Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/nClOKUwgPxAXL6xGnurq2v3n0l8.roa
File: nClOKUwgPxAXL6xGnurq2v3n0l8.roa (raw, json)
Hash identifier: MXjG2QH+qVsXnuBv7QQ5a7K2zfHcQGwePcRhGaMnAAM=
Subject key identifier: 9C:29:4E:29:4C:20:3F:10:17:2F:AC:46:9E:EA:EA:DA:FD:E7:D2:5F
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 37F20CA5
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/nClOKUwgPxAXL6xGnurq2v3n0l8.roa
Signing time: Sat 01 Jan 2022 06:01:03 +0000
ROA not before: Sat 01 Jan 2022 06:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204405
IP address blocks: 2a02:17a5::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938609829 (0x37f20ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 06:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c294e294c203f10172fac469eeaeadafde7d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:b9:91:35:81:4b:80:bd:5d:98:40:3e:e1:
2e:61:03:13:8c:1c:27:c0:1f:2a:85:81:84:22:cf:
f7:a3:47:4b:56:9c:65:88:ce:ab:43:74:eb:e9:e8:
89:64:6f:64:a0:8e:fa:70:72:44:3a:61:64:d6:f1:
31:c3:5c:dd:f5:9f:97:46:f1:60:41:74:98:39:cb:
82:f2:31:aa:39:77:ce:e2:01:c3:d0:7a:58:78:63:
82:b6:f2:93:20:05:49:c9:41:1a:b8:07:ba:3f:9e:
7c:89:fd:f5:9b:7f:b4:2f:d8:d4:97:d2:23:2d:f4:
5e:2d:94:bb:63:64:47:fd:b5:50:78:6c:3f:3b:f3:
a6:ef:01:62:56:92:fa:56:e8:69:7e:08:1d:43:59:
04:33:61:c9:22:30:be:16:6d:4c:4b:2c:2c:79:17:
73:28:05:26:19:c9:8c:74:0e:90:77:3f:5f:ba:1d:
cc:f0:61:b8:13:99:4d:16:71:07:c9:26:4e:dd:56:
c4:a2:a2:57:d3:99:57:cc:05:9d:0d:a7:f4:72:2d:
a2:1f:a1:fe:d8:dd:70:52:de:66:42:01:cd:a7:64:
bd:c2:09:43:4a:86:bd:73:0b:bf:b6:7c:a6:47:c9:
3e:71:9b:08:63:0b:88:62:9e:5e:69:88:62:6b:52:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:4E:29:4C:20:3F:10:17:2F:AC:46:9E:EA:EA:DA:FD:E7:D2:5F
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/nClOKUwgPxAXL6xGnurq2v3n0l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:17a5::/32
Signature Algorithm: sha256WithRSAEncryption
4f:dd:28:4c:cb:20:3e:aa:ff:b6:de:6d:05:ce:64:2c:1a:6d:
a8:3f:bf:76:cc:ab:65:d9:fd:48:04:4a:c9:b9:62:e8:ec:ac:
8c:20:2e:14:20:77:1e:9d:69:6a:d2:7f:d9:76:51:6b:8d:e5:
17:6b:02:47:a9:57:1b:a9:24:9d:08:ec:48:ea:f6:e9:22:91:
52:c9:ad:59:d7:db:89:ce:9b:f6:fe:52:3e:bc:bc:05:55:ee:
94:fe:bb:83:22:ff:ec:6e:e1:77:f6:e6:04:c4:30:78:78:6a:
c0:eb:bf:89:88:6f:89:04:01:ed:b5:b1:5e:4e:bd:2c:ce:64:
88:1a:13:b9:70:87:13:38:c0:9b:09:4f:c9:c3:93:75:4f:4d:
b5:d8:d0:8e:6f:f5:ff:74:63:00:42:b5:f3:c2:7e:13:97:6c:
93:17:bb:2b:eb:f0:23:56:c8:23:cb:fa:93:41:9d:bb:67:11:
cc:1f:3d:49:39:5b:f9:d2:be:2d:ba:d4:a2:45:7d:7b:4c:55:
44:75:bb:f1:d4:65:1e:92:5c:26:48:a3:ac:94:fc:91:f8:b7:
cf:63:74:aa:01:1f:c9:c6:f2:38:20:9c:41:dd:74:34:91:93:
e3:2b:9a:1a:98:20:7d:eb:0d:b4:5b:19:23:4b:d0:e6:b6:c8:
ea:44:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:27 2025 by rpki-client