Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NFvTEsvHvNtFMqbpltHa7OCKchU.roa
File: NFvTEsvHvNtFMqbpltHa7OCKchU.roa (raw, json)
Hash identifier: nBTrEghYwd0hlaCUAmfj3FvV9zVCZVrjeGnepM7dYQQ=
Subject key identifier: 34:5B:D3:12:CB:C7:BC:DB:45:32:A6:E9:96:D1:DA:EC:E0:8A:72:15
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955E93305735B35CA38CDAC25D54AC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NFvTEsvHvNtFMqbpltHa7OCKchU.roa
Signing time: Mon 02 Jan 2023 08:24:52 +0000
ROA not before: Mon 02 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59436
IP address blocks: 46.3.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5e:93:30:57:35:b3:5c:a3:8c:da:c2:5d:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=345bd312cbc7bcdb4532a6e996d1daece08a7215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:c2:be:02:a4:a0:89:b7:87:90:6d:83:c3:
a4:84:6c:79:26:5f:ad:ae:c1:de:fe:78:1f:88:df:
39:8c:16:e8:ff:7d:0f:7a:f3:9f:87:8b:65:03:db:
ec:da:29:3e:22:5e:60:6a:56:f7:fa:96:1b:35:84:
b6:fb:32:6f:ff:b8:9f:31:7c:57:b0:13:ca:8c:a9:
09:3b:02:41:97:83:2a:b0:b2:6e:b3:32:27:36:07:
f0:78:f5:73:b2:98:93:d7:a5:0f:15:50:f7:2a:37:
89:9c:86:90:a9:b2:57:43:18:63:1b:fa:58:41:55:
00:1e:57:05:4c:d4:90:d4:c6:c8:07:0b:85:42:13:
e1:0c:92:3c:c8:f2:97:1c:e2:09:0f:a6:dc:c7:a7:
26:02:cb:af:a9:ad:2f:ac:05:fe:50:cf:58:80:42:
92:03:66:e0:d1:21:75:88:d5:50:a5:c4:d3:35:a2:
d4:60:16:37:80:f2:9a:d3:56:bc:70:b5:84:6b:8c:
97:78:fb:6b:99:2b:48:ad:31:65:90:29:86:f3:89:
84:e1:e7:ce:2d:97:ba:bb:e8:9e:ca:27:c4:ca:5b:
8e:64:2f:da:ee:51:46:d2:17:f6:1e:04:fc:07:83:
28:ca:3a:6c:b6:d4:8a:75:ba:4d:2d:68:6b:b6:44:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5B:D3:12:CB:C7:BC:DB:45:32:A6:E9:96:D1:DA:EC:E0:8A:72:15
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NFvTEsvHvNtFMqbpltHa7OCKchU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.242.0/23
Signature Algorithm: sha256WithRSAEncryption
67:61:3e:b5:21:31:aa:b9:14:02:f2:24:43:c2:8d:51:5a:2c:
82:48:ab:46:5b:32:62:5f:51:1a:14:44:d0:f6:0e:14:5c:55:
88:aa:a7:d9:7a:44:4f:0a:87:e2:4e:e0:f8:24:a0:5f:55:18:
8b:ef:06:17:04:07:42:f8:04:a9:2e:09:fb:74:4f:f0:cb:d4:
cc:1c:18:11:51:8e:09:9b:04:81:7a:cf:76:d1:38:87:7e:4e:
37:3f:7d:c9:c3:75:69:98:aa:e1:2b:85:0a:5f:6b:db:4c:13:
2f:26:ab:fd:e6:50:f1:aa:22:35:89:d5:c8:67:d1:28:79:ac:
69:1a:71:c3:23:21:b1:72:d8:91:b6:67:19:d9:47:f8:1a:1a:
3f:e8:01:bc:a4:5c:20:2d:6c:96:69:1e:a8:61:25:45:5d:7b:
e1:01:68:3f:17:1c:35:c7:7a:6f:15:f4:c2:55:b8:06:0f:b3:
2b:d5:d7:94:fb:2e:3a:5d:e0:be:f6:1a:2d:88:5f:ef:7d:fb:
bd:e5:88:a1:50:cf:22:38:cb:b5:cf:63:08:6d:97:a4:e5:56:
ae:97:b3:dc:45:c8:61:38:d5:8f:dc:19:f8:6d:44:96:87:fa:
2f:53:5a:4b:69:71:10:d2:08:f9:0c:50:f4:96:d5:8d:99:e0:
27:4c:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:52 2025 by rpki-client