Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NL8SNBB94yJmXSfvbxE2eNZEJ9E.roa
File: NL8SNBB94yJmXSfvbxE2eNZEJ9E.roa (raw, json)
Hash identifier: hntcYSaFq4mi3qm3JSJYPveUcJTtgjJgSNTQAbA1kv0=
Subject key identifier: 34:BF:12:34:10:7D:E3:22:66:5D:27:EF:6F:11:36:78:D6:44:27:D1
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01944D42EC41B082C274B41346271EC0978B
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NL8SNBB94yJmXSfvbxE2eNZEJ9E.roa
Signing time: Thu 09 Jan 2025 22:50:18 +0000
ROA not before: Thu 09 Jan 2025 22:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206938
IP address blocks: 2a07:4a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4d:42:ec:41:b0:82:c2:74:b4:13:46:27:1e:c0:97:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 9 22:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34bf1234107de322665d27ef6f113678d64427d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:66:3d:37:c3:d8:60:65:fa:c9:d5:12:ab:
3d:38:23:4c:83:16:6c:37:7e:0c:e8:2b:34:48:11:
ca:87:21:9e:e3:f6:32:c3:04:cb:23:a7:0f:41:1b:
7a:ec:78:c7:7f:d5:57:4a:4b:ca:7d:f5:d0:96:aa:
55:e4:cd:67:99:7c:c1:93:12:cc:28:62:0f:47:f0:
3e:54:af:9b:15:22:84:88:9e:97:da:60:29:6b:76:
35:1d:56:db:de:0d:51:f0:0d:d0:e8:33:80:b6:4d:
bd:ea:2d:9f:29:ab:9a:92:9c:1c:50:45:9a:d6:7b:
9a:89:78:60:1d:f6:a6:6e:97:81:d7:9f:6c:9b:95:
a1:e4:d6:4a:9c:1b:41:5d:53:84:7e:26:17:35:c3:
d1:bc:3f:3e:1a:58:73:1c:fd:12:1c:ef:6f:b7:36:
2e:ea:51:29:4e:bf:1d:4b:3d:5e:ef:af:1c:26:f8:
11:2e:31:b8:52:c0:9b:55:ab:35:92:22:be:1c:93:
60:e5:83:22:c2:52:2d:72:cf:3d:ce:ad:d7:83:59:
bf:16:19:9a:60:af:a2:c5:28:72:00:c8:f3:dd:32:
10:87:32:af:61:00:58:92:41:e9:2c:3f:12:4b:d5:
f3:ee:0f:dd:cf:45:60:00:33:8a:59:45:e2:56:ab:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:12:34:10:7D:E3:22:66:5D:27:EF:6F:11:36:78:D6:44:27:D1
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/NL8SNBB94yJmXSfvbxE2eNZEJ9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4a00::/32
Signature Algorithm: sha256WithRSAEncryption
59:62:c9:4a:59:ac:8e:38:a0:fd:e9:14:f4:b8:73:53:d0:59:
64:86:3b:ba:3e:f1:95:10:76:6c:53:4c:69:2c:c2:e9:3b:30:
a1:32:46:fa:04:21:36:00:b4:89:bb:a7:5b:17:15:07:dc:37:
b4:92:77:eb:35:f2:53:61:24:3b:94:f2:98:6e:9b:62:81:83:
d7:8a:ff:3f:b2:01:7a:76:38:f1:af:8c:28:95:c6:79:c1:f5:
98:0e:0a:64:f6:95:dd:8e:b8:cf:2c:1c:cb:76:a8:f0:a4:47:
53:1a:2b:c7:c0:d1:b5:f4:89:85:f6:28:1b:57:f0:e6:3b:9a:
c3:00:05:be:ca:00:04:08:69:d8:4b:57:c1:96:f4:03:1b:46:
51:70:3e:0c:09:90:e1:d3:ef:30:e2:66:5e:2b:49:9f:4c:56:
fa:ba:40:60:e6:e9:c1:f0:ca:bc:48:ff:a5:c4:15:d6:18:e7:
ad:d8:80:0c:c3:9b:0f:73:88:48:f1:7c:59:21:9d:de:45:6e:
a6:9f:fa:2d:3d:e7:95:d2:d8:25:7f:1c:59:b2:48:ef:85:8d:
2d:c4:b1:9a:73:6c:47:8e:27:70:0f:a6:8d:02:1c:76:9d:e4:
5d:0f:ee:2b:fe:df:b7:1b:12:ba:24:d7:ac:97:c3:0d:0b:d7:
8b:7b:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:52 2025 by rpki-client