Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/NW8G1BcZInnRXos5wYONU_JPh2U.roa
File: NW8G1BcZInnRXos5wYONU_JPh2U.roa (raw, json)
Hash identifier: uoXbc7riEz9TDS4ZCP3ImasVKcWZWPq9UAXP/UuLSKs=
Subject key identifier: 35:6F:06:D4:17:19:22:79:D1:5E:8B:39:C1:83:8D:53:F2:4F:87:65
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018BA3D5229C9CAD2D432DC86DE1A94EB7AA
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/NW8G1BcZInnRXos5wYONU_JPh2U.roa
Signing time: Mon 06 Nov 2023 08:52:16 +0000
ROA not before: Mon 06 Nov 2023 08:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208949
IP address blocks: 89.249.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:d5:22:9c:9c:ad:2d:43:2d:c8:6d:e1:a9:4e:b7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 6 08:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=356f06d417192279d15e8b39c1838d53f24f8765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:c9:9d:28:81:c3:79:9e:f8:35:f7:58:bd:
f7:f1:4d:e1:ee:3f:16:ca:2b:31:e7:e2:94:fa:e5:
30:06:10:bf:2b:af:30:8e:36:22:a3:b7:4d:08:ac:
23:db:17:94:01:ce:04:9f:75:56:a2:1d:98:d4:20:
01:ca:37:f2:4d:2a:b2:0b:13:67:ff:00:03:43:3e:
a6:28:dd:db:b6:52:f2:e1:bc:c1:fa:96:63:5a:c2:
cc:19:c9:93:a2:b8:61:21:fb:37:66:9b:b5:77:d4:
ee:9f:78:01:94:f9:55:9c:cc:1c:17:96:fd:c6:d0:
7f:53:82:68:c3:d0:86:16:aa:e7:f8:03:04:e4:3e:
b1:8a:0f:a8:8b:ec:60:16:4e:6f:6a:fe:74:63:35:
7b:a2:e3:1a:58:50:69:74:47:66:67:7a:e2:e3:0d:
f3:62:39:d0:18:04:b0:fe:55:42:fb:4c:3f:fd:09:
ab:55:55:01:0e:f7:0d:c1:7a:e7:87:83:90:7d:ba:
34:05:c0:77:63:ee:74:eb:a0:8b:0b:fd:4a:9b:45:
6c:df:2e:86:1d:e7:f5:27:bb:78:25:e4:9e:c2:af:
12:a8:3d:93:2c:8c:ab:14:bf:08:d9:fc:2b:1c:10:
11:5d:97:f3:e7:f3:0f:9f:a1:8d:09:37:4f:6e:70:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:06:D4:17:19:22:79:D1:5E:8B:39:C1:83:8D:53:F2:4F:87:65
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/NW8G1BcZInnRXos5wYONU_JPh2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/23
Signature Algorithm: sha256WithRSAEncryption
46:df:2e:62:d3:6e:28:73:54:02:94:c2:e6:3e:81:52:94:05:
30:72:25:be:00:fe:0b:42:7c:1c:83:ca:54:3c:93:c8:68:b3:
43:2e:14:43:77:f2:85:81:35:b6:6b:53:7b:8e:ca:b1:22:7c:
59:d1:0d:47:ce:c2:cd:57:44:85:b6:75:29:67:df:79:f4:bd:
04:70:3e:8e:a3:bf:16:63:5f:64:72:67:1e:9e:d0:c7:45:c0:
83:a0:b8:85:cc:44:07:f0:f5:53:d4:4f:1e:5a:a4:a5:ed:d2:
9d:d2:50:e8:2b:b7:bf:1e:86:de:87:87:02:59:4b:44:19:20:
9f:c1:a3:7a:56:b3:92:23:fa:53:2d:59:2b:42:de:80:d8:57:
af:8f:ec:88:28:f2:5d:25:08:20:32:fc:cd:a1:8e:18:1e:16:
dc:b5:c5:bd:00:29:18:5b:e9:2f:b8:3a:fc:e6:3e:25:e7:ee:
3d:1e:ff:9d:33:04:12:35:ff:c8:bd:14:3f:0c:62:84:5a:56:
d9:12:15:07:08:d9:aa:82:e9:62:ad:5e:ac:e1:8c:7c:90:df:
a4:ab:4d:15:80:ec:9c:73:7a:fe:de:8a:64:f6:c2:e5:75:2f:
17:35:e7:35:a1:86:d7:15:bc:0b:33:3c:b7:cd:7c:de:51:07:
10:dd:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:23 2025 by rpki-client