Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa
File: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (raw, json)
Hash identifier: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=
Subject key identifier: 35:03:58:73:A7:E6:1C:B0:3F:35:24:0B:CB:5E:36:F7:1D:50:ED:1B
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 01943B413DD76DEBD051BC4C23C426646B78
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa
Signing time: Mon 06 Jan 2025 10:55:18 +0000
ROA not before: Mon 06 Jan 2025 10:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48822
IP address blocks: 95.171.0.0/19 maxlen: 19
185.216.60.0/22 maxlen: 22
2a02:2548::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:41:3d:d7:6d:eb:d0:51:bc:4c:23:c4:26:64:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Jan 6 10:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35035873a7e61cb03f35240bcb5e36f71d50ed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:2d:56:a1:99:0e:b6:72:b4:26:c9:6e:9a:
61:ab:27:3c:e3:09:05:e3:5f:eb:67:0e:9d:b6:05:
0b:ed:a0:d2:a7:a6:6f:c2:92:0d:6a:cd:6c:6e:2f:
12:4d:97:cb:8c:ad:60:87:55:52:1c:ef:c9:bc:3f:
9d:08:04:fa:9d:94:20:20:30:b2:96:bb:ac:85:3c:
65:f8:bb:f4:fd:ed:53:de:76:97:a1:ef:af:de:8f:
65:8c:27:d0:d3:86:18:e3:e0:a1:27:0f:0d:27:b4:
df:0e:40:1e:1e:5b:39:03:3f:8a:9e:0e:af:7b:6e:
e3:24:ca:ba:7a:c7:86:32:74:3e:f5:5e:e3:d4:f9:
6e:06:7b:88:35:22:41:7c:91:7a:e6:89:22:d7:39:
c2:9c:cd:7b:38:34:1b:34:cd:f4:34:ee:7b:31:f0:
ae:b1:16:a1:ef:e3:3a:21:f4:c6:3e:a2:01:17:a6:
29:fb:26:31:cc:42:4c:6a:35:45:be:9f:df:fa:79:
10:84:e5:1b:3a:20:b1:3c:e2:bb:86:e9:82:18:04:
29:f1:8b:d2:fc:0b:c6:7f:06:7b:dd:e6:49:4e:21:
42:52:07:11:28:ac:ae:fe:25:46:a0:1b:e5:38:52:
ad:4a:2f:d1:ed:5e:76:d8:f0:27:16:cd:36:ee:31:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:58:73:A7:E6:1C:B0:3F:35:24:0B:CB:5E:36:F7:1D:50:ED:1B
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.171.0.0/19
185.216.60.0/22
IPv6:
2a02:2548::/32
Signature Algorithm: sha256WithRSAEncryption
74:a5:a9:a5:4a:2b:7d:c9:44:72:1c:2f:0a:15:d5:50:f0:6f:
19:cd:6d:97:1d:c5:07:0e:06:c7:65:2c:df:7e:41:ff:fc:74:
e8:3d:e5:c2:80:fe:5c:87:d8:15:e7:cc:d9:fd:d5:7c:6e:e8:
7d:aa:7f:a1:7a:5f:98:66:f9:4d:9e:ad:19:4f:4d:cb:aa:bf:
de:ea:49:c1:83:04:6b:da:45:e3:64:24:b7:da:68:37:94:25:
a3:e5:ac:3c:e7:ec:0b:d3:27:40:0a:ce:d0:e5:fa:5a:06:0a:
e8:79:45:e2:9c:58:05:4d:56:fa:15:50:ef:10:3c:a3:ff:9f:
0f:18:90:6b:02:58:1e:62:b6:e8:5d:70:ec:7a:06:66:32:2c:
7d:48:61:6b:c6:69:8c:f8:82:3b:6b:71:5f:76:46:66:b4:5f:
1b:3d:13:e1:7f:88:65:15:fe:6f:d3:1d:44:d3:43:8a:ee:98:
6f:ac:44:10:37:70:ef:fa:ea:6e:3d:d7:c7:fe:d9:d5:a6:4c:
23:61:d4:79:a7:f0:8a:db:1a:c7:32:ee:a8:0b:d7:e6:aa:4a:
42:b0:33:ce:f2:ca:95:a7:71:18:57:89:5c:a6:d0:5d:98:00:
c2:1c:48:81:95:60:d8:71:df:8e:09:d4:70:27:24:fc:57:11:
07:a6:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:56 2025 by rpki-client