Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa
File: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (raw, json)
Hash identifier: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=
Subject key identifier: 9D:DE:A5:1C:D0:30:52:CE:19:23:BE:3E:87:96:8B:37:6C:C5:6B:EC
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01941FFA4A1AFEDB66FCEDD3345E8F1FA187
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29353
IP address blocks: 195.167.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4a:1a:fe:db:66:fc:ed:d3:34:5e:8f:1f:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ddea51cd03052ce1923be3e87968b376cc56bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:24:fe:1e:e3:5c:83:0c:7a:57:a4:23:3c:
c2:5e:f3:91:d3:b3:b0:9f:2a:a3:74:09:44:f1:c6:
5a:cb:d5:29:63:3e:eb:ae:1a:d7:ba:5e:40:7f:1e:
73:92:a4:32:e1:79:0a:71:02:57:84:e7:e7:f0:98:
a1:af:29:88:9e:a3:bf:a9:cf:3d:9f:a6:b8:53:fc:
1d:e2:a2:3a:89:43:8f:3a:1f:7f:2f:d2:98:65:47:
85:da:c6:9b:63:7c:2c:3b:04:cb:76:8e:5b:e2:56:
17:34:9f:65:a3:ab:1c:ad:5a:37:f6:6b:b7:6a:4b:
d5:7c:cf:5a:43:bb:2f:fd:df:e0:46:5a:6c:94:83:
d4:85:f5:e2:fd:f4:e8:80:a7:b9:16:72:20:b5:e2:
33:4c:e1:6d:b5:d1:82:44:81:25:2e:85:0d:05:b1:
70:16:63:88:15:8c:12:b5:6b:ff:4b:b2:61:86:88:
b6:f5:e4:89:20:54:58:df:93:65:3d:1a:83:1f:12:
17:f6:89:55:ec:a6:07:a3:c7:c2:41:49:ca:99:07:
d8:c0:ed:91:77:15:d9:47:8b:65:77:35:a2:f0:a7:
8f:80:ff:06:f3:9e:1c:93:b8:2e:2f:8b:11:92:5a:
f6:fb:84:45:67:14:11:f8:03:aa:e6:6a:5d:f0:24:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DE:A5:1C:D0:30:52:CE:19:23:BE:3E:87:96:8B:37:6C:C5:6B:EC
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.41.0/24
Signature Algorithm: sha256WithRSAEncryption
44:81:a3:1d:f9:ef:b9:a6:89:45:0c:fb:7f:25:1d:91:81:fa:
5b:51:1e:b8:5a:cb:43:4a:08:33:b3:c2:fb:de:f1:e0:f0:45:
a2:e8:90:07:c8:50:9c:1d:06:db:96:d5:59:88:dc:2d:82:5b:
f7:35:17:71:6a:31:63:7c:03:8c:3c:82:95:59:fc:0e:ea:7b:
c2:2f:0c:c5:6f:68:53:b5:16:62:a1:21:36:06:30:b6:0a:d0:
0c:eb:c6:3b:f0:a6:82:ff:80:76:f8:13:ba:71:29:7f:3b:4d:
5f:27:03:6f:42:5e:34:0a:e5:0b:5c:88:d0:15:ff:cc:aa:c0:
85:88:cb:53:7a:73:9f:cb:ee:8e:10:48:1b:09:ab:c3:ea:9a:
bc:f8:ae:06:f5:06:da:23:67:8e:e9:04:06:42:c6:bf:0e:30:
83:1f:09:11:dc:3c:76:0d:b2:bc:24:81:51:eb:b3:13:bc:ff:
01:aa:1f:92:d4:e4:98:60:f4:90:31:d8:f5:44:e3:70:7a:dd:
d8:c4:f6:dd:6e:7a:16:98:67:ce:a4:6a:00:56:af:bd:a3:93:
d3:e7:bc:e8:db:e8:4f:66:12:d1:2a:ea:0b:e0:b6:bc:7c:99:
b1:83:1a:13:5e:4e:8f:cd:10:82:6f:91:14:74:fa:96:42:ca:
03:36:11:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:33:47 2025 by rpki-client