Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nj-PD1T67Vzk4gmw7JM42uBLiHA.roa
File: nj-PD1T67Vzk4gmw7JM42uBLiHA.roa (raw, json)
Hash identifier: 5P1Gkd9cC+XDwnE8meJRS/TL7jRwy8HK9JDbbeLZwCc=
Subject key identifier: 9E:3F:8F:0F:54:FA:ED:5C:E4:E2:09:B0:EC:93:38:DA:E0:4B:88:70
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422204A84A77AE525218306EC07D5E8B4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nj-PD1T67Vzk4gmw7JM42uBLiHA.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211441
IP address blocks: 195.34.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4a:84:a7:7a:e5:25:21:83:06:ec:07:d5:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e3f8f0f54faed5ce4e209b0ec9338dae04b8870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:b6:c3:e4:11:cc:89:49:29:dc:d5:39:60:
77:45:42:26:0b:95:46:06:b2:ff:36:dc:12:ea:0c:
56:3d:94:92:1f:8e:d9:11:64:a5:93:2b:10:8c:ef:
b5:f5:ed:35:8f:5b:b1:43:6c:26:b6:2e:89:f1:44:
a7:1c:e5:95:68:29:be:ee:21:44:dc:1f:ba:91:bf:
1f:09:47:c3:21:ee:09:75:9f:c6:aa:de:1a:61:6f:
c6:0b:bd:42:ce:50:39:0d:6a:d3:30:b4:a0:48:44:
9c:46:4e:ed:66:a9:4a:b4:57:72:e5:72:be:ed:a8:
1d:b1:a0:ae:4a:aa:57:8f:fb:f2:81:9d:22:3d:ed:
68:33:f9:8b:de:b0:1a:fc:60:cc:a3:74:b2:b5:bc:
d5:57:1a:17:ac:9c:7d:95:01:c8:21:8d:81:15:2e:
c3:9a:fa:a4:86:82:3d:68:af:e9:9a:5c:98:f9:b9:
cd:90:d4:f1:46:b0:9b:a4:19:1f:a1:13:fd:5a:14:
07:fc:8d:ce:ab:2b:de:0f:4b:c6:6f:9a:67:69:0f:
cb:3d:ec:b0:a1:51:66:2e:fc:47:55:c5:d7:c4:7d:
4f:5f:b8:99:52:1d:09:d3:86:e0:2c:5c:be:cd:c0:
4a:50:58:6a:8b:85:e6:53:ee:1f:cc:2f:0b:4b:8a:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:8F:0F:54:FA:ED:5C:E4:E2:09:B0:EC:93:38:DA:E0:4B:88:70
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nj-PD1T67Vzk4gmw7JM42uBLiHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.67.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1f:f7:a9:ee:49:37:d1:a4:ac:11:c3:0a:a9:03:79:ac:30:
0c:7b:53:5e:47:16:05:fc:d8:a6:42:ce:7f:b5:08:d9:29:85:
0a:e7:43:3f:5d:bd:52:bd:2f:26:01:c5:20:68:6d:84:ae:cb:
6e:b6:54:d9:a2:3b:20:34:4b:fe:e5:1c:a2:ae:e2:a9:e6:35:
d6:3b:46:d2:87:09:20:0e:e6:13:ad:68:c3:b0:01:d8:76:d8:
d2:24:c5:ca:d0:70:c6:34:1c:7e:65:a7:0c:31:f7:c3:91:c7:
d6:f2:b3:25:85:72:19:ea:8c:7e:90:71:17:5e:b9:04:c0:9f:
8f:d2:1a:7e:5e:10:a8:da:c0:ec:c3:69:57:97:d5:58:0f:f0:
ed:1c:03:0b:c3:85:ff:9b:6d:23:22:5c:a9:ad:bb:5e:25:12:
4f:f9:f0:72:55:d3:8f:ce:11:f7:b7:43:ce:08:27:ec:dd:ef:
94:97:c5:c2:7b:b6:a4:2f:d1:4e:83:b7:44:26:ad:c3:70:bf:
89:9d:29:e5:96:cb:68:e8:41:0a:ef:88:00:5c:f1:2c:20:fc:
de:89:0a:19:43:5f:db:24:06:23:58:50:79:8c:c0:99:40:74:
b7:f1:d1:0e:78:fc:2e:eb:44:bf:8f:23:5d:fb:2d:c5:bf:88:
38:72:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:52 2025 by rpki-client