Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/nnxcgt04kH1RTUfycq2nkpNB8Jo.roa
File: nnxcgt04kH1RTUfycq2nkpNB8Jo.roa (raw, json)
Hash identifier: lIQYviT6YcojHZlHYWjq82fcuKAH2SBa053jQZ7lWUw=
Subject key identifier: 9E:7C:5C:82:DD:38:90:7D:51:4D:47:F2:72:AD:A7:92:93:41:F0:9A
Certificate issuer: /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial: 01856D6F8BA8411C5D083AC5D0D9F82E4987
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/nnxcgt04kH1RTUfycq2nkpNB8Jo.roa
Signing time: Sun 01 Jan 2023 13:05:04 +0000
ROA not before: Sun 01 Jan 2023 13:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47264
IP address blocks: 185.144.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:8b:a8:41:1c:5d:08:3a:c5:d0:d9:f8:2e:49:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Validity
Not Before: Jan 1 13:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7c5c82dd38907d514d47f272ada7929341f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:e7:d5:c1:20:3e:5a:28:44:b2:fb:7e:e6:
af:fa:ec:49:85:f5:29:51:0a:35:07:3e:15:bd:c1:
9b:44:08:a1:7d:41:9f:f1:bf:49:6c:ba:fb:e0:ad:
fe:22:a3:7d:cc:2e:78:99:09:c0:48:68:eb:93:53:
49:ec:30:b0:56:d2:bd:a3:d2:f1:87:12:7a:10:e7:
9c:58:09:33:cf:21:83:b3:70:4a:29:b7:fe:c7:28:
51:7c:2a:c9:77:2f:4f:8f:07:2a:2b:a9:66:83:a1:
d6:6e:43:fa:f9:f3:6d:95:eb:5f:d0:b8:4d:9b:7b:
fe:c8:6e:6f:72:ae:c3:18:07:4a:5f:64:d8:9e:ad:
c4:a8:af:bd:8f:8f:9a:83:d5:fb:98:65:51:04:bc:
e5:c4:bd:f5:5f:e5:0c:39:25:3d:bb:51:0c:4d:46:
9f:ff:7c:74:68:9f:b9:01:f3:75:61:f9:ad:9b:95:
0f:17:4b:38:26:8f:26:86:0c:c8:07:04:0b:5b:42:
a3:9b:8c:ea:97:cf:a4:74:7f:3c:3c:94:a3:34:1a:
a6:90:fe:91:b6:64:2e:6e:3c:d9:91:2e:2c:38:72:
55:a1:42:4b:82:8c:f4:a2:31:9d:6f:c8:9f:55:28:
27:e0:4d:e9:ca:ff:d1:3f:91:16:61:83:7b:d3:ca:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:5C:82:DD:38:90:7D:51:4D:47:F2:72:AD:A7:92:93:41:F0:9A
X509v3 Authority Key Identifier:
keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/nnxcgt04kH1RTUfycq2nkpNB8Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.108.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fa:9c:48:39:f7:c9:45:4f:70:55:f8:61:5a:ea:d8:35:b3:
15:a8:d1:8f:03:56:39:a0:fb:05:ac:ef:81:88:6a:d5:45:4f:
fe:7d:32:5b:e8:a7:3f:18:b8:0c:d7:23:29:fe:fb:9b:1c:2c:
e1:4c:ed:10:aa:e8:6a:99:21:a3:be:4b:6f:9c:a8:78:9d:3d:
dc:f5:04:5b:1c:e0:95:d9:1f:8d:86:ed:af:b6:d1:84:6f:cd:
e9:63:8b:eb:05:95:af:9f:01:9e:a8:1a:85:9e:4e:9c:cf:eb:
d3:9f:53:45:5f:f9:57:13:ae:3e:19:64:91:3e:60:f4:ed:fb:
88:45:f4:25:ec:ae:ec:f8:ec:3b:7e:b1:90:42:ff:c1:b1:d1:
93:4e:a8:d5:02:f3:97:80:da:f2:b9:b8:67:17:65:e9:b7:de:
05:d2:cc:f7:df:28:d0:a4:05:da:92:94:86:d8:4b:cd:83:80:
69:c4:bd:4f:cf:24:c8:23:1b:19:df:97:27:44:f5:61:5e:54:
5b:cd:03:c8:65:57:fd:0c:74:73:e6:61:f5:e6:0c:6b:1f:d9:
a2:c6:8d:82:53:9f:78:31:5a:7e:54:60:34:0b:f9:c3:80:ec:
25:2d:63:9c:20:bf:82:14:e6:e0:e5:e0:ab:fe:33:7f:05:a7:
bd:c1:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 16:26:23 2023 by rpki-client on console-ams.rpki-client.org