Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/nsUbxvGu1UErqFXm66ns0EQ3rqc.roa
File: nsUbxvGu1UErqFXm66ns0EQ3rqc.roa (raw, json)
Hash identifier: bkkqXKc5V8EzFI/w6wqjj7id0/p3G/mMkqjMqB2Pb0I=
Subject key identifier: 9E:C5:1B:C6:F1:AE:D5:41:2B:A8:55:E6:EB:A9:EC:D0:44:37:AE:A7
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018A0984146B99699D6A0B64B12EFEADC71C
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/nsUbxvGu1UErqFXm66ns0EQ3rqc.roa
Signing time: Fri 18 Aug 2023 16:39:25 +0000
ROA not before: Fri 18 Aug 2023 16:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147291
IP address blocks: 185.21.253.0/24 maxlen: 24
185.21.252.0/24 maxlen: 24
185.21.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:84:14:6b:99:69:9d:6a:0b:64:b1:2e:fe:ad:c7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Aug 18 16:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ec51bc6f1aed5412ba855e6eba9ecd04437aea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:8f:71:7c:69:9a:35:45:40:14:12:25:e7:
87:36:5c:ab:0e:5d:62:63:6a:2a:9d:95:c0:8e:07:
b1:f2:5d:b1:60:4c:41:1b:3c:34:f8:0b:0d:09:02:
61:56:6d:63:51:dc:1e:a2:49:77:32:cb:c6:0e:63:
3c:dd:26:cf:71:9b:0f:bb:55:75:76:1f:2b:8c:84:
8d:9c:73:2e:24:61:0a:8c:a3:2c:d3:23:a8:97:6c:
76:b5:91:28:9d:66:6b:3a:db:4f:46:78:16:06:0d:
c9:c3:1a:93:f5:69:79:59:17:bd:e0:c9:68:be:31:
3b:1c:50:85:61:99:58:b7:35:1c:50:55:cf:2c:d0:
73:8c:76:74:c9:0c:30:a7:06:6b:a3:cf:99:0b:38:
c3:1b:37:98:aa:7d:54:73:ef:2f:90:86:bf:f8:0b:
cd:f8:ca:30:c9:fa:8d:a9:64:88:8a:ad:cd:8d:91:
1b:e3:d1:d7:c5:89:49:5f:6a:dd:37:a5:7f:8f:1a:
89:54:b5:07:4d:58:ee:3b:08:ce:8e:cc:43:95:1a:
0e:e1:31:d9:be:4b:5a:e2:8d:c7:cd:50:2f:c4:2b:
ff:ae:c0:81:38:87:41:b6:14:c1:53:d4:2c:08:86:
e4:3b:33:5e:3d:fd:62:dc:07:a5:24:57:2d:09:98:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:1B:C6:F1:AE:D5:41:2B:A8:55:E6:EB:A9:EC:D0:44:37:AE:A7
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/nsUbxvGu1UErqFXm66ns0EQ3rqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.252.0-185.21.254.255
Signature Algorithm: sha256WithRSAEncryption
20:85:cb:14:77:90:26:6e:1f:d8:b3:3a:38:e6:d1:b0:a7:63:
38:b7:8d:95:ff:b7:e6:30:35:bb:ae:49:7a:d2:3b:b4:fc:ea:
31:53:53:cc:a3:59:fd:e6:f6:b7:e9:9b:f5:a0:50:db:85:b3:
1d:80:72:29:42:be:5b:0f:7d:6f:c3:6c:b0:12:4e:a8:a6:e9:
3a:a1:e4:46:67:32:4a:d9:e4:d8:0d:b4:5c:8a:11:3e:ea:a4:
24:82:4e:a4:51:c0:0c:03:13:de:c5:36:f2:65:a6:c9:76:a8:
a2:39:1a:90:cd:64:be:e4:36:5c:dd:cf:d3:8a:7b:96:cc:c6:
22:89:ed:74:c5:34:9d:ce:5f:52:ab:14:0d:46:35:57:5e:f8:
d4:64:7b:ca:68:0d:f0:0e:7f:e9:ed:a2:b5:b8:b4:7d:4a:f8:
ec:35:b3:fd:d4:db:09:a9:80:36:da:26:9a:1b:37:a1:4c:f7:
53:3b:cf:7a:05:84:21:9d:d9:a4:11:c3:62:4e:23:c0:15:cf:
d5:39:ee:8e:d3:6a:e9:72:94:4f:38:8d:d4:f3:5f:20:49:98:
4d:61:3d:b1:06:97:61:d3:3e:10:76:d3:9b:1b:98:e2:96:f0:
7a:af:1d:68:68:96:16:c3:6e:08:de:2f:70:03:24:4d:26:8d:
c5:7e:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:16 2025 by rpki-client