Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/NLCollhjrEEQOE-PDJFwvSEkpWg.roa
File: NLCollhjrEEQOE-PDJFwvSEkpWg.roa (raw, json)
Hash identifier: MVYofLmObC6krPDdhLIsoczQc+WblQhfU3QgFVWsECQ=
Subject key identifier: 34:B0:A8:96:58:63:AC:41:10:38:4F:8F:0C:91:70:BD:21:24:A5:68
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 01942143994C52F4360978CAF07D1BCC1E29
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/NLCollhjrEEQOE-PDJFwvSEkpWg.roa
Signing time: Wed 01 Jan 2025 09:47:45 +0000
ROA not before: Wed 01 Jan 2025 09:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15395
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:99:4c:52:f4:36:09:78:ca:f0:7d:1b:cc:1e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 09:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34b0a8965863ac4110384f8f0c9170bd2124a568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:54:6c:eb:0c:ba:c8:c5:19:a7:66:bd:b2:
c7:b4:fa:17:84:e5:ac:e6:ff:8d:4c:20:99:55:3f:
77:b7:bd:dc:a0:05:ec:4a:11:56:a2:b3:be:58:30:
c6:e1:0d:71:e5:0d:f5:1f:f7:4e:ad:96:0f:34:15:
bb:30:2a:d4:b7:2b:24:22:76:2d:70:5c:5e:7f:2d:
58:dc:02:33:15:83:26:cd:0a:73:81:de:1f:ab:8a:
a1:d8:2e:43:41:e3:c4:c0:11:e3:a7:31:59:cb:3a:
b0:3c:fb:1d:c8:5b:3c:11:13:12:f3:95:07:92:03:
dc:e1:52:63:83:04:d2:e2:73:4e:5f:90:f9:fe:da:
bd:c1:57:fb:6e:ff:a5:c0:fd:eb:f0:be:ff:13:e8:
a4:ff:bb:bb:31:4e:88:61:8f:f5:1c:fa:8e:d0:0a:
7e:dc:89:a5:52:c4:3a:5f:46:25:51:67:07:c2:2e:
5e:33:8b:27:e2:0f:7e:cc:11:6b:c2:2d:27:16:4a:
05:e1:ea:55:1e:b6:c6:4f:80:1a:84:5f:ab:bb:29:
a5:34:68:e7:ef:fe:4f:83:1d:95:5b:f6:bc:56:75:
9e:20:9a:3d:1a:1e:46:67:1a:da:5d:05:d5:12:3a:
80:29:4e:e3:93:2f:13:38:ed:fd:b1:c9:a5:92:a6:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:A8:96:58:63:AC:41:10:38:4F:8F:0C:91:70:BD:21:24:A5:68
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/NLCollhjrEEQOE-PDJFwvSEkpWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
62:1a:f7:ca:07:fb:a2:6b:d5:13:22:2b:59:59:6c:92:92:db:
ba:05:4f:54:d4:b4:79:d8:6c:46:93:88:f7:62:6e:a8:b9:74:
f1:d2:b4:65:75:74:96:2b:52:a7:eb:25:b4:72:26:ac:a1:75:
9a:e0:91:31:d6:89:d1:93:7d:4b:b4:26:59:ab:34:05:62:1e:
33:c0:de:bc:d1:e7:11:04:ce:77:40:67:68:60:a7:21:47:3c:
f5:a0:31:b8:93:81:9d:ed:a8:bb:86:8f:d3:f9:02:b3:dd:77:
54:4c:e1:f8:fc:79:fb:65:ab:c6:21:ac:8c:da:65:8a:9b:6f:
22:b0:59:86:9f:2d:c8:59:17:5a:be:df:38:f5:5a:b1:70:a7:
ae:ed:8f:c5:f5:0a:59:4b:9f:69:d3:c7:26:ab:d5:90:83:13:
5e:60:74:55:3e:e0:e4:d3:30:f0:f9:11:96:0b:a0:16:83:27:
49:e1:ba:7e:93:85:75:57:29:a7:5b:75:2f:a6:c1:06:30:ee:
99:17:91:b9:f3:d0:d8:85:43:44:9a:6c:98:1e:a7:19:d6:f2:
32:f2:75:54:c0:7d:34:1f:61:db:72:e5:de:a3:1b:8f:7c:bc:
b6:36:cd:a3:d3:15:7f:7e:f4:9c:72:ae:ce:91:fa:b9:31:f2:
30:79:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:18 2025 by rpki-client