Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/NS7K9a04Y-oUyKndp9MndkHfwes.roa
File: NS7K9a04Y-oUyKndp9MndkHfwes.roa (raw, json)
Hash identifier: QOc5bbGd+S7Bvb8KApnX0EMMNorla6zrwLr6fq8SWBU=
Subject key identifier: 35:2E:CA:F5:AD:38:63:EA:14:C8:A9:DD:A7:D3:27:76:41:DF:C1:EB
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 01859BCDE2C2A2B14D19070F3EB5F2DFF2A7
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/NS7K9a04Y-oUyKndp9MndkHfwes.roa
Signing time: Tue 10 Jan 2023 13:10:39 +0000
ROA not before: Tue 10 Jan 2023 13:10:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204104
IP address blocks: 195.190.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:cd:e2:c2:a2:b1:4d:19:07:0f:3e:b5:f2:df:f2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 10 13:10:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=352ecaf5ad3863ea14c8a9dda7d3277641dfc1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:ed:23:ff:14:3b:e0:cf:04:9d:62:04:67:
0c:8c:ef:4d:9d:60:4b:47:c4:ef:91:09:09:e7:51:
00:84:da:34:7b:00:00:54:2e:53:a9:4d:ad:73:ad:
9f:45:f1:47:bc:48:24:3e:c0:9d:47:92:48:24:ff:
89:5d:7b:90:86:63:15:fb:f3:77:44:92:b6:29:6d:
6d:60:bb:b7:87:8b:59:22:df:98:75:75:6b:b6:55:
fc:5e:bc:d6:44:bf:a4:be:bf:27:cb:a8:0d:f6:9a:
ba:0e:84:27:3a:bf:f6:bd:3f:69:d1:db:3d:6e:cc:
87:c5:da:8c:47:e3:2f:09:fd:ea:03:51:d2:54:03:
8a:05:5e:58:6b:c0:2e:d0:d0:b7:73:22:61:bc:c3:
ba:7a:6e:08:09:a6:33:53:e8:5c:77:06:56:2f:e3:
58:ef:3d:4f:ce:3a:19:b4:fe:bd:55:ab:6c:00:13:
57:0b:e1:66:4e:f2:24:f3:69:c0:62:74:23:a4:f6:
0b:ad:b5:fe:13:7a:09:c1:e5:d1:fc:fe:18:03:ce:
57:61:4f:11:0b:f6:50:34:5a:c0:ee:e6:0c:5a:63:
df:30:88:e4:6c:4e:23:7c:74:02:c6:a0:21:0c:48:
92:8c:ab:61:b9:53:6c:bd:b1:39:21:33:45:99:e4:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:CA:F5:AD:38:63:EA:14:C8:A9:DD:A7:D3:27:76:41:DF:C1:EB
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/NS7K9a04Y-oUyKndp9MndkHfwes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:35:19:51:25:70:f0:ef:0e:56:37:1a:bd:ee:f5:ce:ea:ac:
0d:cd:03:98:ba:63:41:bd:2a:fd:0d:a7:9d:21:da:4d:94:32:
b5:59:2a:ba:f3:72:75:c9:c1:89:0a:dc:d5:36:57:37:db:c7:
83:cd:2b:c1:db:21:f4:25:ef:3b:2d:87:c3:e9:84:91:ff:b5:
68:74:4f:11:bf:4b:fd:87:b2:62:22:d5:c8:67:f5:2e:4d:e0:
12:73:1e:9f:5c:7d:71:fa:cd:9e:eb:bb:ca:ed:cb:39:87:db:
ce:10:6f:03:b8:32:55:83:d2:36:59:95:9d:54:09:f9:b2:69:
33:53:8b:e7:8d:16:62:e7:e1:2e:31:1d:70:ab:38:c9:ec:7b:
17:62:fa:e8:d6:14:0a:48:c0:1e:bd:41:9d:fe:50:d8:93:8a:
69:6d:b3:e0:ee:66:55:33:0b:a0:6f:5f:a5:fe:7a:ee:6f:c1:
97:20:ff:f9:91:46:ec:ab:e4:57:f6:a8:20:ef:9d:ac:00:f9:
6d:72:dc:f5:b0:0b:ea:ef:7d:ef:6a:66:0d:5d:13:59:8f:87:
47:eb:2b:55:ff:2f:a4:00:af:25:7f:0c:cb:91:88:eb:f9:47:
69:48:fc:f2:9d:ff:8b:e1:1e:2a:71:45:c2:cb:35:a0:63:0d:
87:87:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:20 2025 by rpki-client