Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/NLDDw03tanwowRZBZVQwxpt3X1I.roa
File: NLDDw03tanwowRZBZVQwxpt3X1I.roa (raw, json)
Hash identifier: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=
Subject key identifier: 34:B0:C3:C3:4D:ED:6A:7C:28:C1:16:41:65:54:30:C6:9B:77:5F:52
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C16DC496CBF6F6A2BAFF251F86332
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/NLDDw03tanwowRZBZVQwxpt3X1I.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14516
IP address blocks: 80.231.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:16:dc:49:6c:bf:6f:6a:2b:af:f2:51:f8:63:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34b0c3c34ded6a7c28c11641655430c69b775f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:d2:56:94:23:88:f8:7f:2e:9c:8a:96:57:
e9:89:78:ec:74:4e:1b:ac:bc:e1:45:df:47:d5:78:
d1:f9:33:5b:9c:49:26:15:f1:b5:6b:4d:bb:67:0e:
84:5a:79:cc:b8:e3:42:66:07:db:65:4f:4f:a5:1c:
bd:bf:14:92:73:4e:ec:d5:80:56:7a:4c:99:e1:29:
d0:56:76:71:17:e2:b7:28:b2:e2:83:59:43:be:35:
ae:8f:dd:bd:61:87:00:b8:f5:cc:ac:fb:ad:65:5f:
49:b1:b1:15:af:90:30:b8:b4:a7:71:67:eb:8d:3c:
45:5a:e4:89:09:cb:a3:ec:9d:02:e2:e2:36:aa:7b:
07:32:a1:ad:30:a0:42:46:fc:bc:1f:6f:66:85:ca:
3a:5e:33:61:06:4f:f9:ec:3f:3b:7e:67:dd:ff:c9:
6e:e3:62:e3:a3:19:34:ea:4e:f3:e6:a8:2c:47:25:
14:d2:c0:35:3b:2b:09:c0:2b:e0:1b:d4:1c:f7:85:
75:d9:75:2a:b9:21:14:cf:99:3b:cc:c5:c3:37:ee:
2b:64:fc:dd:72:f6:b1:19:2b:0e:f6:8e:8f:07:8e:
9e:a7:20:a7:04:71:8b:4c:92:37:19:5a:c3:04:fd:
09:fb:71:a0:1f:87:e3:87:b3:3c:24:ea:d7:7e:85:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:C3:C3:4D:ED:6A:7C:28:C1:16:41:65:54:30:C6:9B:77:5F:52
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/NLDDw03tanwowRZBZVQwxpt3X1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:40:8b:53:6f:ac:5c:1a:d8:f1:f8:2f:a6:16:84:b8:e2:33:
a0:2f:04:64:52:e0:aa:40:bd:0a:fa:7b:3f:77:dc:58:3b:c3:
89:cf:4b:50:70:da:de:2a:41:f1:33:5a:a8:20:9b:04:4d:af:
ea:4f:63:15:de:77:28:5c:25:3d:9d:10:88:9c:7a:26:18:3e:
87:6c:4c:d6:38:11:80:0c:32:60:14:1d:87:39:33:7e:26:a8:
bf:ac:fa:3e:7c:c3:42:0c:a1:d8:27:00:76:2a:e7:70:8b:f3:
24:3f:9c:0e:8c:8d:71:32:23:d6:7b:d0:72:64:78:66:c8:cf:
57:45:31:b9:dc:81:40:7a:ab:8b:30:9d:b4:55:16:28:e2:c5:
29:db:2f:03:de:57:4f:58:28:99:96:32:09:44:85:c5:a0:6b:
fa:73:dd:1c:5a:22:e4:cd:99:7c:ef:1d:bf:1a:21:7a:88:04:
0b:1e:01:91:f7:ab:07:ca:8b:9f:c7:e2:d7:72:20:ba:b5:07:
40:d8:16:45:84:62:a5:52:47:72:76:20:3f:63:33:fe:08:5f:
a9:19:5d:f2:97:cf:a8:fc:0b:75:b8:04:1c:15:f8:2b:b1:60:
2e:7b:53:b0:78:b0:00:dd:9e:17:62:98:fb:95:18:62:10:42:
ff:c0:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net