Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/Nv-XLPUDXQ9IGFqijEbV5NUBwug.roa
File: Nv-XLPUDXQ9IGFqijEbV5NUBwug.roa (raw, json)
Hash identifier: YmS1638MFgisNgUjjLCDg5XvomlJuL3xbrqQq5pEG+E=
Subject key identifier: 36:FF:97:2C:F5:03:5D:0F:48:18:5A:A2:8C:46:D5:E4:D5:01:C2:E8
Certificate issuer: /CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Certificate serial: 01876FA52C382563F1C9CBD686546F436F25
Authority key identifier: C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/Nv-XLPUDXQ9IGFqijEbV5NUBwug.roa
Signing time: Tue 11 Apr 2023 09:28:28 +0000
ROA not before: Tue 11 Apr 2023 09:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3124
IP address blocks: 194.48.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:a5:2c:38:25:63:f1:c9:cb:d6:86:54:6f:43:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Validity
Not Before: Apr 11 09:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36ff972cf5035d0f48185aa28c46d5e4d501c2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:44:da:a2:c9:55:c7:7c:81:bc:34:e6:8b:
6d:6a:ed:53:c1:8d:1e:db:26:e7:5b:c8:30:3c:55:
8d:da:42:e7:1a:2f:e5:73:23:0a:47:df:0b:dd:7b:
e4:d8:b4:76:87:5b:8e:20:d6:3e:3c:23:e0:a5:57:
c9:b5:54:ab:7e:d4:77:dc:82:1f:27:c8:0c:b8:f8:
a5:ac:f1:38:07:cf:a2:7b:20:f8:13:ef:6a:68:ef:
bf:54:7a:5c:76:48:dd:fe:7f:77:88:c6:49:19:65:
89:c9:cb:ce:c0:6d:38:cf:05:eb:53:11:1f:e8:25:
eb:fe:4c:dd:c9:a3:95:24:71:64:d7:58:5e:7d:97:
0d:f7:38:75:a8:3e:e8:ef:4c:ab:81:83:28:34:04:
52:fa:8d:d7:b9:6e:9e:16:bd:10:76:01:5b:40:c8:
46:b6:a3:c9:44:a8:87:02:d6:28:7c:5f:f0:d4:be:
91:01:7d:4e:21:74:be:de:11:47:52:df:52:c3:c4:
95:12:03:a5:9d:53:44:ba:16:a8:d8:d5:bc:c4:55:
44:ef:2c:1e:49:cd:61:4b:e1:57:8b:dc:67:1e:66:
ff:a6:63:95:bb:0b:b2:5d:1e:00:88:e7:13:bf:aa:
d7:69:ee:bd:c6:12:54:b1:05:5d:41:e8:8b:02:3e:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FF:97:2C:F5:03:5D:0F:48:18:5A:A2:8C:46:D5:E4:D5:01:C2:E8
X509v3 Authority Key Identifier:
keyid:C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/Nv-XLPUDXQ9IGFqijEbV5NUBwug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/yaNv36QcdGnOc9yLvs6UYty4yCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:fb:75:b6:0f:ed:54:86:19:08:97:dc:52:af:62:5b:88:d6:
e6:82:9c:ca:9b:b6:bb:90:6d:f0:6f:75:7e:9e:6d:e9:7d:78:
86:ba:30:8d:84:70:4b:6e:56:c3:98:80:ef:5f:0c:25:52:b2:
eb:7a:c2:f0:ba:7b:3a:2e:4e:21:a1:1e:b9:4f:8a:14:78:b9:
99:1f:b4:de:d8:a9:ec:5a:1b:ec:ea:3a:eb:6b:39:e4:1c:fd:
04:87:1a:2c:e5:1e:ab:ed:d2:4a:6e:3c:c7:09:6d:db:6a:dc:
b7:ae:45:5c:b8:22:b0:3e:76:29:17:7c:b8:f1:1a:88:ee:23:
08:a0:9d:74:6d:ae:36:3a:cc:d7:bc:d2:15:bb:72:23:25:96:
d5:6e:ce:ac:f5:50:dd:28:31:d7:4a:b6:6e:7d:86:dc:55:76:
81:be:ec:27:6b:1b:24:7c:e0:14:81:ca:ce:a0:68:33:2d:c2:
03:1e:e0:f5:b0:61:66:7c:f6:6c:2b:ca:43:0c:3f:bc:a1:b4:
3e:94:c1:9a:a3:6b:4a:48:aa:3c:50:45:e8:58:67:b5:46:8a:
21:4f:1e:fc:c6:1c:9b:c2:04:98:79:92:c4:c3:53:f7:48:05:
24:d3:8e:63:84:30:92:73:7a:02:93:ca:01:27:85:cf:d4:88:
49:7f:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-fra.rpki-client.org