Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/NeZQWqh_t3n6BijKImhJGmgnZOs.roa
File: NeZQWqh_t3n6BijKImhJGmgnZOs.roa (raw, json)
Hash identifier: xVzlU2Suhos8I+MdcLgNQYgjQdUn/vFpFf3JM8ASZnI=
Subject key identifier: 35:E6:50:5A:A8:7F:B7:79:FA:06:28:CA:22:68:49:1A:68:27:64:EB
Certificate issuer: /CN=e4749c3367ba6e7e9f77354a55d388379135df0e
Certificate serial: 018CC8DF2BBADCB8CA896277CFD4BFC2EEF7
Authority key identifier: E4:74:9C:33:67:BA:6E:7E:9F:77:35:4A:55:D3:88:37:91:35:DF:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HScM2e6bn6fdzVKVdOIN5E13w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/NeZQWqh_t3n6BijKImhJGmgnZOs.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212328
IP address blocks: 82.102.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2b:ba:dc:b8:ca:89:62:77:cf:d4:bf:c2:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4749c3367ba6e7e9f77354a55d388379135df0e
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e6505aa87fb779fa0628ca2268491a682764eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:6b:4f:18:06:cc:6d:e6:01:b4:bd:82:68:
78:ec:c2:33:a3:9a:73:5e:d2:f0:d1:44:d7:3d:e2:
c4:b4:d3:34:aa:76:ee:55:7d:80:ba:21:c0:14:db:
94:c5:e0:db:8a:c9:56:e2:65:75:b8:ce:73:cd:73:
ca:08:64:ab:e4:1e:7b:64:6b:01:cf:71:99:15:9c:
01:e0:9b:63:61:95:ec:45:07:41:d1:bb:83:a6:a2:
51:6c:cb:78:54:a6:d2:25:bf:41:20:2d:41:d7:c6:
93:7a:64:5f:cf:99:8f:48:7e:96:ca:3a:8b:60:5d:
55:03:0a:43:19:b2:08:07:ac:00:ca:d4:38:d5:9a:
47:c2:d3:9a:9c:88:ce:72:c5:a6:a7:21:dc:6b:75:
d4:e4:17:37:45:3a:98:c2:85:00:c9:d9:84:2a:bb:
41:49:80:3c:84:69:88:3e:75:58:30:9d:22:7a:55:
3b:5d:a5:89:a7:04:a4:fa:7a:55:5d:dd:55:89:c5:
e7:03:05:2e:21:ed:4c:65:da:35:3e:e2:12:31:65:
a9:7e:6d:23:80:f6:d5:7a:61:35:d7:50:f4:4a:8d:
a3:8f:da:33:6d:4d:03:00:a6:63:bf:c5:59:6d:5b:
fc:d8:f7:ee:f5:0f:c1:07:d4:75:a1:4e:b8:83:85:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:50:5A:A8:7F:B7:79:FA:06:28:CA:22:68:49:1A:68:27:64:EB
X509v3 Authority Key Identifier:
keyid:E4:74:9C:33:67:BA:6E:7E:9F:77:35:4A:55:D3:88:37:91:35:DF:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HScM2e6bn6fdzVKVdOIN5E13w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/NeZQWqh_t3n6BijKImhJGmgnZOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/5HScM2e6bn6fdzVKVdOIN5E13w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.102.14.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:27:26:97:45:51:aa:2a:77:f4:0f:8f:76:a6:b9:fc:6a:71:
45:92:d7:d2:73:0f:95:57:06:be:8f:50:1d:0a:a9:b6:0f:4d:
b0:52:24:04:fa:72:74:a8:5f:4c:ee:65:21:d0:e9:ac:72:46:
83:7f:ee:4a:fe:fc:9b:e6:9f:4b:2a:21:92:52:08:d5:39:f8:
d4:95:91:cf:d0:ee:45:c0:fb:da:17:cd:86:74:25:e0:69:1c:
aa:d0:b7:c0:9e:b3:ca:17:de:e6:6d:73:7d:90:1f:1b:a0:34:
33:66:4f:a7:ba:a8:3c:0d:1a:1f:f4:88:60:7c:6b:7a:a3:0b:
50:8d:4c:e3:fb:fd:d5:e5:d3:a3:af:06:2a:48:ca:2d:04:eb:
b1:0a:11:4b:ef:06:a5:80:94:19:6b:1e:03:d8:72:e4:b5:23:
16:22:e3:83:7e:6b:e5:a0:21:a1:87:ec:d9:c4:8c:d6:9c:b8:
cb:bf:e7:36:95:16:b8:7c:a8:57:e0:7e:46:f7:fe:ba:6d:56:
05:bb:cc:1d:d9:d7:25:49:e1:2a:25:45:ee:97:59:a0:0b:87:
93:a5:01:c8:f4:a2:24:c1:f0:9c:9c:f0:d4:f9:7e:3d:2b:ac:
84:0d:68:d2:30:47:c4:72:21:91:ea:14:1e:95:e2:93:1b:bf:
f8:24:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:25 2024 by rpki-client on console-fra.rpki-client.org