Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NX9Am1NTSlrD-3yRTQCqAG_LVuQ.roa
File: NX9Am1NTSlrD-3yRTQCqAG_LVuQ.roa (raw, json)
Hash identifier: oZm6EFTCOxMT2DyUVS9abPLVdNMYmzm7BAE6an6lImg=
Subject key identifier: 35:7F:40:9B:53:53:4A:5A:C3:FB:7C:91:4D:00:AA:00:6F:CB:56:E4
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 09282283
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NX9Am1NTSlrD-3yRTQCqAG_LVuQ.roa
Signing time: Sat 01 Jan 2022 12:58:42 +0000
ROA not before: Sat 01 Jan 2022 12:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25408
IP address blocks: 185.42.80.0/22 maxlen: 24
37.112.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153625219 (0x9282283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=357f409b53534a5ac3fb7c914d00aa006fcb56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:5e:5e:e5:a1:c5:4d:2d:af:bf:ba:e8:73:
42:7a:05:ed:75:14:f6:f6:44:d4:f5:1e:13:cd:8f:
e3:54:c9:0b:e9:8e:84:30:a3:d1:5d:fb:58:ee:04:
dd:e5:62:0e:e7:66:6c:77:fc:82:47:d1:2b:5e:35:
e3:ec:3b:a3:e0:b3:0d:9a:ff:fc:54:99:d8:3e:b3:
bb:c7:a6:03:9a:d5:8e:53:e5:d1:ba:6c:1f:e1:2d:
9e:ad:c4:5d:ff:c6:ae:80:0b:1c:ca:15:4b:c6:29:
2a:4b:33:29:b5:ce:da:9b:9d:2e:56:54:dd:cc:a2:
22:35:87:dd:c8:e5:9d:af:2c:6f:80:c0:d1:a3:6d:
7a:38:cd:ea:01:b2:c2:98:45:d6:93:1c:17:b6:21:
02:10:37:30:87:b7:6c:ec:79:56:75:c6:25:11:1c:
31:3c:58:a6:cb:a3:de:18:ac:ca:f3:20:22:4c:e4:
37:fa:05:e2:78:94:a0:64:c0:f8:19:e1:04:c8:f9:
e7:33:31:8d:c7:af:87:5a:74:17:bb:d0:4b:78:be:
5b:b5:b6:33:3c:9e:11:5a:04:2d:d0:e2:63:ca:9a:
82:7b:ac:21:d6:f9:4c:98:e5:5f:45:19:49:bf:90:
99:fa:e1:c3:02:e7:12:48:e0:31:99:6d:ea:3a:e6:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:40:9B:53:53:4A:5A:C3:FB:7C:91:4D:00:AA:00:6F:CB:56:E4
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NX9Am1NTSlrD-3yRTQCqAG_LVuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.112.248.0/21
185.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
00:15:ab:fe:9f:2b:7e:26:86:96:c6:37:34:12:c1:79:20:00:
e1:5c:32:e0:cd:c1:ff:37:ba:1c:82:fd:ee:b2:94:ef:38:5b:
ae:da:cf:d4:0a:2a:17:0e:06:fb:a1:af:07:a9:14:8d:eb:b0:
50:a2:3d:22:30:2e:e8:2e:7e:6a:f8:9f:b5:0a:95:e5:05:6d:
eb:72:93:cc:6d:9c:da:36:a0:39:00:0f:bd:16:46:fb:b7:fa:
39:73:22:ad:dc:9a:60:59:b5:3f:6f:d2:d0:ad:cb:98:f9:01:
17:ab:04:88:b7:e6:a9:37:4f:ae:20:3a:d9:bd:d3:ce:37:bd:
fb:9f:28:01:a9:fd:ef:68:06:6c:7e:d1:f5:d8:6c:63:55:c1:
88:55:aa:e8:0c:44:bf:5a:ea:b0:68:7b:9e:f9:24:30:e9:bd:
e5:1f:08:c1:15:52:20:0b:3b:a2:c5:6d:20:a9:10:c9:3f:a2:
34:15:ea:3e:b0:96:38:69:60:ac:5d:41:b3:e9:f7:f7:ef:26:
73:25:7a:c8:54:e3:63:53:eb:10:86:0c:b2:20:0c:bf:11:92:
05:f9:6d:6d:bc:39:97:fa:95:6b:f5:19:f5:24:f9:34:fa:69:
02:67:10:2b:dd:c4:f8:e4:7b:f7:6c:dc:3a:a9:ce:d6:03:5c:
c5:b6:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:53 2025 by rpki-client