a5:fb:7b:ad:18:19:4d:a6:71:0a:99:2a:af:
52:96:41:09:1b:c5:47:ed:88:1c:74:10:a0:35:4f:0c:74:79:
e4:36:6d:96:87:06:e7:85:1d:09:00:03:3e:3c:0c:06:db:c0:
53:2f:0a:ac:43:f1:10:4b:06:ad:1e:e7:a7:c4:91:a0:29:6b:
bc:0d:fb:1f:a8:1a:28:6f:e2:9b:38:0f:44:21:79:85:f2:b0:
99:d6:36:12:74:13:53:8e:8d:83:67:33:aa:cc:9c:2c:04:aa:
78:6e:d1:58:1f:33:df:56:3f:d5:1b:3f:06:fc:9f:0f:05:3b:
5e:c6:09:ba:11:98:c2:75:ad:ac:0e:4b:d0:be:2c:8e:85:1a:
9c:91:89:cb:03:2d:df:12:f4:f0:70:a7:8f:2b:85:5e:4a:18:
12:d1:6f:39:e9:0e:0d:be:55:f8:3a:27:64:3c:ad:c8:1f:69:
c5:93:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:33 2025 by rpki-client