Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/NWBRSIh_JQOLOGxGQA5nUVfpaGA.roa
File: NWBRSIh_JQOLOGxGQA5nUVfpaGA.roa (raw, json)
Hash identifier: VEmvUP6tz/wsTGqFWfrQ8DOFS6r44dy0cv78GvE46bs=
Subject key identifier: 35:60:51:48:88:7F:25:03:8B:38:6C:46:40:0E:67:51:57:E9:68:60
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019469711782F89C4347FE7F2D67E67EFD1E
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/NWBRSIh_JQOLOGxGQA5nUVfpaGA.roa
Signing time: Wed 15 Jan 2025 10:10:06 +0000
ROA not before: Wed 15 Jan 2025 10:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48976
IP address blocks: 84.54.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:71:17:82:f8:9c:43:47:fe:7f:2d:67:e6:7e:fd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 15 10:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35605148887f25038b386c46400e675157e96860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:8c:2b:bc:b0:21:59:8c:87:d2:41:2f:ab:
d5:86:8e:50:28:48:75:a3:8c:9e:cd:41:86:3e:8b:
e9:ae:2d:d8:8a:d3:91:74:c1:16:bd:8d:62:6e:79:
6a:a9:ab:98:a4:38:72:db:1c:7f:4c:10:be:7d:f8:
39:ec:83:42:3d:e9:8b:04:00:fe:54:b3:27:f5:69:
a0:a1:74:f2:0c:25:87:12:60:4a:52:92:d7:72:03:
6f:b7:e1:62:0b:a9:eb:e2:d1:48:3b:1d:02:70:cb:
af:52:e3:8e:3b:80:f4:e6:94:70:fa:51:ba:7c:55:
05:58:f2:98:45:3f:83:5f:4e:92:af:be:3b:ef:2d:
b4:f0:8d:03:f0:19:34:59:ec:79:70:3e:95:19:ed:
67:e1:f7:b6:0f:66:6d:e8:f9:b6:0d:2d:22:b3:f7:
93:53:42:a9:87:70:fd:1b:95:8e:85:eb:b4:2a:65:
53:5a:38:29:04:b2:6d:07:c4:32:6b:c4:58:da:78:
7d:3f:2b:32:eb:fa:99:b6:81:ef:81:e2:b4:f5:e4:
dc:b7:07:c7:37:46:92:bd:31:14:95:6a:70:8f:21:
07:28:ee:ab:31:61:f0:79:90:d1:fa:87:ac:7e:5d:
d8:17:fd:4e:83:eb:af:70:d9:04:76:3a:2a:c1:33:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:60:51:48:88:7F:25:03:8B:38:6C:46:40:0E:67:51:57:E9:68:60
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/NWBRSIh_JQOLOGxGQA5nUVfpaGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.2.0/23
Signature Algorithm: sha256WithRSAEncryption
63:5d:09:96:4b:d9:09:e2:33:06:ed:30:02:f6:4d:51:bc:d4:
16:19:90:85:7b:62:8e:63:0a:a4:99:09:45:b4:63:95:45:f8:
35:2e:75:68:b7:d4:b3:51:9f:ac:83:e7:5f:b8:cb:2d:8a:3f:
8e:83:19:8b:cf:94:b3:1a:29:e5:a6:51:ae:81:00:b8:ee:72:
b5:fb:17:31:45:b7:ad:70:77:f4:f5:ed:2a:c9:52:a0:be:c2:
5a:70:7b:42:c3:95:30:47:af:ae:db:2f:59:5e:a0:47:ee:4f:
6f:86:d5:2d:58:c0:81:a0:96:4d:30:62:58:8e:52:be:13:3d:
98:01:a2:70:ac:27:20:b5:87:00:db:8c:f7:dd:8b:88:a6:11:
68:11:32:90:ec:6a:07:a0:13:1b:79:09:79:54:37:8f:95:8b:
27:45:24:1e:e7:ed:91:15:4f:cc:d3:6f:a1:20:4e:29:7b:52:
74:87:39:3e:48:bf:2a:a8:1a:b0:5c:88:77:98:e1:3a:ba:04:
48:5e:b7:dc:30:54:c0:fe:d9:77:d2:af:b5:a4:8a:07:61:51:
69:6d:34:6c:91:e4:d5:09:4a:94:7c:7d:70:de:d9:cd:d7:0c:
95:45:39:c1:d7:81:2d:ef:c6:0b:ac:36:33:4c:08:a5:55:89:
ce:9a:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:33:55 2025 by rpki-client