Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NTl362DtEMNd5AeaP2yD17mqbRU.roa
File: NTl362DtEMNd5AeaP2yD17mqbRU.roa (raw, json)
Hash identifier: KQYbV7BbZK2AU6qzOgAp4YbSGXdFS+ktOYyqxxJFRc4=
Subject key identifier: 35:39:77:EB:60:ED:10:C3:5D:E4:07:9A:3F:6C:83:D7:B9:AA:6D:15
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0193BACAA40D19D510E72FFCF05DB08C77C6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NTl362DtEMNd5AeaP2yD17mqbRU.roa
Signing time: Thu 12 Dec 2024 12:14:22 +0000
ROA not before: Thu 12 Dec 2024 12:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 185.254.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:ca:a4:0d:19:d5:10:e7:2f:fc:f0:5d:b0:8c:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Dec 12 12:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=353977eb60ed10c35de4079a3f6c83d7b9aa6d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:41:8b:12:6d:43:61:72:2d:c8:06:29:46:
9f:fe:53:21:e1:14:69:3d:7b:da:c2:fb:65:b9:45:
11:56:e7:ea:8f:25:e2:77:30:0a:34:cb:ff:22:1a:
f7:8e:78:bf:c6:1a:cf:52:b5:57:f8:21:ed:ba:2c:
14:35:ae:24:3d:4e:31:48:ad:8c:00:0a:ef:5d:1e:
40:b6:d8:a7:d2:3c:17:7b:d8:4b:16:7c:94:a3:58:
81:10:2f:fe:fd:3e:56:0c:f2:ab:5f:09:fe:2f:c4:
3f:cf:01:6d:1b:bf:dc:64:50:ad:43:f7:61:a6:93:
8c:40:d8:e4:78:a1:d9:78:9c:e8:b7:46:77:a4:42:
43:e0:98:9e:53:d1:be:67:d0:cd:32:61:be:55:b6:
7a:05:89:d9:42:68:ca:c9:d0:9d:70:46:50:90:ab:
db:ab:52:73:07:4f:db:00:a0:a6:b9:2f:e0:ba:17:
d4:33:c6:04:c0:9d:04:7b:65:6d:4a:0d:af:72:db:
47:43:40:f3:f8:cb:2c:49:89:85:84:09:57:99:65:
8c:c5:92:c9:e2:6e:0f:f6:13:f6:c8:c9:a6:89:c1:
2c:b9:fa:b2:3b:5a:85:cd:d2:47:8f:10:8b:38:63:
ab:00:50:9b:d1:1b:b3:72:2d:8a:5f:6b:00:53:df:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:77:EB:60:ED:10:C3:5D:E4:07:9A:3F:6C:83:D7:B9:AA:6D:15
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NTl362DtEMNd5AeaP2yD17mqbRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f7:b0:3f:d2:0d:8f:44:28:89:e8:ec:e2:21:c8:5d:15:c8:
25:7e:aa:e3:68:b7:ba:cd:df:07:34:2d:66:fa:39:3f:5c:9a:
06:00:e1:39:d0:45:ef:9f:78:9e:c2:72:b6:99:6d:bf:ef:f7:
5a:18:2e:67:fb:aa:bb:c3:3b:42:26:f2:a0:de:2e:c0:59:84:
69:15:4e:8b:77:f0:f0:a9:41:18:60:ed:a0:aa:af:e9:24:9a:
8d:b4:e2:c3:c7:51:8a:36:f2:73:7e:43:39:80:2a:4a:6b:68:
5c:da:54:08:3f:84:28:c0:06:f4:86:81:2a:d4:22:53:81:e5:
1e:43:2b:bc:3c:86:1d:47:7f:69:b2:dc:04:90:f1:8c:79:34:
89:9f:3d:45:62:7c:ab:22:80:51:f8:2c:51:09:da:2a:f1:33:
56:0b:f7:38:c8:da:cf:2b:69:44:a8:31:b8:16:98:d2:01:79:
e0:3f:80:54:f1:1f:70:1c:7a:aa:52:42:b3:6e:75:b7:11:17:
9c:d8:81:a4:c2:5e:36:3c:3a:4e:3c:f0:64:28:e9:63:b7:af:
f0:79:8c:b7:ca:37:bd:26:da:a1:ad:27:24:b4:58:e9:3f:65:
cc:d0:e0:2e:1f:1b:be:a8:e7:86:64:8a:13:22:22:28:01:9d:
b8:80:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:09 2025 by rpki-client