Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa
File: NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa (raw, json)
Hash identifier: 8g5jKG/3k2R8GSQmnC21Ug5DsSBfIQTr0ptpHX5icAA=
Subject key identifier: 34:5B:AC:91:33:4C:98:9D:C1:9F:C5:E1:3B:53:A5:5B:59:4D:10:CD
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA354E00CC3600A602495BF067828D
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198507
IP address blocks: 2a04:a147::/32 maxlen: 32
2a05:2d07::/32 maxlen: 32
2a06:3e87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:35:4e:00:cc:36:00:a6:02:49:5b:f0:67:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=345bac91334c989dc19fc5e13b53a55b594d10cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:99:55:d2:3b:99:27:09:3a:27:e7:67:d4:
ec:f9:cf:a1:96:b8:9f:d4:e5:22:9b:be:e1:4b:0f:
6c:ce:f8:42:f0:d6:c6:46:e1:c3:f1:60:ed:92:45:
35:d6:fc:69:06:32:b6:a3:90:46:70:e9:5e:90:5d:
75:9f:17:a2:3f:33:4f:cf:ed:9e:fc:2f:5a:2d:c7:
36:f7:1d:8a:9d:3a:65:13:bd:48:f7:bf:2f:dc:9b:
00:54:6f:27:2c:3d:9e:3b:f8:7c:d2:5d:80:b6:03:
d6:5c:30:0a:6b:a2:de:ed:56:90:a2:87:f8:37:11:
7d:98:20:85:5d:7e:f9:1b:b7:ce:9b:b0:47:2d:66:
2c:b7:3c:4c:50:fe:2e:9d:99:12:2f:2d:8a:56:c9:
8e:da:62:3a:d6:d6:64:0c:2e:86:a6:59:28:eb:fc:
de:9b:87:1e:29:61:13:dd:3f:b0:76:ef:e2:2d:5c:
c1:3d:5c:42:32:ff:2c:a1:b5:ac:98:4b:b5:18:6e:
a0:78:a1:81:2b:8f:09:8c:fb:f5:7c:08:14:3b:4f:
22:68:78:b5:ab:67:59:b1:73:3b:60:fd:97:33:41:
77:b8:86:12:7e:26:3e:8a:ee:8d:ae:8a:91:f4:8a:
1e:79:b6:9d:aa:19:81:52:b2:0c:ca:52:04:61:7a:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5B:AC:91:33:4C:98:9D:C1:9F:C5:E1:3B:53:A5:5B:59:4D:10:CD
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a147::/32
2a05:2d07::/32
2a06:3e87::/32
Signature Algorithm: sha256WithRSAEncryption
7a:d8:e6:5a:2b:64:03:9d:f7:4d:f4:a7:20:b1:28:fd:e9:e5:
47:6f:54:b5:99:df:d3:89:e9:73:ae:47:2f:22:83:16:72:6b:
c1:82:e0:10:03:0d:ad:f8:50:bc:81:28:de:3c:78:7d:13:a1:
4f:cb:13:ef:e1:1a:b4:e1:19:ee:39:41:a0:52:16:98:ab:37:
23:0c:3e:c7:54:7d:9d:2f:15:d7:22:fe:28:3e:2d:0c:fe:12:
52:66:a6:4f:e9:d3:79:50:4f:54:f0:01:33:64:b1:5d:21:67:
96:c0:d1:fe:2c:fc:ee:6d:b0:51:3a:75:2b:a9:1f:f7:fb:0e:
1a:9a:a6:9c:47:2c:15:74:78:4e:f4:27:e4:e0:65:96:32:40:
8f:15:c0:2d:ae:7c:7b:f8:7f:f2:85:ec:e6:1f:43:6f:76:54:
a0:95:f8:84:9c:1e:d1:52:a0:68:1f:ce:1e:ab:fa:82:8c:0c:
4e:a0:63:44:57:4e:72:24:81:27:e6:ec:94:a4:c1:e8:36:0f:
1f:03:be:ff:b7:18:92:69:76:a0:60:f7:54:2b:0b:ef:b5:80:
10:f2:37:44:91:bf:cd:c9:89:a4:80:db:1a:f5:50:bf:b1:a5:
70:65:0e:34:6a:b9:76:ad:d1:19:6d:2a:c0:ce:39:1b:16:fe:
7c:d4:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:09:44 2025 by rpki-client