Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/NulfbGD931XSEsWr8c6jWUL0R7Q.roa
File: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (raw, json)
Hash identifier: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=
Subject key identifier: 36:E9:5F:6C:60:FD:DF:55:D2:12:C5:AB:F1:CE:A3:59:42:F4:47:B4
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019420685F2A3D528BC02BAE2DC68F2DE402
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/NulfbGD931XSEsWr8c6jWUL0R7Q.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41540
IP address blocks: 31.172.143.0/24 maxlen: 32
91.231.127.0/24 maxlen: 32
92.60.190.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5f:2a:3d:52:8b:c0:2b:ae:2d:c6:8f:2d:e4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36e95f6c60fddf55d212c5abf1cea35942f447b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:22:d6:32:81:64:b5:cd:1c:86:a0:4c:59:
79:e1:06:ec:fd:5c:99:07:bd:82:69:69:0a:ee:1b:
04:81:9c:d8:a1:bf:0d:64:ef:52:5c:47:bb:0e:5c:
e1:5a:2b:55:ac:a8:03:c3:09:ce:2a:d7:93:fc:c1:
1e:ad:47:82:ed:8a:84:fd:bd:c1:0f:d1:2d:da:82:
ca:c1:2a:4a:74:6e:19:3b:c7:9c:74:da:5c:10:13:
5f:91:59:7b:9e:0f:00:73:85:c3:3e:a4:51:79:69:
6c:78:fd:ee:29:be:4b:cc:14:a2:b6:c8:2c:b8:f8:
95:6f:55:6b:7a:7f:13:26:d4:e5:87:79:57:c1:71:
c2:bf:15:60:2d:92:b5:3f:32:8f:d0:ab:8c:ea:20:
4d:6c:77:99:58:a8:36:3a:64:46:a3:df:d2:89:50:
39:d5:5e:85:1e:07:c2:b5:ad:d3:85:6d:9c:7b:75:
c3:5f:22:43:a2:a2:ab:1c:6a:93:ab:12:ed:2a:2e:
66:1e:18:60:07:16:ac:c7:ae:ea:45:d3:09:f0:98:
d6:2c:67:52:36:db:fa:d0:c5:bf:b3:03:7e:36:2d:
c8:cc:4b:c8:85:0f:d9:c8:73:09:0f:12:1d:b7:57:
a6:4a:83:7e:52:65:7d:6e:81:7c:2a:77:f7:08:f5:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E9:5F:6C:60:FD:DF:55:D2:12:C5:AB:F1:CE:A3:59:42:F4:47:B4
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/NulfbGD931XSEsWr8c6jWUL0R7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.143.0/24
91.231.127.0/24
92.60.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:96:ce:1f:73:67:86:ff:8a:51:d2:2a:e8:b2:65:d5:82:73:
9d:cb:23:2f:a2:c6:40:e3:47:8c:0c:7f:fd:9a:3f:11:58:7d:
33:27:a7:ea:64:d0:fe:50:1b:f3:3f:bb:0c:94:5e:f0:b4:96:
87:ac:30:64:6f:d7:58:90:e6:60:30:98:93:0b:2f:eb:5f:cd:
27:5a:99:97:f1:59:4f:74:97:dd:31:21:46:10:b9:82:04:46:
05:05:78:ea:4b:46:88:88:ef:66:b5:42:73:d1:1b:d4:59:d7:
12:cc:d4:f8:b7:89:63:74:57:0b:db:b4:3f:c6:60:7b:74:3f:
a2:da:c5:1e:bd:39:fe:4a:c6:5d:05:f5:42:d8:1d:e8:1e:d9:
98:59:bf:7c:b1:20:54:2a:92:05:4c:25:7f:0d:db:6c:e9:c3:
1c:1d:a9:86:02:ec:41:4a:5f:db:6c:dd:db:c1:30:46:60:f5:
72:c8:da:e6:ce:25:c4:13:09:0a:c1:4d:de:64:eb:57:5f:a1:
aa:7e:90:1c:5b:7f:b6:1c:27:3f:84:48:d8:76:84:a6:7e:db:
66:05:96:fc:ac:a0:e1:bd:d2:22:59:f1:a2:b6:4b:02:49:70:
b6:77:12:b2:e4:b6:b5:d4:b2:f2:91:5e:8e:ce:52:35:3a:dc:
5d:7b:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:59 2025 by rpki-client