Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa
File: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (raw, json)
Hash identifier: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=
Subject key identifier: 9F:31:5D:CE:5C:43:1A:5F:B4:83:35:29:9E:95:05:52:42:08:BB:33
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 019421B23C2FA7C9BEF79BD75420DBBA86E4
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10010
IP address blocks: 45.90.85.0/24 maxlen: 24
45.90.86.0/24 maxlen: 24
45.90.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:2f:a7:c9:be:f7:9b:d7:54:20:db:ba:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f315dce5c431a5fb48335299e9505524208bb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:a7:c1:f2:25:37:20:c1:c9:e2:7c:82:b0:
7f:79:0f:9f:e0:a5:dd:30:2a:2d:45:f0:86:4f:8d:
31:38:1a:71:c1:e3:88:16:27:c8:4f:8d:31:fd:86:
aa:61:86:d8:61:f4:cc:d6:ba:f8:c5:a7:ad:55:b3:
c6:e6:b4:22:6d:9b:b0:5f:50:21:0d:f4:8d:18:40:
3a:a8:56:6f:0a:8b:93:39:f4:f6:5e:1d:58:9b:ef:
b9:b5:84:72:2f:4a:44:76:ae:f1:26:cc:40:78:5a:
ec:a2:93:3b:56:71:8a:4b:cd:0c:a3:0f:c2:50:5d:
90:62:01:11:1f:07:69:de:c5:a3:c2:d4:83:bd:b0:
87:86:8d:92:e7:d0:5d:7a:14:4f:4a:37:99:b5:a7:
55:d9:59:ae:4d:4e:d6:5f:da:29:bb:1a:dd:ac:6c:
b3:29:9c:b0:89:5b:21:91:44:3f:4d:d2:7a:f6:ac:
20:05:7c:50:70:04:78:b4:1d:7d:15:f3:d6:ef:ff:
d9:fb:d3:c8:b2:4d:a6:49:ca:bf:5d:48:8e:e8:57:
ea:52:e8:a9:49:9b:b5:ad:2d:c7:94:a5:fd:2e:d1:
0a:e8:1c:94:33:a1:39:ca:4b:cf:60:cc:e8:1b:43:
1d:f1:c6:d9:25:20:a9:c5:76:34:21:5a:c0:fe:ab:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:5D:CE:5C:43:1A:5F:B4:83:35:29:9E:95:05:52:42:08:BB:33
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.85.0-45.90.87.255
Signature Algorithm: sha256WithRSAEncryption
bc:2b:98:fb:40:89:9a:83:a6:74:ce:c2:bc:b3:3a:40:56:92:
0b:3a:51:b7:e7:c5:1c:15:39:3e:62:bd:d9:3e:57:ac:d2:c0:
15:23:84:2f:9c:90:43:b4:29:11:b4:06:6a:63:80:af:1e:f9:
51:be:db:9a:38:75:5d:39:ad:76:43:c4:94:cb:73:d7:bd:38:
ae:44:d9:18:48:23:96:b1:30:6c:0c:c4:65:a6:cb:83:1b:8b:
c0:a7:24:bf:1a:be:d6:03:8c:2d:3e:b5:9b:f2:d4:8e:2b:3e:
47:39:7d:b4:30:80:fe:40:49:3c:3b:c6:57:fc:94:20:e2:02:
3e:05:a1:28:56:30:c4:08:ff:53:84:ee:ce:b2:c7:5b:90:32:
26:da:13:72:bf:09:86:99:d1:14:c2:6f:cf:a6:7b:06:eb:89:
4d:31:3e:c5:44:f4:1c:fc:7f:0a:9b:e2:0c:54:15:45:8b:66:
98:be:f4:f7:50:e9:bb:a0:42:ea:96:dc:bc:c6:3f:bf:d0:d1:
01:d2:29:ac:b8:89:48:67:37:84:ac:8a:7c:5c:c3:bb:d5:52:
e9:a3:c4:1b:93:c2:29:7d:3b:f9:2c:b4:0a:bb:2c:73:5b:21:
f8:52:ba:17:b7:bd:6a:25:6e:61:ee:ac:d8:14:0f:e4:c8:f4:
52:5c:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:48:02 2025 by rpki-client