Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/NsSedmTQW8OnTTsqv3X8CBZy-xU.roa
File: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (raw, json)
Hash identifier: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=
Subject key identifier: 36:C4:9E:76:64:D0:5B:C3:A7:4D:3B:2A:BF:75:FC:08:16:72:FB:15
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 01942143B0F90559757D09B50A4F6B385B34
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/NsSedmTQW8OnTTsqv3X8CBZy-xU.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 37.140.242.0/24 maxlen: 24
195.85.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b0:f9:05:59:75:7d:09:b5:0a:4f:6b:38:5b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36c49e7664d05bc3a74d3b2abf75fc081672fb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:f4:9d:5c:5b:ff:31:d2:7e:59:6d:7a:93:
02:ff:52:45:84:5c:5e:ce:88:b4:c8:ed:50:50:ad:
8f:ae:1a:b2:5f:90:1a:35:56:26:b9:c1:a3:fe:c8:
52:f7:3e:5c:5f:3f:be:85:31:fa:fe:ca:82:b8:ac:
dc:96:bd:18:bb:0c:1a:e9:c0:14:9f:91:e0:91:ad:
f8:34:da:aa:ff:2b:82:b4:43:09:7c:f9:35:1a:23:
69:51:ac:33:b8:ca:8f:5d:52:ad:f3:06:9e:0c:80:
ab:ba:6a:3b:2e:17:af:0a:fe:01:5f:62:ae:b8:25:
7c:ff:af:2e:f1:72:c2:28:ea:1f:e6:15:fa:be:00:
e3:d3:fa:af:5d:d3:2d:15:47:85:96:7c:90:13:5a:
9c:df:89:1a:70:4b:19:00:03:5e:36:8b:84:d9:b9:
28:11:16:fa:5c:25:0b:7c:68:8a:ed:77:0e:60:d0:
b2:3f:32:34:d4:e0:51:3b:bc:45:38:e3:3d:f3:7e:
0c:ff:09:74:e0:48:2b:a4:1d:ce:f8:8a:59:89:c5:
2a:d5:1b:5e:3e:bb:48:68:d3:2a:07:30:31:a2:61:
39:f2:90:02:45:55:0e:d3:97:43:a1:94:d1:b2:00:
b2:7d:6e:35:6a:a7:a7:5d:5c:e3:98:0e:68:68:f2:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:9E:76:64:D0:5B:C3:A7:4D:3B:2A:BF:75:FC:08:16:72:FB:15
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/NsSedmTQW8OnTTsqv3X8CBZy-xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
195.85.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d9:fd:b0:be:ee:ae:35:4d:15:72:f9:25:14:f0:e6:2b:47:
6c:63:46:e7:2d:a6:3b:94:3c:85:9f:8b:bb:ef:96:6d:31:60:
c4:c8:e7:27:45:c3:45:60:37:25:f7:05:c2:4f:69:58:9f:eb:
d0:aa:8e:2e:63:c7:09:d1:47:b5:76:62:f6:34:21:76:d0:a1:
e7:6f:48:28:c1:fc:cc:ff:4a:2a:78:fe:ab:15:d7:ed:76:b3:
1d:d8:a9:ad:70:7e:71:36:91:05:92:3f:2f:03:1c:86:e8:34:
68:e0:67:5c:14:6f:94:bb:a3:65:1a:ba:14:b0:7d:a0:c7:8e:
16:55:a0:3e:c2:e3:26:f9:a9:4f:04:e9:3b:73:4b:85:32:c4:
99:1e:63:86:7a:eb:c7:b2:12:9d:29:c1:d2:aa:21:59:2c:e6:
dd:b3:8b:4a:62:13:be:23:ab:2d:e7:7c:ec:1c:bf:6f:a7:85:
51:5a:17:98:b3:42:c9:be:74:7c:ad:28:be:16:7b:fe:86:4f:
b2:33:1f:bf:20:c7:76:88:e3:0c:8f:61:e9:cc:85:36:41:a1:
39:ef:98:34:6d:d3:4d:2f:a8:01:51:a5:b3:2b:62:65:fb:2e:
df:d8:ea:23:56:67:81:c5:72:e4:30:6e:f8:ee:04:21:35:60:
84:2c:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:03 2025 by rpki-client