Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/Nc5XHMxVsQLgjRW_aXddFSx-JYs.roa
File: Nc5XHMxVsQLgjRW_aXddFSx-JYs.roa (raw, json)
Hash identifier: uo5Amo+5SWEi3KfBldCjaGq2M+T1gcieIl6FfkE/bOE=
Subject key identifier: 35:CE:57:1C:CC:55:B1:02:E0:8D:15:BF:69:77:5D:15:2C:7E:25:8B
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 018DC5C3CECAEA565BA3F293E29A0A05FB3D
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/Nc5XHMxVsQLgjRW_aXddFSx-JYs.roa
Signing time: Tue 20 Feb 2024 09:06:00 +0000
ROA not before: Tue 20 Feb 2024 09:06:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212301
IP address blocks: 45.67.232.0/24 maxlen: 24
45.67.233.0/24 maxlen: 24
91.230.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:c3:ce:ca:ea:56:5b:a3:f2:93:e2:9a:0a:05:fb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Feb 20 09:06:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35ce571ccc55b102e08d15bf69775d152c7e258b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:41:03:cc:36:e2:c3:72:18:d5:40:41:4d:
ca:51:96:cd:c5:5a:27:df:fc:d4:55:c8:74:19:66:
1d:6b:5e:a6:42:ff:4f:ea:0f:eb:00:6d:bd:7c:34:
41:be:68:8d:11:89:9a:c1:84:13:6d:a8:47:b9:7b:
69:c8:c9:fb:b1:9e:fc:c0:4e:e3:56:91:c3:aa:c2:
31:7c:97:03:9f:05:63:bc:bd:09:1a:c9:c4:1a:ed:
b6:ee:5e:ed:7a:08:91:1e:34:a2:3b:2c:c7:2a:1d:
83:84:3f:86:9a:6c:c5:b8:0c:07:49:89:03:e3:e4:
f0:10:90:ac:1c:57:05:83:47:c0:a0:94:03:83:10:
db:5e:5f:76:eb:82:67:69:08:97:b5:51:0d:06:8a:
ac:4e:a1:cd:d7:a3:af:d8:df:c2:98:81:c6:4a:84:
0c:83:f7:33:72:83:6e:1a:d7:30:2d:b6:24:1a:95:
7f:cc:e7:e3:89:e6:6c:4e:d3:8d:b5:b6:b8:7f:3d:
09:83:0b:b0:59:0c:4f:98:24:9c:00:96:d9:61:a4:
05:46:a6:e7:53:bc:15:e3:95:8e:f4:9d:1c:7c:e9:
18:25:2a:c2:7c:7e:e8:06:e7:6a:99:67:20:fd:cc:
ff:c8:a6:e8:a7:ae:83:15:3f:02:0c:61:a7:82:8b:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CE:57:1C:CC:55:B1:02:E0:8D:15:BF:69:77:5D:15:2C:7E:25:8B
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/Nc5XHMxVsQLgjRW_aXddFSx-JYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.232.0/23
91.230.149.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b9:6e:32:cf:b4:eb:ae:57:3a:d9:a4:3c:4b:ec:ed:54:45:
d1:ab:ff:a8:3d:3a:1b:c6:0d:2e:86:dd:fb:ef:5f:37:64:4d:
8f:cf:d2:ca:39:f7:09:cf:67:73:e9:a1:66:8d:ea:a7:b3:76:
46:a2:7f:0d:3b:25:01:72:28:2a:bc:76:3d:30:c1:66:d1:39:
6c:de:7f:51:ae:9f:e1:65:10:09:01:eb:59:ec:94:fb:62:ae:
14:96:f6:43:ca:30:fe:ec:52:bf:0e:4e:9e:25:04:42:36:1e:
8c:7e:2b:ff:38:9f:e8:95:27:62:fe:8c:80:60:be:d0:a7:44:
4c:45:13:70:8f:50:b1:6b:e4:11:54:4c:be:3b:23:de:b5:a3:
c1:75:4c:20:a3:27:57:5a:db:30:53:70:81:2f:5a:b5:eb:c3:
56:60:e9:c5:a4:67:fc:d1:5b:51:b9:b8:dd:bb:99:01:f6:de:
5a:d7:3e:82:63:34:5f:ce:ee:5e:40:f2:9d:cc:c2:3b:a0:cf:
19:ec:22:2d:04:cd:4d:a4:ca:f3:d5:c8:39:11:5e:db:c2:d7:
84:87:01:f4:24:d8:95:2b:87:75:5a:3c:5f:cb:27:c5:03:21:
c5:88:06:23:2e:c2:96:66:9a:67:12:0f:ae:75:2a:0d:9c:bf:
45:c9:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:21 2025 by rpki-client