Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/nvCV4orXBwkCxx9cHa5KANTyCwE.roa
File: nvCV4orXBwkCxx9cHa5KANTyCwE.roa (raw, json)
Hash identifier: UYmf5tNY0RyuPAulCxJX/IA+maHZOZx5xFiCAM1bwuM=
Subject key identifier: 9E:F0:95:E2:8A:D7:07:09:02:C7:1F:5C:1D:AE:4A:00:D4:F2:0B:01
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 01942368C533FB352E7E949CBD1DA7CB884C
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/nvCV4orXBwkCxx9cHa5KANTyCwE.roa
Signing time: Wed 01 Jan 2025 19:47:36 +0000
ROA not before: Wed 01 Jan 2025 19:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 195.5.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c5:33:fb:35:2e:7e:94:9c:bd:1d:a7:cb:88:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: Jan 1 19:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ef095e28ad7070902c71f5c1dae4a00d4f20b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:24:37:57:29:d5:0f:46:da:bb:c7:95:b6:
14:72:a7:b3:34:29:d1:99:a7:45:fb:f4:6f:b7:90:
ee:b7:33:86:8e:d9:38:3c:6d:0a:05:35:0a:64:17:
03:06:80:08:2b:a6:69:6d:a8:12:40:cc:04:01:85:
a9:0a:d7:14:7f:b0:ef:c5:b8:a3:8b:bc:11:39:b7:
32:77:ac:db:f0:af:be:48:c2:82:91:61:d8:b2:2e:
c4:38:51:ba:a8:2b:a8:6b:c6:cf:59:df:c0:9d:65:
3e:ca:79:f9:db:db:49:6d:29:32:dd:f7:fd:ee:a0:
ac:02:d0:a1:e3:82:ca:88:44:76:c7:53:1f:8a:e3:
34:f7:a2:58:4e:d2:f9:81:97:6b:49:44:16:71:80:
87:70:c5:1b:d9:e6:79:34:e6:0e:d7:ad:27:00:f8:
45:b0:85:5c:31:0e:3a:54:0e:75:c8:a2:2f:e7:93:
0b:55:b8:d5:5a:19:d1:35:ea:29:94:47:5e:5c:c2:
d5:fe:bc:10:1c:b1:80:e2:17:00:ec:7a:f4:9e:3c:
2d:6c:5d:e0:08:1d:36:ad:b3:b9:19:c8:6e:56:43:
23:15:16:1e:ef:f5:f3:0d:0a:6f:02:02:83:bd:a7:
da:b6:47:f0:09:47:78:ae:9f:69:21:31:52:43:87:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:95:E2:8A:D7:07:09:02:C7:1F:5C:1D:AE:4A:00:D4:F2:0B:01
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/nvCV4orXBwkCxx9cHa5KANTyCwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.105.0/24
Signature Algorithm: sha256WithRSAEncryption
56:09:4b:db:fc:55:0e:c3:16:38:94:bb:14:ce:5d:ec:af:5f:
f2:98:78:63:5c:aa:68:b8:23:c6:cb:8c:f4:31:95:a9:b1:4e:
81:15:77:40:c3:45:48:eb:f3:0b:9d:37:ee:27:f8:79:69:b7:
e5:05:20:f8:c1:f6:e4:23:ca:fc:c9:fe:b5:54:ce:5f:a6:65:
ec:5b:66:97:f0:c5:b8:9f:23:c2:f3:8e:78:92:cb:50:c4:61:
e5:ed:dd:e7:bc:a7:af:3d:04:78:74:d0:8c:8f:fd:ad:74:4d:
9d:88:8f:9b:a0:0f:eb:1a:4a:a5:e2:7c:54:42:51:df:a6:d0:
99:18:59:a9:8f:78:09:4a:28:1c:58:c9:bd:e8:f2:23:b7:63:
d7:71:c6:c2:01:33:72:2d:48:ae:fc:42:7e:d1:e1:24:fc:e3:
21:78:87:f3:ba:f3:01:68:ea:b6:4b:e5:c8:12:85:b8:63:58:
c4:63:5b:48:b5:e0:74:74:b2:b0:bf:d5:0d:16:ba:65:24:50:
23:ed:97:0e:2f:f3:d8:4f:83:69:73:f4:94:63:39:c0:2e:57:
fe:6c:33:1a:9b:a6:15:c6:a7:94:6d:15:aa:02:c9:77:cf:51:
33:42:5a:38:a9:ae:fd:67:c9:c3:ad:f1:3d:12:09:31:6b:77:
b6:d4:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:36:52 2025 by rpki-client