Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/nbvgln4lsTBJ1D1goATHTljgjao.roa
File: nbvgln4lsTBJ1D1goATHTljgjao.roa (raw, json)
Hash identifier: kfsKG8NQKUev6cf0m77pdmmrJ3CSeZEYaQRTfFo7NvQ=
Subject key identifier: 9D:BB:E0:96:7E:25:B1:30:49:D4:3D:60:A0:04:C7:4E:58:E0:8D:AA
Certificate issuer: /CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Certificate serial: 01857142EC2A0C7957A52A523A860EBFDDD6
Authority key identifier: 9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/nbvgln4lsTBJ1D1goATHTljgjao.roa
Signing time: Mon 02 Jan 2023 06:54:49 +0000
ROA not before: Mon 02 Jan 2023 06:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56681
IP address blocks: 46.229.241.0/24 maxlen: 24
46.229.242.0/24 maxlen: 24
46.229.250.0/24 maxlen: 24
46.229.247.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:ec:2a:0c:79:57:a5:2a:52:3a:86:0e:bf:dd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
Validity
Not Before: Jan 2 06:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dbbe0967e25b13049d43d60a004c74e58e08daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:58:00:d7:33:ce:80:44:90:de:76:bc:1f:
cb:2f:b5:16:e9:62:d9:85:bc:18:f7:ac:c0:ed:98:
24:0f:d3:bb:57:26:ad:84:2e:81:b6:d9:49:5a:1b:
4b:d8:c8:36:a0:78:fe:45:69:b7:8b:3a:a7:6b:33:
c1:06:db:5c:84:c3:7e:c1:1e:5f:07:45:0d:9d:7f:
16:df:d2:7a:fb:26:d9:d0:5b:6a:7c:89:5f:f3:bd:
89:45:dc:11:70:fa:85:73:e1:f2:fa:74:01:64:3e:
5a:ca:10:8d:19:94:89:25:c5:10:e9:d4:ba:f9:52:
86:d6:9d:63:d0:a9:8b:76:02:75:3a:18:eb:2b:33:
f5:fd:d3:a4:e5:d5:cb:5d:da:20:bc:04:26:e6:50:
2c:b4:a9:6c:83:85:3e:b6:fd:7c:d0:38:9d:95:27:
d9:cd:31:5f:02:60:f1:56:fc:3c:06:ed:00:5f:98:
fa:82:94:a8:5d:8c:a6:1e:62:0c:6a:81:71:60:d3:
2e:34:a1:1d:22:fc:ac:01:f3:fd:2f:8b:cd:25:64:
45:74:7f:9a:8e:86:2d:61:06:ff:39:88:b5:75:e2:
ff:43:20:e2:dc:a6:8d:de:9a:3c:42:91:fb:e2:b3:
54:64:f2:9b:7c:19:02:7f:f3:c4:5e:d3:91:99:54:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:E0:96:7E:25:B1:30:49:D4:3D:60:A0:04:C7:4E:58:E0:8D:AA
X509v3 Authority Key Identifier:
keyid:9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/nbvgln4lsTBJ1D1goATHTljgjao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.241.0-46.229.242.255
46.229.247.0/24
46.229.250.0/23
Signature Algorithm: sha256WithRSAEncryption
55:35:8f:03:fe:7d:9d:56:81:1b:54:ec:42:cc:11:d4:42:18:
5e:ba:52:ab:dd:8b:20:13:73:0d:0b:71:71:67:ac:a1:e9:26:
ab:69:6b:ea:6e:42:7c:0f:00:06:99:d9:ed:06:de:b8:19:db:
3b:71:f5:aa:36:13:d7:24:4e:4c:58:c7:c0:77:be:6a:67:07:
3c:03:ca:bf:8c:21:31:93:5d:6d:d6:5a:7d:da:6e:09:90:76:
e2:19:18:bc:d3:35:9c:8a:05:f8:d2:67:a9:12:bc:0f:10:cf:
38:65:52:9a:25:e8:63:75:a0:89:be:43:d8:0b:d5:2d:a4:fa:
40:4c:c2:ed:d4:7e:b9:db:1c:73:50:d2:cd:6b:25:01:ff:aa:
60:2d:bb:6d:c8:f0:34:0d:d3:60:0a:46:fd:52:19:f3:01:9d:
7d:84:ee:a9:10:ba:d8:b6:d2:1f:1e:50:9e:b1:b7:46:50:03:
36:ca:63:59:0c:22:3e:75:e6:b8:d7:5d:f1:9d:08:5d:6b:7b:
31:f5:86:77:8b:9b:dc:89:61:01:6f:b2:ca:60:23:88:6b:b2:
9b:23:3d:5d:f3:41:79:b6:76:e1:fd:59:dd:34:38:e0:b7:b5:
77:39:29:5c:cf:99:0e:17:53:ed:7b:2c:fb:ac:73:54:d5:a2:
c9:06:d7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:57 2025 by rpki-client