Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/NyqmGWcwjvel--YJ2e8SBJYJPBY.roa
File: NyqmGWcwjvel--YJ2e8SBJYJPBY.roa (raw, json)
Hash identifier: 9IVR5QTHOEI/uB9inNplrgIn8sRfZYZn6ILqcgfO7mA=
Subject key identifier: 37:2A:A6:19:67:30:8E:F7:A5:FB:E6:09:D9:EF:12:04:96:09:3C:16
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 044BD58E
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/NyqmGWcwjvel--YJ2e8SBJYJPBY.roa
Signing time: Sat 01 Jan 2022 07:53:09 +0000
ROA not before: Sat 01 Jan 2022 07:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133466
IP address blocks: 149.226.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72078734 (0x44bd58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 1 07:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=372aa61967308ef7a5fbe609d9ef120496093c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:3d:79:64:0b:15:a1:27:ff:76:9d:ba:ac:
b1:7f:09:7f:0a:16:d9:c0:da:9a:4d:a0:d0:c4:da:
71:fa:bb:01:96:fa:1c:b0:a2:95:79:11:ca:a9:94:
cd:de:70:41:f2:1b:a7:de:d1:0b:c9:97:f7:ce:b0:
df:1a:7d:05:71:c0:cb:c7:bd:98:17:9e:6e:da:98:
bb:41:a0:24:a8:e6:df:e7:f3:c5:33:1e:42:3c:97:
35:22:35:f9:3e:9c:c3:a3:94:b8:95:73:4f:05:81:
46:a7:23:67:95:4a:6a:64:e1:4d:26:88:de:4d:a3:
f2:6f:9e:1a:00:ae:b4:b2:96:1b:b3:74:3c:45:8e:
0d:cc:6a:9f:41:a4:5c:09:d1:5e:5b:bf:f0:e8:05:
8d:a5:ae:ae:fd:32:7f:52:2a:86:b1:e0:93:59:af:
3c:32:19:f2:2e:df:cb:38:36:05:6f:81:77:b4:0c:
8e:c2:ac:e1:60:57:e0:10:65:e5:48:a6:b6:a4:bc:
67:4e:8e:00:a9:01:80:c6:4e:ac:93:79:4b:14:bd:
64:0f:e1:e6:45:84:44:c9:47:5e:8b:8a:73:a3:a0:
3a:62:b5:9d:27:b0:3e:28:de:30:97:25:06:84:e1:
e2:c9:1a:4a:a9:75:26:da:82:93:83:f4:e2:33:93:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:A6:19:67:30:8E:F7:A5:FB:E6:09:D9:EF:12:04:96:09:3C:16
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/NyqmGWcwjvel--YJ2e8SBJYJPBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.192.0/21
Signature Algorithm: sha256WithRSAEncryption
78:d2:8e:ff:c6:00:b0:38:59:ee:d2:b3:b1:f1:af:a9:96:a5:
a3:94:b1:ea:97:af:f6:39:a3:e4:12:6d:ca:b6:08:e5:0b:16:
5f:fc:af:56:5a:7f:66:4b:5d:bd:71:98:50:c4:c5:8a:a4:ea:
c0:9b:d4:ba:b6:c5:b9:77:fa:2a:5c:34:d9:6e:86:b5:52:b9:
d5:07:1e:78:18:7d:92:10:da:59:66:db:09:fa:92:d1:a2:ea:
b7:75:dc:f7:cb:fc:f5:0d:3d:f9:90:ba:bb:29:8f:fa:1b:8f:
74:d8:13:c4:74:2f:24:6f:3f:81:81:b3:05:f3:d7:81:99:0b:
b8:7d:ea:0d:c5:fb:40:a2:7c:d6:1e:a9:79:3a:ca:f9:b9:33:
a9:f3:a4:5c:54:cc:f4:56:08:29:55:ab:09:d8:ef:72:c6:0b:
53:3f:a0:88:23:d3:0b:3d:ec:a0:39:f3:0f:92:2e:c6:27:1c:
cc:b0:fe:ac:35:ab:b7:d1:75:17:a9:1b:50:4a:e6:50:72:da:
32:fb:dd:88:4c:d5:85:71:db:99:0e:3c:2f:f8:21:df:5d:d6:
c1:e7:5f:3e:3b:de:31:a2:95:75:fa:7a:e7:70:b5:f2:d7:96:
07:10:c9:97:6b:08:76:a2:22:2c:a0:fa:4d:5b:6a:e1:0d:c7:
20:3d:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:15 2025 by rpki-client