Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/NVfSFRbL_XqrsozkQVUF_dxEis0.roa
File: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (raw, json)
Hash identifier: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=
Subject key identifier: 35:57:D2:15:16:CB:FD:7A:AB:B2:8C:E4:41:55:05:FD:DC:44:8A:CD
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 01942068546DBE6F882782DF6C19035B3805
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/NVfSFRbL_XqrsozkQVUF_dxEis0.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8395
IP address blocks: 195.170.32.0/19 maxlen: 19
2a04:dbc0::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:6d:be:6f:88:27:82:df:6c:19:03:5b:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3557d21516cbfd7aabb28ce4415505fddc448acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:14:3d:3e:b9:64:0b:f1:1a:ff:18:e5:6d:
31:b6:8c:55:44:d5:e8:47:1f:ba:aa:dc:b3:a4:9d:
19:8d:c6:49:1d:79:d0:55:90:9a:6e:a4:19:79:47:
81:3e:08:e0:b8:68:7a:c5:90:4b:ad:60:e6:36:08:
95:0f:70:d7:09:5c:60:34:4c:61:c2:43:eb:f1:e9:
12:25:b4:31:81:d8:e1:cc:cf:b4:d2:4e:b1:5c:cb:
ab:fa:88:c2:e8:38:fb:a7:84:48:df:d3:cd:d3:f1:
59:7d:37:3d:0a:82:9b:7c:23:d7:32:f1:f1:6f:fc:
35:af:50:3b:d2:b4:19:07:57:05:57:41:3d:e4:77:
b8:2a:b0:7e:92:08:94:27:0b:e1:13:25:ff:3d:0e:
83:31:61:4d:73:7b:80:30:0e:14:47:da:48:bb:ea:
df:92:c0:1b:8d:6f:31:a5:9a:f3:12:bd:d7:a4:6d:
f2:af:29:da:51:5e:d5:95:c0:a9:e8:dc:f6:87:78:
de:25:9e:4e:c9:2f:41:dd:66:ec:ee:ec:b6:01:72:
e0:c1:57:7e:69:fd:6d:04:eb:16:bd:bf:3d:1d:c2:
fd:c3:3a:66:a6:66:62:2c:1f:f4:8b:65:d2:4c:1f:
2d:d1:b6:45:82:ab:9c:64:ca:30:89:aa:16:bf:27:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:D2:15:16:CB:FD:7A:AB:B2:8C:E4:41:55:05:FD:DC:44:8A:CD
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/NVfSFRbL_XqrsozkQVUF_dxEis0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.32.0/19
IPv6:
2a04:dbc0::/30
Signature Algorithm: sha256WithRSAEncryption
62:9d:ff:35:06:68:f0:28:00:99:0f:8d:11:3c:75:b8:3c:f8:
e7:4f:25:48:47:b4:19:80:fe:e7:c8:9a:70:65:07:1e:7b:f5:
27:33:b8:c1:fe:7d:63:5b:b3:ec:1e:c3:f6:d1:47:a6:54:e8:
28:85:e7:82:61:93:6f:95:88:ea:1c:2b:d5:f3:a8:c8:c6:31:
3a:e5:09:ae:40:55:b7:e6:55:82:71:fc:7b:cd:55:af:9f:8e:
64:d0:a3:ec:bc:1e:d7:49:27:71:c8:92:7b:92:c3:90:6e:06:
13:16:f9:f5:c6:b2:2e:cc:38:ab:d1:93:ed:56:41:9a:0a:d0:
3e:5d:e1:7c:c0:a0:ed:48:05:1e:f3:d0:f2:1e:72:b6:38:12:
f2:5a:01:ff:f3:61:4a:d9:0f:ec:f3:30:c0:f2:a3:c9:86:f0:
51:fa:08:e6:16:51:09:e2:2a:12:1a:e2:34:16:b7:c8:8e:0a:
0f:7b:b8:a8:fc:b8:50:a7:82:2d:13:44:6a:17:91:89:b0:0f:
1c:c9:54:1f:03:cb:01:43:ee:c4:87:32:3a:1b:bb:80:4d:df:
77:6e:e5:12:87:2e:18:fc:07:fc:47:27:cb:fe:aa:67:7d:72:
fe:60:e1:30:3b:97:fd:8f:b2:94:f1:ea:cf:44:6e:5d:72:07:
1b:49:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:27:15 2025 by rpki-client