Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/NhRP3hCEe_1gANLjmn6NbGS38hU.roa
File: NhRP3hCEe_1gANLjmn6NbGS38hU.roa (raw, json)
Hash identifier: FG6KMEBS9wQjym6g8CurK2knc7/ReLzbS6uyYTt7bJc=
Subject key identifier: 36:14:4F:DE:10:84:7B:FD:60:00:D2:E3:9A:7E:8D:6C:64:B7:F2:15
Certificate issuer: /CN=9766354188ee68dd038f8b90a6574cce8e95add3
Certificate serial: EE66CA
Authority key identifier: 97:66:35:41:88:EE:68:DD:03:8F:8B:90:A6:57:4C:CE:8E:95:AD:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/NhRP3hCEe_1gANLjmn6NbGS38hU.roa
Signing time: Wed 09 Feb 2022 12:08:15 +0000
ROA not before: Wed 09 Feb 2022 12:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15623882 (0xee66ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9766354188ee68dd038f8b90a6574cce8e95add3
Validity
Not Before: Feb 9 12:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36144fde10847bfd6000d2e39a7e8d6c64b7f215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:10:4b:84:0a:07:3b:e1:e6:e9:c5:7f:41:
09:93:31:ac:63:82:3a:8f:e5:91:1b:3f:05:82:18:
a0:ec:50:ff:50:80:63:62:70:a7:d7:84:e8:df:b6:
ae:36:37:bf:99:ee:12:f9:07:35:4e:94:6b:f8:5f:
cd:97:f2:f1:7a:40:1b:0b:9e:1a:8c:85:df:69:4e:
4c:99:bf:80:2e:77:78:e3:c9:b3:b1:fe:d4:27:69:
48:3c:58:53:6f:d9:b2:78:35:b3:84:68:fc:c1:29:
9e:91:b5:b4:83:c8:cd:3b:2f:17:a4:4e:51:73:22:
30:4d:91:5e:69:c1:9f:4a:6b:b4:d2:13:f6:46:60:
85:2a:26:aa:31:34:f8:43:eb:9e:86:c5:06:b6:95:
18:95:e1:0f:74:62:22:36:3b:dc:65:c2:dc:38:c1:
4c:06:ef:bd:0e:9f:b0:42:26:92:94:60:58:cf:60:
e6:4e:90:ce:08:ba:0e:45:44:cd:e9:b6:69:b2:ad:
1e:2c:67:f8:5b:8f:79:90:37:d4:05:80:42:48:ac:
fc:cf:f7:1a:c8:90:ff:e2:ba:fa:12:3c:14:b8:72:
1c:82:ce:cb:e1:e7:73:bc:ef:ce:52:ec:63:34:a4:
4b:0e:31:68:83:c0:87:e6:8b:cb:bf:b3:1b:a4:f6:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:4F:DE:10:84:7B:FD:60:00:D2:E3:9A:7E:8D:6C:64:B7:F2:15
X509v3 Authority Key Identifier:
keyid:97:66:35:41:88:EE:68:DD:03:8F:8B:90:A6:57:4C:CE:8E:95:AD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/NhRP3hCEe_1gANLjmn6NbGS38hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f58645-00ae-43e2-a4df-015cb0b82d4c/1/l2Y1QYjuaN0Dj4uQpldMzo6VrdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
60:bc:77:d3:9d:d0:88:42:ba:bd:4d:12:91:32:cc:6e:ed:cf:
9b:83:e6:6f:ff:60:c9:a3:b9:ce:7a:bd:20:d5:cf:7b:f7:36:
3a:3f:9e:f9:3d:49:da:e3:1d:46:de:3b:05:03:81:47:29:80:
88:05:7f:0e:a1:7d:6f:b2:3b:18:f5:40:20:a5:06:87:dd:65:
79:68:3a:36:5d:50:bf:90:e0:d3:b1:aa:ef:64:bd:92:fd:ca:
46:ed:75:94:13:cd:2b:b2:6f:c4:f6:4f:7a:e7:62:9e:f7:c7:
86:07:64:cd:61:38:e3:31:f8:23:95:43:fb:15:5b:a6:b8:75:
7b:cd:7d:44:e0:e5:d2:60:af:93:94:3a:83:63:53:23:70:da:
1e:52:33:46:49:5c:55:ee:19:1b:b7:01:6e:82:c6:dc:47:00:
45:5b:c4:5b:5a:90:ab:42:1d:f3:51:2e:9d:a7:22:e7:d1:20:
75:ae:87:e1:aa:6b:bb:4f:32:f9:1d:b1:1b:04:d3:83:8b:33:
57:16:38:a5:a0:77:f9:6c:b4:0a:d6:36:df:48:50:81:e7:80:
7f:93:17:b7:c9:82:04:9a:0e:9e:23:b9:1a:44:0c:65:d3:fc:
af:03:8e:24:30:09:fa:21:08:2c:f8:1a:c1:9b:e3:1f:b3:b6:
f2:a7:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:14 2025 by rpki-client