Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/NhUJTP4siulDb09isFvddEFGqRM.roa
File: NhUJTP4siulDb09isFvddEFGqRM.roa (raw, json)
Hash identifier: usPuwuA0FCxRGyhZg+8A0ZWw0VMTWBqY/g1XTLoSLVk=
Subject key identifier: 36:15:09:4C:FE:2C:8A:E9:43:6F:4F:62:B0:5B:DD:74:41:46:A9:13
Certificate issuer: /CN=56e3e8f13bc60fd6851dd705f327ca2aa8247739
Certificate serial: 018571D791ED66CE4FC866255F3F24DCFEB9
Authority key identifier: 56:E3:E8:F1:3B:C6:0F:D6:85:1D:D7:05:F3:27:CA:2A:A8:24:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuPo8TvGD9aFHdcF8yfKKqgkdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/NhUJTP4siulDb09isFvddEFGqRM.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8930
IP address blocks: 194.102.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:91:ed:66:ce:4f:c8:66:25:5f:3f:24:dc:fe:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e3e8f13bc60fd6851dd705f327ca2aa8247739
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3615094cfe2c8ae9436f4f62b05bdd744146a913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:5b:32:a0:80:44:c9:a0:5d:d3:39:44:50:
f7:88:29:6d:f0:39:ab:ec:5a:4d:4e:44:df:b2:fc:
1f:75:8e:81:5b:6d:e3:42:42:41:8a:fc:83:28:cf:
b6:a6:60:26:f7:17:68:93:dc:52:51:70:ec:68:c2:
ff:80:1d:6f:bb:19:05:5d:d6:53:8a:be:cc:bc:3c:
2e:a8:93:b1:ef:7f:af:c6:6e:34:6f:fd:e5:3c:42:
32:2b:68:77:09:d1:c3:19:34:83:a2:74:f2:5c:9c:
74:27:13:7b:84:a4:43:ae:d1:d3:03:3e:03:49:3c:
9a:63:a0:7c:8a:88:87:34:e1:7a:5e:44:52:f3:77:
ee:0e:fc:cd:e1:6b:cd:a2:ff:71:fd:6d:94:fb:5e:
be:54:5b:44:07:90:11:56:92:9a:a5:9c:14:b1:2f:
a1:98:94:b2:78:57:59:83:dc:6c:5f:90:3a:03:b9:
31:a1:41:e4:10:00:3e:5e:9a:51:f0:9b:24:18:49:
46:2c:62:f3:a4:f8:02:a9:e3:d7:32:58:15:4f:63:
dd:8e:be:7d:6d:97:2e:fd:5c:ea:96:08:d0:5b:f6:
aa:a3:ad:b3:44:1c:08:f4:a6:08:9b:d0:1b:48:6a:
43:98:e8:e6:c0:e4:6a:8a:7f:17:24:42:12:81:88:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:09:4C:FE:2C:8A:E9:43:6F:4F:62:B0:5B:DD:74:41:46:A9:13
X509v3 Authority Key Identifier:
keyid:56:E3:E8:F1:3B:C6:0F:D6:85:1D:D7:05:F3:27:CA:2A:A8:24:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuPo8TvGD9aFHdcF8yfKKqgkdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/NhUJTP4siulDb09isFvddEFGqRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/VuPo8TvGD9aFHdcF8yfKKqgkdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6f:1c:74:02:fe:f8:bc:51:78:6e:ea:4d:cc:5b:23:6c:8f:
cb:6f:f1:bd:af:f8:88:4f:86:71:ef:a3:cd:28:32:03:d4:61:
de:6d:06:32:14:69:93:28:4c:63:85:51:85:79:bf:e8:c5:d8:
4c:de:af:91:a2:e3:e9:43:ff:d6:b9:cd:5b:b1:04:f4:94:f6:
98:d5:39:1f:1f:e1:d8:af:ad:ba:a2:8c:5b:06:59:4d:e1:d7:
6b:71:d5:3d:24:ce:84:97:69:fd:21:a2:0b:cf:ce:60:70:c5:
f8:68:56:0a:fa:6c:ee:38:10:4a:89:15:2c:c6:71:e7:45:6e:
dc:a4:b6:7d:93:b1:f2:3e:a4:b6:58:f2:32:a0:ea:86:a9:30:
cc:47:62:b4:78:6d:47:ce:85:2e:04:88:f9:3b:54:e5:8f:59:
1c:c1:1e:ef:0a:97:b4:69:72:4b:0e:fb:3e:c7:6a:1e:e6:eb:
04:f1:67:bc:3d:3c:90:27:33:8e:0b:6d:33:2b:5a:76:ef:6e:
0c:de:f3:4c:0f:28:d8:02:3d:ea:35:9c:ed:c9:a7:63:c6:e9:
77:9c:8b:bf:2d:02:2c:65:81:e8:cb:e3:02:d8:8f:93:e7:40:
d0:51:97:96:33:ef:b2:6d:a3:54:fc:f8:48:79:6c:07:5f:9b:
57:4a:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:39 2025 by rpki-client