Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/NauRVW-_YgkbVhb6QuK-hOeNqJM.roa
File: NauRVW-_YgkbVhb6QuK-hOeNqJM.roa (raw, json)
Hash identifier: 0GlzjFYpfoSnd44JZZn3LhXI4p13NT6WjbecuLDS9o8=
Subject key identifier: 35:AB:91:55:6F:BF:62:09:1B:56:16:FA:42:E2:BE:84:E7:8D:A8:93
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64AFF258A211217F723FC10811D2A4
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/NauRVW-_YgkbVhb6QuK-hOeNqJM.roa
Signing time: Thu 09 Jan 2025 09:28:19 +0000
ROA not before: Thu 09 Jan 2025 09:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47849
IP address blocks: 212.5.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:af:f2:58:a2:11:21:7f:72:3f:c1:08:11:d2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ab91556fbf62091b5616fa42e2be84e78da893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:fa:67:8b:8c:8b:60:c2:0f:6f:1b:6e:71:
64:2a:0e:c8:ea:fa:9c:a6:59:74:a7:98:ff:1b:a8:
3c:bf:fa:93:d2:b8:4f:1f:dd:fe:b7:98:ce:5b:ab:
f6:7f:af:74:29:98:03:e0:22:0d:83:49:f3:0e:d4:
f3:8e:a3:3a:28:17:46:3f:2f:21:ff:35:4f:5f:4c:
10:fe:ae:25:9f:57:de:f9:de:aa:35:b0:88:2d:bd:
6c:af:84:69:da:e2:6c:d9:d1:b6:84:51:f8:8e:41:
73:a6:c2:4a:27:26:70:7b:22:30:23:43:25:a0:84:
00:8e:a4:1e:12:41:c8:e2:0d:23:d5:9b:af:9f:5b:
dc:54:f8:72:f0:e1:8d:75:ad:b1:66:a6:67:94:ef:
dc:52:d6:d2:68:cd:7c:86:aa:da:5f:c7:fe:03:2e:
e9:c2:a3:89:78:ed:92:b4:97:99:71:78:92:5e:3a:
2c:56:68:08:80:2d:58:1e:f0:24:b2:4c:b7:f5:f1:
3f:3c:50:71:0c:39:46:f2:ee:21:eb:e5:1e:2d:80:
d8:d4:c8:4c:78:d8:c6:7f:1e:64:a2:47:c6:55:9d:
9b:d8:91:81:f1:d0:ae:62:48:9d:50:6c:20:9c:65:
1d:d5:00:3e:27:cb:35:23:59:8f:58:05:26:57:7f:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:91:55:6F:BF:62:09:1B:56:16:FA:42:E2:BE:84:E7:8D:A8:93
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/NauRVW-_YgkbVhb6QuK-hOeNqJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.32.0/21
Signature Algorithm: sha256WithRSAEncryption
11:3d:e3:65:1f:2c:bb:25:15:52:ec:7d:32:82:84:24:8c:d1:
15:39:15:4c:db:4a:72:97:49:5f:b4:9d:79:6e:2e:2d:d2:f9:
73:12:c7:0a:3e:da:16:57:4e:d2:34:24:0e:80:7d:b9:f2:cb:
0c:d8:72:ad:06:30:cd:70:d4:29:a6:4a:98:82:03:86:83:87:
a2:3c:62:18:20:55:bd:80:29:d0:b5:68:5f:03:f1:7f:f3:1a:
f2:60:f4:af:35:31:9c:55:2b:c1:94:65:f4:95:c3:26:18:4d:
4b:6e:a4:55:ce:5d:c5:a6:a8:c8:61:5b:3e:f0:5b:99:5c:53:
41:ad:1f:c5:22:eb:7e:5c:f8:c0:85:66:ed:9b:f1:f0:43:9c:
12:bd:25:3d:7d:c4:56:60:eb:47:f4:13:2f:c4:35:b1:db:94:
9b:2f:96:41:43:66:31:8e:67:fa:19:e6:32:82:75:3e:38:74:
c4:84:03:e4:8f:df:84:9f:b1:9d:09:15:40:61:66:b2:3f:e9:
88:ea:35:e5:f4:38:a3:5e:cc:f3:85:ab:94:7c:04:9f:5a:9f:
8b:69:20:65:a3:48:99:01:a7:b9:ea:9f:66:0e:27:22:8b:c0:
e7:e9:92:8c:23:2b:05:02:44:cc:0e:de:4a:c5:49:c2:3b:32:
14:d0:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:16 2025 by rpki-client