Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/nvYcptlp0PUhINL8di32N1PMAlE.roa
File: nvYcptlp0PUhINL8di32N1PMAlE.roa (raw, json)
Hash identifier: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=
Subject key identifier: 9E:F6:1C:A6:D9:69:D0:F5:21:20:D2:FC:76:2D:F6:37:53:CC:02:51
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0194258EFF166FDA20BE7958C0DD76664B5A
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/nvYcptlp0PUhINL8di32N1PMAlE.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35085
IP address blocks: 45.12.184.0/24 maxlen: 24
2a0e:b700::/32 maxlen: 48
2a0e:b701::/32 maxlen: 48
2a0e:b702::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ff:16:6f:da:20:be:79:58:c0:dd:76:66:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ef61ca6d969d0f52120d2fc762df63753cc0251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:a0:95:a6:1b:a4:0d:cc:c9:e9:e4:5a:da:
ef:5c:fd:74:e6:7e:18:9b:23:10:96:84:4a:55:62:
6b:a5:db:74:53:ff:e1:3d:b7:f3:24:da:2d:1d:4d:
18:be:d6:7d:b3:99:4c:d8:b5:57:df:39:36:00:6a:
39:f8:9d:e9:ac:43:b0:23:2f:64:5e:58:c5:a5:d1:
4a:b9:2e:75:59:ea:05:b6:ff:04:dc:8e:e5:4e:f4:
0c:2d:37:6b:e8:0b:a7:d8:98:d5:c8:b9:63:c7:63:
5c:0f:2d:0d:ea:06:4a:0a:a7:6a:fb:8b:f1:87:3c:
5b:bc:ac:4f:14:3d:2d:0c:30:19:a8:77:2f:4e:f7:
77:05:84:11:96:e5:7c:e6:c1:5d:fc:c2:a9:8c:21:
66:4e:14:5a:5f:5f:2b:62:6b:95:99:de:83:bf:2e:
9d:6e:8b:68:4e:e0:89:eb:83:9d:2d:fa:66:fd:cb:
0d:08:0d:c5:51:f8:88:f0:b3:0b:47:49:57:6c:f8:
52:a8:15:ec:30:47:54:c8:2f:6f:83:1c:99:c2:82:
f8:f4:da:6b:3b:5e:73:bc:3d:09:75:f6:8e:e8:e1:
a7:22:13:98:2a:54:61:f1:d9:75:07:a7:5a:8b:f3:
c7:5a:d3:0e:bd:d2:64:a0:4a:9e:b0:62:28:0a:bc:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F6:1C:A6:D9:69:D0:F5:21:20:D2:FC:76:2D:F6:37:53:CC:02:51
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/nvYcptlp0PUhINL8di32N1PMAlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.184.0/24
IPv6:
2a0e:b700::-2a0e:b702:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
85:57:e3:b7:39:41:a7:c9:dd:32:60:bf:2f:78:1f:8b:75:c2:
55:b8:44:b5:6f:d3:4c:3e:f9:a7:aa:b0:fd:fa:57:6e:eb:a7:
1d:2f:d5:fa:66:2c:74:79:2c:ca:ee:49:8f:ca:4e:f0:c6:9f:
86:bf:3a:8c:71:13:22:0b:86:ac:ef:79:ef:f8:01:a9:1c:4d:
b8:db:cc:ac:78:bb:70:ba:54:bd:72:f4:45:67:70:9b:7f:eb:
c2:0a:f9:06:a2:55:e7:a3:e9:fa:85:ad:56:c8:68:cf:56:32:
fe:41:40:11:52:29:91:65:1b:e1:7c:dd:fe:31:35:74:a6:2b:
f1:b4:f0:2e:e6:b4:6e:3d:b0:6b:bf:fc:01:56:76:43:50:19:
3d:5b:3e:cc:fd:6a:ca:10:74:76:32:c8:f3:76:10:7d:bf:6e:
6e:4f:b8:d4:61:34:23:13:46:f8:28:52:32:a9:1b:c0:ae:24:
6f:79:e8:6d:2c:29:90:cf:94:2f:17:60:d6:3e:fd:e6:f8:a4:
9a:93:f5:64:c4:96:9c:b0:b5:ad:34:51:59:7b:f6:67:7d:cb:
8c:df:75:8a:37:13:d5:de:d7:cf:0a:13:8d:ef:07:e1:7b:20:
2e:ce:38:d0:12:6f:e6:e4:dc:29:33:1e:13:f5:5e:b5:de:2d:
5d:73:71:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:40:11 2025 by rpki-client