Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/TvNorktNlarz-Fx5A-JvtYbjN1o.roa
File: TvNorktNlarz-Fx5A-JvtYbjN1o.roa (raw, json)
Hash identifier: Jt3Gta94f81hrjgeEGTgQ09/pyVEiIlyWVZAsZeXQYU=
Subject key identifier: 4E:F3:68:AE:4B:4D:95:AA:F3:F8:5C:79:03:E2:6F:B5:86:E3:37:5A
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 019422FC3ABD6EF6590B4EFFEDA2A28626E8
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/TvNorktNlarz-Fx5A-JvtYbjN1o.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51738
IP address blocks: 195.162.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3a:bd:6e:f6:59:0b:4e:ff:ed:a2:a2:86:26:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef368ae4b4d95aaf3f85c7903e26fb586e3375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:fe:a3:a6:9f:c5:63:cb:e3:c6:9b:11:84:
3d:37:be:61:2c:35:14:3b:4c:df:a6:2f:f5:fb:48:
24:01:1e:33:57:86:48:70:e1:03:fc:68:f0:ed:13:
12:26:cf:d4:42:e6:2c:2f:0c:0b:b5:98:5c:9e:72:
7f:86:3d:ee:da:a2:ca:a4:00:15:0d:9c:7f:c9:f0:
c0:83:49:47:de:a9:2c:ce:21:f4:d3:37:86:b2:54:
8a:68:ec:3b:42:98:29:26:f2:eb:56:81:02:e6:5f:
58:25:a2:ce:a9:36:49:60:6e:e3:d8:df:aa:b5:8b:
cf:90:1b:4e:e7:cb:cd:d3:9e:77:11:0e:a9:04:f8:
db:d8:31:2a:e5:2e:15:65:a1:11:1e:c3:04:04:07:
65:dd:02:54:88:fb:b8:97:c5:9c:c9:87:27:07:38:
65:70:ab:b5:a1:ef:fd:ee:bf:24:82:97:58:d4:9c:
03:17:30:b5:bd:c8:0a:fe:d1:b6:3a:dd:61:14:9e:
69:86:e0:ca:2a:ac:c8:d6:08:01:78:06:aa:7b:32:
05:bf:0d:e0:ed:ca:f1:66:77:1f:9b:e9:ea:e3:35:
fd:76:e3:62:a3:4b:8d:f6:bb:f2:bc:3d:42:2b:c2:
5a:91:c2:46:02:15:45:90:bc:06:0b:37:62:bb:b9:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:68:AE:4B:4D:95:AA:F3:F8:5C:79:03:E2:6F:B5:86:E3:37:5A
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/TvNorktNlarz-Fx5A-JvtYbjN1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.64.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:49:07:d8:af:c8:41:39:62:a6:5c:5e:b6:f0:3e:0e:13:67:
6e:f8:4a:1c:16:bf:ee:8e:5a:b4:e9:ae:96:6e:22:04:60:43:
43:db:4a:37:dc:34:49:de:78:c7:ad:8a:f2:cf:e4:70:2d:23:
d8:57:89:d0:23:1e:3a:7f:63:ec:e7:15:4b:a0:57:6b:d5:22:
b2:db:84:ef:5c:0b:e6:9c:a0:93:8c:3b:dc:9d:2e:49:1b:43:
36:da:50:f4:cb:7c:ee:4f:ee:d5:8d:82:f3:eb:08:cc:09:c9:
e4:c7:9f:e5:ec:09:2a:e1:0a:00:d7:d1:f9:ab:eb:93:fb:38:
dd:f4:7f:e6:04:52:7d:89:33:b2:7c:8d:49:fb:86:56:ae:d7:
a6:02:56:8e:83:50:87:59:46:56:96:f8:e6:db:b7:52:32:27:
5f:7b:7d:bb:17:23:bb:33:b4:74:37:64:90:69:84:ce:b7:aa:
28:f1:dc:af:1e:8d:4a:e3:90:5f:29:b0:d0:7b:da:e9:a4:93:
77:5e:cc:98:32:c7:40:1b:49:5d:97:a6:d9:06:bc:2e:83:3c:
d3:7a:78:cb:d2:a0:c8:94:37:64:c2:43:3e:d8:6e:f2:0e:7b:
55:1e:af:8e:e3:a4:fd:e6:3b:e3:db:7b:00:88:b0:a9:7f:84:
1a:af:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:13 2025 by rpki-client