Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/NX78TLuxo_4vt_c14axKG6eNS8k.roa
File: NX78TLuxo_4vt_c14axKG6eNS8k.roa (raw, json)
Hash identifier: ZCM6oMNX/R/tSSMp4qhK6/dyh53SFicBqaxiQEDShzk=
Subject key identifier: 35:7E:FC:4C:BB:B1:A3:FE:2F:B7:F7:35:E1:AC:4A:1B:A7:8D:4B:C9
Certificate issuer: /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial: 019422FAE6E854E4AAA58CC57ACB4FF16209
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/NX78TLuxo_4vt_c14axKG6eNS8k.roa
Signing time: Wed 01 Jan 2025 17:47:35 +0000
ROA not before: Wed 01 Jan 2025 17:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207754
IP address blocks: 2001:678:c40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:e6:e8:54:e4:aa:a5:8c:c5:7a:cb:4f:f1:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
Validity
Not Before: Jan 1 17:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=357efc4cbbb1a3fe2fb7f735e1ac4a1ba78d4bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:ea:63:95:38:48:74:2c:6f:c7:00:d3:07:
59:cc:fb:5d:d5:b7:16:97:b9:07:3e:ba:aa:8b:43:
26:a3:d8:c1:5f:dd:1f:7f:d9:5d:f9:9d:3d:8d:8d:
ac:19:78:65:66:8a:8b:4a:02:97:25:a5:80:23:09:
2f:8d:dc:ea:a9:47:41:49:6d:c1:86:e9:5f:f3:33:
c8:c9:4b:c6:65:f6:c9:75:67:b1:e8:82:c7:8d:76:
28:df:d2:b6:19:50:0b:2c:23:0b:70:a6:f6:b6:02:
24:5b:a3:a0:e3:79:97:df:62:5b:60:13:07:2d:e2:
f6:c2:cb:8d:12:9e:e6:4c:ca:25:43:43:8d:74:31:
e3:d0:d8:be:59:ab:e1:d4:95:85:55:82:fe:a6:14:
81:a1:dd:a2:f6:35:6a:20:fa:9b:62:76:87:22:76:
e2:fb:c1:11:27:e7:c6:b0:83:6c:bd:c2:bd:8c:8b:
aa:88:83:fa:27:58:66:df:1a:1a:d1:1d:56:3d:4f:
73:84:35:3c:83:51:3f:43:3d:7a:0f:55:98:c4:b2:
09:d3:91:96:45:67:95:16:76:55:bb:bd:84:9b:2a:
d0:c7:91:f3:fd:b2:17:86:58:d6:db:47:92:f5:d2:
58:22:f9:33:b0:de:48:1f:df:5b:4b:e0:ff:09:b2:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7E:FC:4C:BB:B1:A3:FE:2F:B7:F7:35:E1:AC:4A:1B:A7:8D:4B:C9
X509v3 Authority Key Identifier:
keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/NX78TLuxo_4vt_c14axKG6eNS8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c40::/48
Signature Algorithm: sha256WithRSAEncryption
a8:19:9c:16:40:79:cf:14:74:b4:f6:7b:1a:92:2e:4c:a7:0d:
c5:8e:4b:9b:68:ec:e8:b4:ad:be:47:c6:b7:fd:ea:c4:a8:61:
42:10:54:8a:82:d2:84:42:9b:c8:c1:57:70:62:8a:db:34:b1:
bb:d7:ee:82:9b:af:62:4e:91:c8:b0:14:2d:89:d7:7a:a7:0b:
99:6b:8e:76:df:0c:90:84:45:a2:cb:f1:fb:ed:98:53:f5:c6:
e9:03:10:27:c3:49:bc:b6:ff:c4:6c:12:16:d8:63:a1:27:ad:
bc:23:b0:a6:da:c4:ae:1f:d5:90:df:4d:fb:f9:d3:04:92:9e:
ec:f3:4d:b2:07:7b:ff:32:09:7d:03:ed:d8:65:a5:1d:4b:54:
fc:c9:c8:62:0d:a8:57:ab:be:46:52:a3:dd:80:00:6d:11:ed:
75:82:ab:84:4a:d1:82:df:72:6a:10:29:b9:47:99:bc:75:32:
9e:cc:f9:1f:a9:96:3e:19:13:ad:8e:44:c5:eb:5a:76:b6:2f:
89:be:83:d9:af:bf:0e:c3:6b:24:09:b5:14:17:42:e2:59:e9:
eb:72:88:48:b8:37:3e:9d:e1:c7:71:e4:01:99:e2:06:95:09:
b1:8f:58:97:1b:50:ed:a6:27:40:a6:b7:68:7a:b3:bc:37:e2:
c6:68:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:22 2025 by rpki-client