Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/NnjYDdNCynvH35lMW1rIeFpND0w.roa
File: NnjYDdNCynvH35lMW1rIeFpND0w.roa (raw, json)
Hash identifier: 0b/XS5MLhswmI9xbKxwjxsPxPEv78PMoisgI9DWJZxo=
Subject key identifier: 36:78:D8:0D:D3:42:CA:7B:C7:DF:99:4C:5B:5A:C8:78:5A:4D:0F:4C
Certificate issuer: /CN=e21d5f753a8831e66a4e7524edd97229a043fceb
Certificate serial: 01856C9CC4934F052DFCD122FD399DDF6ABA
Authority key identifier: E2:1D:5F:75:3A:88:31:E6:6A:4E:75:24:ED:D9:72:29:A0:43:FC:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h1fdTqIMeZqTnUk7dlyKaBD_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/NnjYDdNCynvH35lMW1rIeFpND0w.roa
Signing time: Sun 01 Jan 2023 09:14:51 +0000
ROA not before: Sun 01 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 185.232.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c4:93:4f:05:2d:fc:d1:22:fd:39:9d:df:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21d5f753a8831e66a4e7524edd97229a043fceb
Validity
Not Before: Jan 1 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3678d80dd342ca7bc7df994c5b5ac8785a4d0f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:2d:e9:62:37:8d:cf:9a:1d:22:7b:82:80:
58:10:35:45:0f:95:49:29:ee:ba:93:99:e4:4c:52:
ee:2c:8e:b5:f0:56:24:5d:58:8a:1e:66:22:e2:fa:
c5:0c:fd:ee:d6:ce:0b:ae:4b:2a:ab:1b:24:11:ef:
fa:6a:85:04:4e:ee:48:dd:97:7d:68:73:21:2a:83:
da:f6:3f:72:c0:6f:8a:a9:55:e8:0c:82:fb:8c:1e:
cf:cc:e8:78:37:92:97:c3:53:86:e8:55:4f:45:4c:
e5:8c:e9:94:98:88:48:74:89:a6:19:2b:31:cf:9b:
13:6b:98:25:17:cf:c9:fa:15:5c:e6:a9:c4:f5:f1:
a6:10:f0:61:f2:2c:c0:df:9d:11:86:b5:98:38:d6:
a3:6a:84:5a:82:72:2f:60:31:16:b3:a4:64:c4:77:
67:0e:ea:61:33:ac:cc:75:e3:d9:1e:03:55:e4:20:
76:9f:ef:cd:72:7e:cf:33:18:e8:c2:e4:63:c6:da:
77:96:2d:47:d3:9c:5c:e5:df:3c:73:3d:1a:71:c0:
1e:3e:7b:8a:03:b7:0a:1a:b8:45:e4:0d:ad:3c:e0:
ee:88:30:01:fc:e9:89:d6:ef:8f:53:31:00:f8:a9:
39:05:e9:27:14:aa:5d:d2:e5:99:41:38:c9:1e:2c:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:D8:0D:D3:42:CA:7B:C7:DF:99:4C:5B:5A:C8:78:5A:4D:0F:4C
X509v3 Authority Key Identifier:
keyid:E2:1D:5F:75:3A:88:31:E6:6A:4E:75:24:ED:D9:72:29:A0:43:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h1fdTqIMeZqTnUk7dlyKaBD_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/NnjYDdNCynvH35lMW1rIeFpND0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/4h1fdTqIMeZqTnUk7dlyKaBD_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.41.0/24
Signature Algorithm: sha256WithRSAEncryption
79:18:98:8f:74:41:17:a4:10:33:d0:0e:4b:37:44:f2:da:36:
62:57:37:7f:21:8e:64:8e:b5:c8:37:9b:bd:4d:f2:82:28:10:
b0:94:f3:86:dc:e4:bc:e8:09:a5:7e:57:bd:73:9f:78:1a:60:
1f:f3:a2:7b:66:ff:24:89:ee:27:0a:96:50:af:50:09:c6:68:
9b:f0:80:0c:81:c9:be:7d:69:71:d4:2e:08:30:13:a0:f1:ea:
0e:b8:c8:87:79:43:b7:5d:b6:5e:f9:8b:96:c7:18:03:08:84:
e2:a2:1a:1d:7c:06:0c:bb:8f:a2:fa:e9:2c:47:c9:95:42:f8:
7c:bf:98:07:ef:0d:25:57:82:98:0b:37:db:81:7e:9c:3c:34:
19:a2:bf:18:f6:c2:b0:fd:bd:1b:44:af:42:25:4d:88:1e:9c:
46:4f:81:c5:53:77:fe:bc:11:92:85:cb:87:2f:9d:9a:6c:06:
9c:0c:c3:0a:e9:47:5f:f7:ec:d7:69:68:1c:68:e8:f4:8f:85:
2b:65:40:99:3d:1f:82:63:19:5f:7c:f0:c3:57:2a:e9:ca:28:
22:f4:10:37:d2:e5:26:84:13:52:a1:61:f7:6f:d9:53:ba:dc:
5c:05:62:ee:51:cb:08:0f:ab:bb:63:a6:58:5a:12:54:53:f4:
15:4d:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:40 2025 by rpki-client