Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/NW-SQz1wzrv7b62K3H1r8rdcGPU.roa
File: NW-SQz1wzrv7b62K3H1r8rdcGPU.roa (raw, json)
Hash identifier: x+oe7gIJQ54uUi3u2meLgaMe4OImeP/1llZPD+E/fII=
Subject key identifier: 35:6F:92:43:3D:70:CE:BB:FB:6F:AD:8A:DC:7D:6B:F2:B7:5C:18:F5
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 02FB060B
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/NW-SQz1wzrv7b62K3H1r8rdcGPU.roa
Signing time: Sat 01 Jan 2022 04:57:54 +0000
ROA not before: Sat 01 Jan 2022 04:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48401
IP address blocks: 89.44.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50005515 (0x2fb060b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 1 04:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=356f92433d70cebbfb6fad8adc7d6bf2b75c18f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e3:cf:5c:4b:37:b2:09:fd:55:62:f8:56:e5:
1d:9a:05:f5:8c:08:e0:c9:85:c4:d3:2c:12:a1:c3:
b0:86:58:f0:e8:4a:b8:21:cf:e2:f2:c3:d1:d0:54:
15:6f:38:bf:e0:b9:7e:ee:1c:77:20:0e:6b:d0:eb:
56:67:5a:5c:d4:48:33:94:63:b6:61:2b:1e:2d:cb:
c5:a1:1c:5e:ee:56:13:1f:62:3f:21:e4:ca:6d:d2:
3d:4d:2d:2b:57:2e:c9:b8:9d:c3:cf:42:af:e4:0c:
9c:b1:e6:8c:03:6d:7b:f1:8e:59:75:2b:82:b5:01:
9c:a1:35:5b:d5:31:62:66:bc:27:64:20:90:50:e0:
7d:1b:3c:a1:70:91:47:1d:ce:5f:e9:87:d2:a5:5e:
00:12:76:2d:b4:ab:6e:25:20:29:64:2b:88:45:23:
48:35:89:9d:28:e4:a7:6f:4a:f3:68:71:86:47:5b:
f5:91:51:e7:e7:81:8a:9c:a2:f8:57:81:db:14:51:
56:5c:a4:2b:2c:d4:8a:86:ef:ee:4b:51:e7:30:14:
57:7b:0a:85:a6:cd:d0:02:46:93:ca:8e:f3:cb:59:
2b:5a:ec:3c:64:eb:f1:55:3b:bc:2f:d7:7e:97:6a:
fd:bb:bb:ac:aa:59:60:3a:7d:83:c2:89:b2:12:c9:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:92:43:3D:70:CE:BB:FB:6F:AD:8A:DC:7D:6B:F2:B7:5C:18:F5
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/NW-SQz1wzrv7b62K3H1r8rdcGPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.246.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c1:ae:ef:0d:95:f4:4f:e0:66:1f:6f:c0:14:a8:22:e8:d4:
a1:68:ac:11:70:d4:54:94:00:4a:17:9f:54:4c:ef:40:9f:9c:
5b:62:d4:af:a5:5c:68:4e:8c:8d:a8:05:a0:ae:c4:6c:b9:84:
a5:5f:a2:bb:c6:1a:28:49:1d:7f:a2:96:e3:9b:77:a0:f6:3f:
96:84:16:57:9b:d2:b7:14:99:da:c9:af:e5:cc:88:ed:f4:c4:
d7:6d:bb:47:01:96:16:70:cb:21:d2:0d:ec:e9:40:5f:53:17:
22:b6:9c:65:3c:cf:9d:b0:88:76:bc:49:22:40:b9:4d:1c:9c:
c1:c3:5d:5f:c0:d6:4e:1f:51:1c:66:59:22:b2:af:09:a1:62:
fb:9b:b6:55:bb:62:b5:62:6a:10:ab:e7:9f:92:98:1c:bd:72:
17:18:29:75:9b:3a:28:c3:81:32:1c:c1:aa:78:00:e4:cf:d8:
4a:05:ce:3f:bf:b8:eb:82:54:ac:ce:e8:66:24:69:97:b2:1a:
35:a9:69:bd:f1:36:5c:6a:fc:f4:d7:54:50:4a:43:d0:80:25:
4e:6f:86:14:53:b4:9f:57:c7:58:46:6d:dd:cb:44:86:79:6d:
23:42:9c:7a:26:49:96:b4:bc:bb:fe:03:73:98:d9:86:2e:97:
f5:b6:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:38 2025 by rpki-client