Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/NlHy-W1FLQ01ZfYEW_-W4ybYtz4.roa
File: NlHy-W1FLQ01ZfYEW_-W4ybYtz4.roa (raw, json)
Hash identifier: RyKgKpo9zpLbdR01GI5At0ZUm0U0wplfyM8dnY6omfA=
Subject key identifier: 36:51:F2:F9:6D:45:2D:0D:35:65:F6:04:5B:FF:96:E3:26:D8:B7:3E
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 0193D9F81287683C35BA1731B984B9FB01FB
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/NlHy-W1FLQ01ZfYEW_-W4ybYtz4.roa
Signing time: Wed 18 Dec 2024 13:32:13 +0000
ROA not before: Wed 18 Dec 2024 13:32:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57304
IP address blocks: 81.27.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:f8:12:87:68:3c:35:ba:17:31:b9:84:b9:fb:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Dec 18 13:32:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3651f2f96d452d0d3565f6045bff96e326d8b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:83:48:a9:6e:18:8b:17:15:c2:64:47:9f:
41:67:33:3c:84:a2:95:e4:8b:32:54:2b:f8:c2:0f:
9d:bd:e6:bb:6e:97:6e:54:2c:91:4b:56:89:e0:d1:
ef:05:a0:d2:d3:7f:cf:d3:65:b4:22:4c:05:84:af:
28:e7:43:81:59:b3:c2:0b:10:fc:83:3b:e4:25:9a:
b0:4c:cf:04:40:d5:bd:75:0d:75:a9:3c:99:61:56:
9e:2d:46:b0:44:9f:c8:0a:57:e9:9f:b1:e3:67:8d:
3c:1a:d8:a4:f5:d5:44:c4:f5:ba:c0:c6:a9:a9:38:
29:e3:b8:d8:97:45:89:cd:50:a8:6a:0e:dc:7e:d7:
70:31:3a:c7:6e:24:c6:01:67:1a:3f:e4:c2:e5:1e:
f4:ab:ca:38:ac:fd:13:e2:d9:a1:af:28:47:84:e0:
c8:e7:8d:c5:b3:95:82:1f:33:9a:09:3c:1b:ca:1a:
66:7b:a1:a1:1e:7f:52:5c:99:bc:d5:aa:74:97:fb:
38:81:43:fa:d8:e5:47:aa:23:14:f4:03:db:9e:13:
a0:53:c2:21:9b:f7:6b:64:bb:07:85:4d:7a:bf:d0:
f5:c0:27:fb:ac:fe:56:89:44:ca:fc:5a:ba:2e:73:
7a:49:02:30:37:6e:58:88:34:3b:09:a9:eb:0c:48:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:51:F2:F9:6D:45:2D:0D:35:65:F6:04:5B:FF:96:E3:26:D8:B7:3E
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/NlHy-W1FLQ01ZfYEW_-W4ybYtz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.248.0/24
Signature Algorithm: sha256WithRSAEncryption
46:de:17:56:53:cb:e3:7b:9b:6a:ab:6e:39:6c:82:76:d0:72:
29:23:34:9a:10:83:8e:de:2d:dc:51:cf:fb:83:81:52:35:9e:
6e:1b:b2:ee:11:28:33:e1:e6:df:dc:3d:2f:7f:22:f1:00:d5:
14:eb:64:78:eb:20:b9:67:33:50:0f:6a:aa:81:12:7f:53:d3:
e5:d7:68:e0:d1:81:eb:7e:1f:2b:25:86:9c:82:be:df:57:1f:
55:aa:7f:45:89:d1:06:7d:a2:6d:70:4c:4b:b1:24:d3:18:2a:
8a:ba:3f:95:5c:10:26:b8:75:ba:db:36:c7:16:89:48:95:26:
2c:cc:6b:ee:36:15:0a:78:89:75:13:bf:56:e3:09:63:bc:d3:
42:a7:4e:51:57:7c:02:73:3d:1a:92:b4:2d:f6:8c:64:7c:bb:
4d:80:20:c1:31:8c:2d:db:1a:2b:49:24:67:75:b4:97:7b:1c:
d2:a4:58:a0:9d:45:9a:b2:c4:22:07:79:ed:34:da:37:5e:77:
b5:40:24:64:8b:b4:6b:fb:3e:25:b9:86:a7:7e:3b:db:79:9b:
4c:f6:23:93:dc:4b:3f:3a:f4:ae:86:00:37:fb:d0:dd:bb:3b:
ae:85:64:09:a7:c0:b1:7a:1a:ff:59:ba:b0:d2:4e:a1:79:10:
e4:09:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:29 2025 by rpki-client