Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/Nampy2hXmDfZwLL3aDucTkcBm44.roa
File: Nampy2hXmDfZwLL3aDucTkcBm44.roa (raw, json)
Hash identifier: rZmuzuPEIKdMYnQuq3YmZGtEX3dPzkd4UF1uLCw00qE=
Subject key identifier: 35:A9:A9:CB:68:57:98:37:D9:C0:B2:F7:68:3B:9C:4E:47:01:9B:8E
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018570306B477FC382FD88D5E134DF9C69A1
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/Nampy2hXmDfZwLL3aDucTkcBm44.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41022
IP address blocks: 185.195.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6b:47:7f:c3:82:fd:88:d5:e1:34:df:9c:69:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35a9a9cb68579837d9c0b2f7683b9c4e47019b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:27:60:37:6d:9b:86:1a:a1:de:fa:94:e5:
e1:64:a4:6e:24:92:57:4b:20:26:71:47:62:64:56:
41:58:8d:73:5e:6d:06:2b:5a:53:25:7a:77:1c:89:
d9:d5:f3:b1:03:3b:d5:0f:a4:58:f7:6f:3e:91:8c:
50:52:0b:87:79:d8:e7:df:3a:bf:a6:16:7e:9c:bb:
d9:e5:3e:94:fb:53:fa:36:a1:a7:9e:d2:ba:1a:41:
39:56:62:ef:8e:33:45:5a:f1:ed:70:24:af:e0:70:
03:6f:d0:ad:ef:b2:d6:24:ad:f4:25:dc:7c:f0:53:
e5:14:c5:86:c0:b6:16:b6:1e:c2:03:03:e9:88:cc:
35:9f:cf:8e:22:ff:b3:22:21:4e:27:ee:20:43:88:
27:4a:bf:bd:c1:3c:e9:ae:25:e4:36:0b:e1:78:8a:
88:28:37:f1:38:64:4c:34:50:67:51:9b:24:59:bc:
f9:90:d8:fe:15:ef:a6:11:59:76:70:40:99:6b:a2:
2b:30:54:36:a9:8f:b5:fe:57:08:47:29:f7:1b:79:
21:15:91:a5:c6:68:14:87:ae:bc:7b:52:82:b4:f7:
70:28:bf:23:63:15:8c:e0:7c:b6:c2:ad:3c:0e:86:
db:64:0a:b6:f6:e4:1f:84:62:09:05:3e:fe:a0:ef:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A9:A9:CB:68:57:98:37:D9:C0:B2:F7:68:3B:9C:4E:47:01:9B:8E
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/Nampy2hXmDfZwLL3aDucTkcBm44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:28:57:ca:4a:26:56:f1:9d:bb:3a:0c:24:3c:4e:61:87:a9:
4e:77:a0:2f:49:df:dc:4c:0a:39:c3:0e:88:96:2a:48:1b:c4:
e5:3e:c2:ba:d8:50:eb:97:1b:e5:ed:d1:0c:72:51:71:31:fd:
27:8e:fb:70:18:92:17:63:3a:9d:ae:fd:36:33:a6:34:13:e5:
9d:b3:df:be:22:a4:f4:ab:8b:a1:78:68:08:83:79:74:4e:65:
d4:77:55:fa:aa:5b:dd:75:ee:7b:94:bf:d5:8c:90:4a:b4:29:
81:a4:72:86:aa:b2:3e:2b:f0:2f:93:f5:32:79:7f:d2:9e:56:
95:54:26:c1:a3:67:df:d5:4d:5b:54:46:e2:72:71:58:ed:6f:
4b:08:eb:7f:1e:ac:1e:a7:81:8d:7c:dd:46:39:12:7d:c4:3f:
da:08:b8:60:9a:f6:65:b2:b0:a7:3e:e5:c3:4e:68:15:d2:cb:
7e:66:06:04:9c:d7:c3:ca:be:7d:6c:81:d6:e7:c5:4f:73:a6:
fc:9f:af:7a:73:f9:9b:cf:8b:46:77:5e:a2:03:ac:7e:70:70:
f8:a1:b9:fa:aa:4d:75:4e:70:f5:fc:f8:e8:19:ad:a7:42:a5:
e1:2b:24:6d:7a:1d:01:03:6b:66:90:f2:96:6d:19:7c:53:29:
33:45:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:02 2025 by rpki-client