Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/NqBM7SejbvGbff9d0C8tNNMd9cE.roa
File: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (raw, json)
Hash identifier: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=
Subject key identifier: 36:A0:4C:ED:27:A3:6E:F1:9B:7D:FF:5D:D0:2F:2D:34:D3:1D:F5:C1
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 019426D9CCA32DA2F08CC802DC3FDC661DB9
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/NqBM7SejbvGbff9d0C8tNNMd9cE.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 95.140.160.0/24 maxlen: 24
95.140.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cc:a3:2d:a2:f0:8c:c8:02:dc:3f:dc:66:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36a04ced27a36ef19b7dff5dd02f2d34d31df5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:52:c1:b9:c1:7f:d5:15:c9:21:b8:5d:d9:
16:13:ee:17:9d:af:68:f6:fc:26:bc:e8:32:ff:e8:
53:53:94:30:b7:b9:e2:aa:03:e5:d3:ff:62:1b:92:
c3:91:07:ad:40:5a:2b:59:5e:2f:ed:9a:ec:81:1e:
1f:2a:ea:5d:8d:92:cb:63:e8:30:5d:16:9b:7f:a9:
98:f0:f8:11:93:cf:68:e2:50:07:1b:6c:d7:20:08:
97:75:ef:b4:6e:5d:1e:04:9b:e0:80:8c:23:5a:9b:
98:27:71:60:25:6f:65:0b:48:ac:c3:e8:1b:8a:00:
a8:01:de:b5:6f:90:a9:cd:29:ba:a9:05:23:6d:47:
34:c8:cf:6b:f9:ea:86:5e:51:9e:2f:a8:c8:a8:69:
74:62:28:58:f1:c7:c9:20:fd:5c:79:3d:c3:14:0f:
34:6d:6e:63:12:92:90:8d:42:a2:ce:a0:08:74:96:
7e:d5:00:aa:b4:2f:77:a6:07:d0:85:e9:35:0e:e8:
1d:37:12:a5:df:81:06:fd:c3:f5:9f:b0:00:f8:86:
19:d5:a2:7d:40:3d:8e:71:09:dd:8e:31:6f:a8:a5:
16:fc:3e:68:88:17:7f:79:0d:40:8e:ca:c7:10:38:
66:a7:c2:b1:d3:b2:ac:02:ac:5a:65:4f:82:b2:92:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A0:4C:ED:27:A3:6E:F1:9B:7D:FF:5D:D0:2F:2D:34:D3:1D:F5:C1
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/NqBM7SejbvGbff9d0C8tNNMd9cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.160.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:92:40:99:16:a3:40:36:cc:52:92:ad:35:78:39:f4:17:6e:
ec:40:60:ec:1a:42:2c:76:94:60:95:f6:92:cc:37:63:3b:74:
cd:f6:b0:cb:4e:35:d0:08:8f:0f:13:9d:f7:4f:ef:85:4a:79:
d3:a0:91:b2:cf:26:9d:d7:67:f8:ab:11:6c:d6:3a:61:c6:86:
29:25:43:54:a3:98:39:68:e2:30:ea:55:ec:52:24:cb:78:fd:
24:38:3b:fa:1e:6e:8e:f4:77:a1:cd:e5:52:89:e9:6a:e9:e6:
96:7b:15:86:42:12:bf:76:c6:ab:d1:7a:7c:a9:fa:f0:ed:eb:
e9:6d:bf:7e:ce:20:11:b1:01:14:66:7e:57:49:29:dc:92:5d:
fb:e2:9d:b0:47:e4:0d:71:f1:c3:0f:39:d4:3d:6e:13:39:bb:
c4:8a:fa:2c:f1:de:90:58:50:20:e3:1b:4a:8f:2b:e5:9a:c4:
70:85:40:94:15:bd:05:0a:50:d2:c4:c4:b1:7f:23:fc:8f:6e:
b1:fd:79:30:ca:23:e3:17:b1:12:38:a1:1c:a3:6c:97:da:3e:
67:b9:a7:ae:2a:d9:77:19:a5:20:04:de:6e:b5:7b:52:64:4d:
24:65:96:f8:74:f8:c4:0d:7d:f1:ff:09:cf:72:53:d2:f7:a6:
89:05:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:04 2025 by rpki-client