Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/NTmgREoQ3J_OiEvluSfwt5hMVyc.roa
File: NTmgREoQ3J_OiEvluSfwt5hMVyc.roa (raw, json)
Hash identifier: 0/OVnZdM3MilGIlb8u1+ItiKhyHjfIaQRbao0IELDVk=
Subject key identifier: 35:39:A0:44:4A:10:DC:9F:CE:88:4B:E5:B9:27:F0:B7:98:4C:57:27
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 01856C783B92EE8016870D4379D489D07442
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/NTmgREoQ3J_OiEvluSfwt5hMVyc.roa
Signing time: Sun 01 Jan 2023 08:34:56 +0000
ROA not before: Sun 01 Jan 2023 08:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 45.132.224.0/24 maxlen: 24
45.132.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3b:92:ee:80:16:87:0d:43:79:d4:89:d0:74:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 08:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3539a0444a10dc9fce884be5b927f0b7984c5727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:57:39:50:45:b0:81:6b:cc:57:e5:28:42:
1b:8c:0b:5c:ff:fd:02:82:6d:8a:37:9d:21:58:5a:
85:aa:84:5b:c9:dd:1a:38:c0:b3:98:17:31:f8:c4:
0f:26:a3:cb:47:c7:d8:0c:89:ee:6f:c7:8c:c6:ef:
5e:f0:84:db:ed:f9:6b:f1:5e:98:33:12:38:62:fc:
79:28:3f:3a:11:d6:38:03:52:a8:ae:c0:93:01:8b:
9b:e3:6f:65:1d:30:4b:f6:59:04:5d:2d:cf:e9:5e:
c5:5c:c7:38:9f:d9:35:1c:6b:9c:ff:f0:98:d9:54:
69:5b:4d:7b:7a:f4:b5:63:3c:83:97:31:45:a1:ac:
e9:ef:e3:b2:b8:07:08:62:a1:c5:4a:69:a9:cb:22:
d9:7a:6b:ee:f6:48:27:51:86:a2:b4:c6:3e:51:8b:
75:a5:e2:4d:71:fa:8b:e8:f1:c3:73:04:f5:45:49:
9a:b5:e3:c8:fd:24:74:b1:27:b1:4c:5e:09:cb:28:
4b:0c:82:c3:4e:ff:5f:d7:18:6e:f2:95:01:e2:3c:
c1:4e:61:fb:75:71:51:a1:74:a1:d9:c7:07:be:19:
0d:f4:be:fc:f6:17:04:32:83:f0:e4:c6:85:6b:77:
00:36:f3:30:7c:29:2e:a0:6e:d1:02:21:5f:8d:c6:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:A0:44:4A:10:DC:9F:CE:88:4B:E5:B9:27:F0:B7:98:4C:57:27
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/NTmgREoQ3J_OiEvluSfwt5hMVyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.224.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:ad:17:e9:22:cb:92:ba:e0:82:1d:f5:65:32:1e:ca:6a:aa:
f0:1b:67:dd:39:54:a3:6e:3c:da:11:af:1f:bd:4a:56:a6:de:
f5:63:09:08:77:31:55:7b:c7:74:48:6d:65:58:38:52:74:d1:
30:15:08:c6:03:cb:dd:80:8c:fc:59:60:e1:17:3d:2e:b0:e8:
d5:ff:10:65:b6:0e:27:9a:a0:db:3d:d5:3d:df:36:62:c5:32:
9d:7b:76:9f:ad:d1:91:61:48:2e:b8:e0:11:b4:15:b1:65:78:
c6:cc:2b:2b:8a:0b:ed:25:64:52:19:53:b4:92:b0:ed:38:37:
7d:cb:5c:43:de:ed:55:48:df:b7:18:b4:3b:4b:53:c1:07:16:
ec:3b:4f:61:2f:88:cb:72:5c:d6:19:73:be:6c:59:f5:3c:f0:
e2:22:0b:5f:b3:45:ca:c7:41:9d:9d:72:84:12:da:21:94:37:
44:1c:e8:b7:fd:3f:5d:ec:1c:d1:6c:f7:15:91:4e:21:69:7a:
3d:a4:ff:d2:e8:80:04:cd:cc:42:01:d6:ca:b4:bc:0f:33:ba:
42:4b:a8:91:98:dd:17:2d:c7:e5:92:02:22:b1:8d:f9:23:c2:
04:66:38:24:8f:a7:8c:cf:b2:a6:08:05:60:a5:01:14:41:8b:
ed:4c:5f:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseDuS7oAWhw1DedSJ0HRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm
OWYwN2UwHhcNMjMwMTAxMDgzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM5YTA0NDRhMTBkYzlmY2U4ODRiZTViOTI3ZjBiNzk4NGM1NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5pXOVBFsIFrzFflKEIbjAtc//0C
gm2KN50hWFqFqoRbyd0aOMCzmBcx+MQPJqPLR8fYDInub8eMxu9e8ITb7flr8V6Y
MxI4Yvx5KD86EdY4A1KorsCTAYub429lHTBL9lkEXS3P6V7FXMc4n9k1HGuc//CY
2VRpW017evS1YzyDlzFFoazp7+OyuAcIYqHFSmmpyyLZemvu9kgnUYaitMY+UYt1
peJNcfqL6PHDcwT1RUmatePI/SR0sSexTF4JyyhLDILDTv9f1xhu8pUB4jzBTmH7
dXFRoXSh2ccHvhkN9L789hcEMoPw5MaFa3cANvMwfCkuoG7RAiFfjcbdlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDU5oERKENyfzohL5bkn8LeYTFcnMB8GA1UdIwQY
MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt
ZTY4ZjZjZjJjMGQyLzEvTlRtZ1JFb1EzSl9PaUV2bHVTZnd0NWhNVnljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy
LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYTgMA0G
CSqGSIb3DQEBCwUAA4IBAQC/rRfpIsuSuuCCHfVlMh7KaqrwG2fdOVSjbjzaEa8f
vUpWpt71YwkIdzFVe8d0SG1lWDhSdNEwFQjGA8vdgIz8WWDhFz0usOjV/xBltg4n
mqDbPdU93zZixTKde3afrdGRYUguuOARtBWxZXjGzCsrigvtJWRSGVO0krDtODd9
y1xD3u1VSN+3GLQ7S1PBBxbsO09hL4jLclzWGXO+bFn1PPDiIgtfs0XKx0GdnXKE
EtohlDdEHOi3/T9d7BzRbPcVkU4haXo9pP/S6IAEzcxCAdbKtLwPM7pCS6iRmN0X
LcflkgIisY35I8IEZjgkj6eMz7KmCAVgpQEUQYvtTF/b
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:48 2025 by rpki-client