Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/NTHKIVmfMMuw14dckM7HDv7ZOu4.roa
File: NTHKIVmfMMuw14dckM7HDv7ZOu4.roa (raw, json)
Hash identifier: TlHRYEbn/THRpLUNg8pCBzgv3kObNob5atoKjEPEjBg=
Subject key identifier: 35:31:CA:21:59:9F:30:CB:B0:D7:87:5C:90:CE:C7:0E:FE:D9:3A:EE
Certificate issuer: /CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
Certificate serial: 057DCE5F
Authority key identifier: D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/NTHKIVmfMMuw14dckM7HDv7ZOu4.roa
Signing time: Sat 01 Jan 2022 06:56:50 +0000
ROA not before: Sat 01 Jan 2022 06:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56911
IP address blocks: 195.177.112.0/24 maxlen: 24
195.177.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92130911 (0x57dce5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
Validity
Not Before: Jan 1 06:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3531ca21599f30cbb0d7875c90cec70efed93aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:81:97:fc:df:34:2f:dd:94:6d:41:c7:ec:
5b:c5:53:ce:0f:39:ef:b4:ae:6f:c4:0e:2c:99:3e:
f7:ef:89:c5:94:7c:ef:c9:6d:2e:8b:5f:3b:09:bf:
bd:7e:70:85:77:36:a3:07:98:1e:9e:d9:96:1b:bd:
98:ed:48:16:0e:5d:12:ca:5a:6f:29:52:88:40:c4:
84:97:ff:d6:81:1c:1e:b5:d3:65:36:f8:2c:9c:c8:
27:93:5a:01:2e:36:e8:3a:bd:d1:a2:00:b8:45:3e:
24:11:d4:59:32:7e:1d:ae:94:84:23:68:83:79:9c:
5e:81:a8:d3:b1:9f:c9:88:6c:75:90:dd:f2:65:9d:
d8:a7:df:0e:60:34:68:b7:46:2e:49:9f:d9:37:25:
39:52:eb:36:8f:96:cd:3a:b4:ae:1f:0a:f8:7e:4e:
22:49:58:c1:e9:3a:43:cf:55:b0:cd:6c:c2:7e:a5:
bb:a8:cf:e1:2f:50:62:54:1c:36:aa:57:53:26:a5:
04:72:3e:0e:9b:d8:9d:3d:ea:c1:7d:62:4f:b9:9d:
1c:db:80:c3:ae:7a:0d:8a:62:13:88:27:34:70:da:
a0:fc:07:da:30:98:e3:af:a7:13:9d:3d:a0:c5:d9:
9c:1b:63:84:85:9f:09:50:2e:c3:a7:19:ee:8c:02:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:31:CA:21:59:9F:30:CB:B0:D7:87:5C:90:CE:C7:0E:FE:D9:3A:EE
X509v3 Authority Key Identifier:
keyid:D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/NTHKIVmfMMuw14dckM7HDv7ZOu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.112.0/24
195.177.114.0/24
Signature Algorithm: sha256WithRSAEncryption
36:40:f8:54:1c:1b:d6:a5:1f:49:4a:b4:a4:bb:e8:d5:97:79:
7d:72:f3:a1:ee:6d:ac:e9:4d:af:36:79:66:0d:7c:3e:c5:8e:
d5:4a:44:79:f9:ba:b8:ca:cd:8c:2f:9f:4c:71:d5:6b:3d:70:
d1:f8:c5:39:8c:c5:60:57:88:d6:be:c7:91:34:ad:b7:b8:95:
cf:50:15:ba:be:98:9e:9c:5a:28:34:20:a8:4d:ef:91:b7:26:
22:3c:35:05:38:61:c2:1d:96:c9:af:e8:06:3b:c0:10:c1:08:
3e:f5:42:0a:b9:84:57:9f:0a:4c:17:51:c8:86:d4:ca:e3:e6:
ed:ce:ae:79:60:21:6c:74:8e:c2:95:89:4c:9c:14:c2:ce:d1:
23:93:b7:da:1d:f5:93:ee:48:c3:d4:0d:30:41:e3:61:16:31:
dd:83:e3:54:12:b3:45:12:a4:cd:28:91:32:00:8f:22:b9:b0:
d1:f7:d0:f4:ff:40:1f:01:91:0e:11:cc:82:1e:d3:7e:92:30:
8d:05:b5:ff:cd:2a:5a:9e:e0:76:1f:67:63:51:bc:88:88:51:
92:3e:d2:9b:62:f7:9f:21:20:37:41:73:f2:b9:b5:88:a7:06:
c6:75:cd:98:10:49:6e:37:4b:c1:2b:2a:f9:c0:93:a6:5d:7e:
08:eb:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:35 2024 by rpki-client on console-fra.rpki-client.org