Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/NlBtqnYJtJBhX51iIAVk8A7KZ1k.roa
File: NlBtqnYJtJBhX51iIAVk8A7KZ1k.roa (raw, json)
Hash identifier: Uks3cXJ92S5uvyc3SpyosJwbSXNKfzOLXsOnxXGT2Bg=
Subject key identifier: 36:50:6D:AA:76:09:B4:90:61:5F:9D:62:20:05:64:F0:0E:CA:67:59
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0189BB5812581465A0E20D77BCC0ADF48C96
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/NlBtqnYJtJBhX51iIAVk8A7KZ1k.roa
Signing time: Thu 03 Aug 2023 12:20:58 +0000
ROA not before: Thu 03 Aug 2023 12:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.253.80.0/21 maxlen: 21
185.21.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:58:12:58:14:65:a0:e2:0d:77:bc:c0:ad:f4:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Aug 3 12:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36506daa7609b490615f9d62200564f00eca6759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:12:c9:96:e4:a9:63:29:4c:ba:06:3a:f4:
98:a7:63:cb:2f:84:12:7e:a7:61:6d:82:c9:f5:93:
10:b3:27:3e:7e:b4:62:fc:c0:54:24:d9:4e:47:72:
dc:31:4c:98:ca:af:f4:43:a6:03:b1:c4:a7:69:e6:
23:f7:15:af:c3:84:24:1d:80:26:2f:22:eb:c9:68:
5c:bf:a6:47:b1:b7:bf:1c:43:b0:7b:f1:0c:04:48:
e8:c0:f6:c4:b2:84:16:1b:fa:c7:a7:ea:ca:82:a3:
2f:82:23:69:d6:73:1a:32:4c:45:9b:1b:07:09:af:
e4:b9:45:7a:eb:53:59:f5:7c:c1:d9:57:15:fd:a4:
75:50:34:78:0e:2a:5a:01:6d:ca:5f:f1:6e:7b:6d:
27:a9:c1:38:f6:8c:54:d7:26:13:f7:3b:4c:de:13:
b0:22:89:03:12:57:6a:d2:94:83:d2:fa:f6:e9:49:
75:1f:74:40:5b:65:e3:80:30:7c:98:b1:47:c9:0a:
a5:eb:2b:b2:f2:17:d5:b5:b6:c1:3b:c7:ba:8c:fb:
e5:77:9a:fa:f1:a1:f3:37:24:a9:4c:49:01:65:4c:
0a:0b:b8:aa:a0:81:85:65:60:80:84:37:96:4f:14:
a6:9a:81:68:9b:1e:49:70:d8:89:9c:0c:ef:14:69:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:50:6D:AA:76:09:B4:90:61:5F:9D:62:20:05:64:F0:0E:CA:67:59
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/NlBtqnYJtJBhX51iIAVk8A7KZ1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.80.0/21
185.21.120.0/22
Signature Algorithm: sha256WithRSAEncryption
ee:7d:13:9a:cc:a4:7f:00:13:be:96:6f:d6:92:60:d9:f2:cb:
a6:25:16:a0:3a:56:7a:98:fb:24:f1:15:fd:d7:a2:e7:aa:1d:
9e:80:5a:a6:2a:aa:2d:d7:d1:58:33:bb:c1:4f:d4:3e:4d:20:
07:b1:6b:91:7a:56:74:61:07:1e:d8:89:c6:43:33:8b:06:3a:
c4:95:57:3e:ec:fb:ba:0c:ec:e2:fb:19:d7:ee:fb:2c:2c:8c:
be:49:a6:82:82:70:05:4c:74:71:19:77:f5:8e:ac:5a:a1:a1:
d8:54:39:56:42:6c:2e:20:97:92:09:5a:69:90:92:6c:a5:61:
26:dc:b3:5a:0d:46:8e:56:68:f7:79:a6:42:1e:c0:eb:37:60:
15:ac:35:11:d4:f2:4f:f6:87:47:ae:17:ba:ec:e3:e9:c2:e7:
22:03:de:e5:8d:f9:1d:2c:6f:11:cd:8d:98:b2:84:48:72:ed:
0c:00:0b:27:b3:16:01:48:d5:bd:af:ec:de:e0:03:df:1a:38:
ff:50:19:e8:79:b0:d5:06:e9:60:52:6b:4c:e4:45:1b:b5:c9:
91:69:8e:87:03:3d:be:68:95:f8:59:84:9c:ae:22:1a:10:7a:
17:28:8c:8e:7c:41:11:d9:bd:d2:82:11:7e:33:0b:66:be:08:
c3:1f:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:18 2025 by rpki-client