Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa
File: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (raw, json)
Hash identifier: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=
Subject key identifier: 37:1E:44:98:9A:E7:0A:DA:6E:E0:A0:4C:B0:95:BE:25:39:DB:D7:A7
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 01942144555E293DB603D127411654C9CF18
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.28.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:55:5e:29:3d:b6:03:d1:27:41:16:54:c9:cf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=371e44989ae70ada6ee0a04cb095be2539dbd7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:04:76:2a:fc:b0:52:4c:26:8b:66:49:42:
d0:57:a3:77:c0:27:bd:1f:cc:16:52:b7:0a:3e:b9:
e0:4e:80:ef:16:0e:28:e5:cc:34:e6:98:75:c1:24:
ef:85:b4:f4:61:c0:53:e3:09:21:8a:c7:97:44:28:
d5:af:60:b2:23:a6:3b:d7:ea:ce:f9:17:f4:32:11:
da:4b:d5:55:be:01:0e:96:e0:06:1b:a2:28:f8:95:
55:ef:1b:5c:9d:95:b8:d8:3a:ce:2a:66:99:0d:8e:
c5:56:26:b4:72:4e:e9:a4:18:97:86:a9:38:c4:d6:
69:c2:b3:15:bc:a7:70:5a:1d:76:d8:23:b1:ab:5a:
cf:f2:6a:9e:df:4a:e6:6c:5b:e7:2b:69:6f:82:19:
b2:0b:3e:cd:d6:41:94:9d:10:a6:6f:5f:a3:e2:d7:
18:11:a6:0c:6b:77:f4:7d:07:36:61:6c:2f:6b:62:
3b:0c:19:cc:75:fe:5b:7e:cc:d1:16:d0:3b:0a:94:
20:41:bf:48:90:ae:03:a4:54:60:20:0e:2a:63:75:
09:fa:36:26:52:d9:bb:6a:ac:05:57:29:99:5e:4e:
d7:9d:95:a7:f4:b7:05:15:ef:48:59:cc:75:d6:ea:
c9:a7:5a:ff:8f:79:04:a9:73:8b:50:2b:e9:4d:5c:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:44:98:9A:E7:0A:DA:6E:E0:A0:4C:B0:95:BE:25:39:DB:D7:A7
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.68.0/24
Signature Algorithm: sha256WithRSAEncryption
53:fd:0f:af:79:84:78:90:60:e9:22:bb:68:0d:c2:74:32:cb:
ba:8a:2a:a1:13:08:f6:7f:bb:ca:67:02:2d:e9:8d:24:25:ae:
5c:84:de:d3:f0:42:c7:f6:7d:09:b8:03:a8:89:38:ab:f4:0b:
e4:69:85:bc:b0:0b:1d:30:11:20:f1:24:be:c1:96:da:56:50:
b4:c7:b2:d4:25:71:5d:11:6c:38:25:2e:73:65:df:32:06:bb:
cb:e2:75:10:93:e1:fd:47:20:6c:e6:58:94:24:03:1b:d5:90:
c3:d1:01:9d:8a:40:50:72:70:93:e0:37:11:56:64:85:1a:a9:
58:9d:74:cf:6e:a4:34:c6:2a:20:43:d3:9e:45:d5:82:de:3c:
e5:4e:66:40:cf:c7:37:ae:bc:f6:53:a7:fe:32:4e:51:fc:05:
fb:31:4a:62:d8:94:33:41:e0:d9:d3:af:b7:f1:d6:01:e3:19:
62:0a:00:f6:ca:9e:9e:12:ee:cc:e3:56:24:de:6a:0f:c5:ee:
2c:01:34:24:5a:3a:82:31:c1:7c:03:e8:14:0a:07:78:e5:f2:
4b:34:f2:9c:50:c4:76:f0:97:2b:4d:93:1a:d0:b7:17:d3:a3:
a2:88:e0:51:10:f7:3d:c7:9f:f1:ea:e8:d3:5d:7f:3d:1c:03:
48:ae:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:59 2025 by rpki-client