Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/NuSZqLNGVpIanAzburbiaNPYC6M.roa
File: NuSZqLNGVpIanAzburbiaNPYC6M.roa (raw, json)
Hash identifier: LCJKepA9KZFnuGPiylRNg6BfVB07DuYQwyHA/jJ/Zjk=
Subject key identifier: 36:E4:99:A8:B3:46:56:92:1A:9C:0C:DB:BA:B6:E2:68:D3:D8:0B:A3
Certificate issuer: /CN=a5915bc8a982fe61eb4aed5418323288329504d7
Certificate serial: 018572BA693546A5295B7E3EC880E71039BB
Authority key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/NuSZqLNGVpIanAzburbiaNPYC6M.roa
Signing time: Mon 02 Jan 2023 13:44:57 +0000
ROA not before: Mon 02 Jan 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48669
IP address blocks: 195.225.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:69:35:46:a5:29:5b:7e:3e:c8:80:e7:10:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5915bc8a982fe61eb4aed5418323288329504d7
Validity
Not Before: Jan 2 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e499a8b34656921a9c0cdbbab6e268d3d80ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:eb:18:48:a7:ae:5c:dd:e3:03:2e:82:6f:
33:bd:64:e2:57:ad:32:d7:8a:75:c4:54:26:cf:07:
f3:e5:0f:61:e9:50:b9:bc:b2:f0:82:39:a8:ad:22:
69:f6:f7:75:fe:69:a3:0f:60:4c:64:82:78:99:b4:
a0:d2:23:09:a1:ac:ee:47:19:38:f9:5b:cc:5f:ab:
83:5b:42:f1:58:84:ef:2b:f5:2a:92:48:d5:9b:92:
f8:a5:f0:81:28:fc:20:8d:02:e4:78:0c:c2:b4:31:
2e:73:80:53:67:b7:cb:f2:b7:30:88:27:2c:b0:d9:
01:54:88:bb:97:17:26:be:42:a6:dc:26:3d:9a:4c:
06:7c:2b:4f:f4:cd:36:16:6c:0b:ef:c5:e4:27:4b:
36:34:15:83:79:68:d9:79:78:ef:2f:aa:75:50:7d:
f0:74:ea:25:78:2e:ce:c6:41:3e:d8:d9:4c:d8:5e:
02:51:9a:56:c4:a2:e2:48:65:85:51:f4:13:3b:ef:
e1:9b:42:4c:d7:91:83:f7:f4:ec:41:c7:1c:a7:a3:
45:c1:a8:00:9c:7a:c1:a5:75:eb:66:8b:2d:09:4d:
4b:35:42:82:60:2c:63:d1:3e:4e:0e:83:7a:48:1e:
b2:0d:02:96:ad:ef:90:5f:b7:3a:43:e1:45:43:04:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:99:A8:B3:46:56:92:1A:9C:0C:DB:BA:B6:E2:68:D3:D8:0B:A3
X509v3 Authority Key Identifier:
keyid:A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/NuSZqLNGVpIanAzburbiaNPYC6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c5:9b:62:0c:20:88:04:05:8c:4d:eb:81:29:e1:4a:b0:51:
1f:6e:22:38:fd:c2:f9:86:a2:b8:72:bc:67:22:a4:c7:72:cf:
36:7d:d9:eb:a7:f5:bb:88:dd:14:75:88:07:90:17:9f:85:18:
5f:d3:a1:ea:ce:2f:df:c9:a0:03:8c:d1:cb:b2:7f:69:e0:40:
f0:b0:9d:d1:c9:5a:41:ee:d4:74:4b:ea:7a:a3:da:cf:68:e8:
68:a3:91:29:7b:16:b6:aa:23:bc:be:5d:d6:9b:2d:df:60:a4:
25:1b:5c:01:b0:58:00:13:a5:41:3e:9e:75:2d:ae:8f:0b:0f:
b3:58:9f:58:2b:9e:8c:30:ed:fc:c0:06:96:35:44:aa:70:de:
e2:5b:ec:7e:38:58:a8:f1:3e:aa:88:40:02:59:4b:49:f8:bb:
ce:a3:f4:be:e8:44:19:76:cc:4e:bc:31:32:ca:5a:61:3b:5e:
9a:68:fc:22:06:0b:bb:a3:bf:f7:87:73:8d:53:74:0d:51:b6:
f8:60:8f:65:71:df:b6:b7:11:54:f7:35:c6:5c:17:8a:86:c5:
0e:b9:6f:b8:4a:ae:5a:fe:4b:5e:86:8a:da:85:15:0a:dc:38:
ee:e4:63:9c:da:9e:8f:17:b9:b9:0d:0f:ad:43:08:0a:e6:ec:
a5:7f:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:32 2024 by rpki-client on console-ams.rpki-client.org