Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/NhsPqOKPZlSrioMLr9lpaOYtrkc.roa
File: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (raw, json)
Hash identifier: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=
Subject key identifier: 36:1B:0F:A8:E2:8F:66:54:AB:8A:83:0B:AF:D9:69:68:E6:2D:AE:47
Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial: 0194206837E10AA063C697961DA316A1FBD1
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/NhsPqOKPZlSrioMLr9lpaOYtrkc.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42
IP address blocks: 2001:678:94::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:37:e1:0a:a0:63:c6:97:96:1d:a3:16:a1:fb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=361b0fa8e28f6654ab8a830bafd96968e62dae47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:8b:17:fa:27:26:fd:ce:a0:0c:d9:61:2e:
42:0b:53:b9:ad:1e:58:71:ef:b1:0f:d3:2d:60:72:
35:f3:a7:f1:61:b3:0f:b9:5d:f8:65:1b:da:af:b5:
05:ed:a2:a9:d5:80:40:ec:b7:54:b2:01:f8:1d:2f:
6a:98:9e:93:9c:55:97:11:c3:dc:46:db:f9:e7:cb:
32:ae:79:12:11:70:55:d6:d8:a6:1f:01:be:f4:c1:
27:60:d2:56:e7:11:ad:b9:72:4c:81:7d:74:c0:e1:
b5:64:d5:36:8a:34:58:19:57:57:64:94:54:e7:a7:
6b:d6:e3:61:76:2b:61:e4:46:e9:17:16:fb:93:c8:
7f:6a:7b:1b:05:62:03:84:44:93:61:fa:20:23:cb:
05:a5:cf:31:a5:fb:7a:9e:2b:35:55:ad:f5:bc:43:
c4:62:f3:db:6b:34:84:50:32:95:d2:3a:1a:7c:f9:
b6:98:7a:97:79:74:c6:4f:fc:c6:b7:9a:76:6a:8e:
de:d2:e2:e6:4b:fc:03:63:87:8d:b5:a2:8a:bb:63:
7a:b2:a1:1b:cf:32:eb:64:85:48:86:7b:07:f0:bd:
46:6e:3c:6b:c2:7c:97:43:52:c1:a7:1a:27:52:0d:
33:a3:b3:12:15:ba:5d:78:6a:41:b5:ab:e4:d4:54:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1B:0F:A8:E2:8F:66:54:AB:8A:83:0B:AF:D9:69:68:E6:2D:AE:47
X509v3 Authority Key Identifier:
keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/NhsPqOKPZlSrioMLr9lpaOYtrkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:94::/48
Signature Algorithm: sha256WithRSAEncryption
9d:51:ac:f9:8d:e6:bb:42:d1:e9:20:66:19:d6:8d:1d:0f:98:
f5:d5:b5:4b:0e:22:65:fb:98:b4:fe:23:e9:d3:bb:12:64:5b:
1d:56:4a:6a:2f:51:80:22:79:19:92:0c:ec:4e:2c:32:c9:2d:
26:d5:f4:93:94:44:28:44:d5:51:bd:95:62:2f:83:13:a9:cf:
14:a3:04:6e:b7:9e:23:b8:60:a7:9f:78:58:93:d8:cb:2e:d8:
b3:2d:0b:0d:b0:51:41:70:d2:f7:dd:b8:b2:a3:63:c6:72:36:
4a:10:f4:ab:6f:0c:ae:8d:d9:ce:86:33:6c:58:7e:64:e3:14:
34:45:8b:69:a9:e7:ff:5e:08:f2:f4:6e:34:15:40:84:75:88:
84:3a:c8:cd:26:f5:81:98:5a:35:26:bc:27:39:b9:2e:34:40:
22:41:0f:be:8c:ed:cf:13:f7:27:2f:cc:73:ab:cc:76:90:3f:
db:52:22:0e:67:5e:d7:38:3b:5d:7c:87:29:44:a0:7c:81:d7:
d9:89:8c:e0:31:b1:13:01:e0:02:e8:33:96:f8:76:24:96:1a:
8e:ed:f9:19:60:86:dd:7a:b5:ee:dd:05:78:82:42:5f:c4:e4:
ba:b1:8b:2f:f5:f4:99:2d:32:fa:ea:20:bc:67:24:6e:bd:da:
4f:4a:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:45 2025 by rpki-client