Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/NWL-eu5S_3GsxjW93sdPL5hRZUg.roa
File: NWL-eu5S_3GsxjW93sdPL5hRZUg.roa (raw, json)
Hash identifier: NNm9JwRqrKtPUvj5bABuoe0RABH7jKOFb1pZIFDCjnA=
Subject key identifier: 35:62:FE:7A:EE:52:FF:71:AC:C6:35:BD:DE:C7:4F:2F:98:51:65:48
Certificate issuer: /CN=6073b442619811f9069cffd0e42779a5346630c6
Certificate serial: BECA
Authority key identifier: 60:73:B4:42:61:98:11:F9:06:9C:FF:D0:E4:27:79:A5:34:66:30:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/NWL-eu5S_3GsxjW93sdPL5hRZUg.roa
Signing time: Tue 12 Apr 2022 07:45:27 +0000
ROA not before: Tue 12 Apr 2022 07:45:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15348
IP address blocks: 195.95.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48842 (0xbeca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6073b442619811f9069cffd0e42779a5346630c6
Validity
Not Before: Apr 12 07:45:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3562fe7aee52ff71acc635bddec74f2f98516548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:1d:25:b6:30:3f:ed:d7:d1:ff:60:3e:2d:
d5:b4:e2:10:15:1f:bf:93:7c:d4:12:b5:03:38:fd:
d4:25:4a:c0:bd:16:a0:5d:39:fa:df:c5:41:09:a7:
71:2a:00:14:01:87:01:cf:31:f1:93:af:63:bd:32:
fb:82:08:be:cd:4b:97:7a:b0:55:cb:07:e7:c5:58:
81:1b:ec:ae:18:de:d0:c1:ba:4a:e4:f2:5c:1a:41:
4b:7a:e8:bd:65:26:42:2b:4e:25:36:9b:a3:ff:ee:
81:3c:f2:00:06:4f:53:88:6a:bf:7e:e2:9c:45:9e:
e3:6d:16:54:1c:e7:c4:85:71:b2:f3:e6:47:14:bd:
c9:52:60:7e:4c:75:7e:3a:d7:c3:ed:60:16:c1:3e:
fd:46:58:e1:e1:2b:63:e0:90:0f:4d:f4:fe:19:07:
a5:33:51:89:63:2b:d3:63:fc:36:44:e6:6a:a0:1a:
bf:42:3b:a8:c5:d4:16:af:1c:8b:82:2a:17:42:e9:
1c:4c:3e:b6:53:f3:e9:61:7a:37:ef:3a:13:e9:c7:
2f:54:52:a9:97:34:f8:f6:35:b8:8b:72:f4:53:7c:
17:46:1d:89:c6:12:0b:84:46:f7:d5:35:36:34:6d:
d9:97:09:5c:a6:df:d2:fa:85:de:d4:ba:bc:41:97:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:62:FE:7A:EE:52:FF:71:AC:C6:35:BD:DE:C7:4F:2F:98:51:65:48
X509v3 Authority Key Identifier:
keyid:60:73:B4:42:61:98:11:F9:06:9C:FF:D0:E4:27:79:A5:34:66:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/NWL-eu5S_3GsxjW93sdPL5hRZUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.150.0/24
Signature Algorithm: sha256WithRSAEncryption
87:75:fd:38:d8:f3:59:86:c4:4a:d0:86:b9:2f:99:24:6f:01:
36:d2:3b:bd:68:84:15:54:47:b6:6b:7a:c3:00:4e:76:9d:6a:
b3:23:ea:4e:f6:12:0a:a2:89:d6:84:2f:ce:ca:3f:41:a1:31:
2f:60:b1:fd:77:25:13:09:63:7b:2a:5f:b8:bb:72:b1:77:6a:
3b:45:d7:b3:3f:f7:5c:23:9e:fa:b1:82:a5:28:e5:aa:ef:b9:
12:37:8f:27:fe:d0:5f:99:27:ec:34:7e:eb:e4:de:7e:6d:8d:
a4:da:fe:b9:40:cc:eb:52:c7:44:c1:6e:54:48:07:86:2d:fd:
eb:b1:ff:93:d4:49:63:22:02:e4:b3:df:59:09:07:8d:28:71:
4a:05:b8:f5:df:89:3a:66:7f:ed:41:39:51:37:8c:5c:bd:1f:
41:4d:24:e5:1b:75:ea:51:ab:75:3a:e4:7e:24:b6:e1:58:97:
ea:10:47:da:58:d2:fb:f2:49:ab:7b:28:ab:47:a9:a5:0a:58:
38:36:45:0e:b0:05:9a:8a:02:e5:3c:2a:e8:9c:53:11:05:f3:
9d:e6:ec:10:23:ef:a8:16:34:d0:a7:54:61:d3:1a:b3:48:a5:
69:04:5b:5b:de:80:54:32:b7:3d:05:41:13:43:a2:11:1e:5b:
f8:af:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:51 2024 by rpki-client on console-ams.rpki-client.org