Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/NvAPv-l4cBrLTji2iXv6GfI0gZg.roa
File: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (raw, json)
Hash identifier: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=
Subject key identifier: 36:F0:0F:BF:E9:78:70:1A:CB:4E:38:B6:89:7B:FA:19:F2:34:81:98
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 0194221FF3B734AC2BEEB52879143BF3C332
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/NvAPv-l4cBrLTji2iXv6GfI0gZg.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211541
IP address blocks: 185.244.226.0/24 maxlen: 24
2a10:c640::/48 maxlen: 48
2a10:c640:6170::/48 maxlen: 48
2a10:c640:6575::/48 maxlen: 48
2a10:c640:7573::/48 maxlen: 48
2a10:c640:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:b7:34:ac:2b:ee:b5:28:79:14:3b:f3:c3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36f00fbfe978701acb4e38b6897bfa19f2348198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:a5:ec:04:63:aa:e4:3e:f2:b4:76:91:c2:
06:30:1f:1e:70:7a:5d:6b:9a:1b:7c:ba:fe:3b:b3:
99:1d:3a:c4:44:55:fb:8a:94:8a:df:66:e0:b1:ef:
7a:27:53:c2:c9:ef:1b:85:7b:12:d2:c9:9d:bb:c2:
a8:04:95:e1:01:8c:38:ff:43:09:37:29:96:72:18:
97:fe:fb:93:94:e6:f1:48:e4:05:e3:78:fc:e2:fc:
0a:4a:cd:9c:e5:3d:c6:ce:c1:12:99:4b:ec:b8:aa:
5c:73:19:79:cf:e4:42:14:b8:ee:e8:65:71:13:6f:
47:4b:e3:2f:27:f9:9b:93:d5:49:6c:f3:f1:15:23:
d4:73:c9:ee:f1:13:d0:9a:7c:97:a5:da:2f:4a:05:
21:fd:5c:e7:24:7b:d3:e7:9d:0f:30:14:59:4e:c2:
0f:45:3f:03:f3:00:3d:b0:6b:e3:60:39:19:96:81:
3d:0b:f5:46:89:8c:e8:50:15:ac:2b:a2:97:1b:85:
ec:24:b9:70:49:23:92:c5:60:7d:3d:bc:66:2c:62:
df:dc:11:37:54:c7:f8:eb:f5:89:67:23:3b:25:74:
c1:35:42:f5:d9:19:e4:28:20:bd:20:28:dc:31:99:
cd:fa:ea:1f:e1:ab:9f:80:7e:a9:9f:4b:64:5f:37:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F0:0F:BF:E9:78:70:1A:CB:4E:38:B6:89:7B:FA:19:F2:34:81:98
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/NvAPv-l4cBrLTji2iXv6GfI0gZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.226.0/24
IPv6:
2a10:c640::/48
2a10:c640:6170::/48
2a10:c640:6575::/48
2a10:c640:7573::/48
2a10:c640:dead::/48
Signature Algorithm: sha256WithRSAEncryption
60:c9:45:f5:54:e0:77:88:11:71:1e:6e:a9:e0:f2:84:7b:3c:
74:33:1e:ec:12:62:8e:d1:fa:4c:41:63:0b:60:4b:de:9a:09:
ee:87:0d:fa:e7:11:ef:d0:e5:b3:07:f1:1b:87:7d:ee:1e:c1:
12:09:a0:b8:5c:26:5b:44:11:ad:71:2b:31:e1:8b:49:ba:63:
64:cf:4d:30:8d:db:bc:0d:ac:17:f1:cc:c0:2b:c1:2a:fb:7f:
a5:c4:bb:a3:bb:55:28:fa:3f:97:c1:64:88:c7:59:e4:4e:65:
23:b4:17:03:a7:be:b7:e6:a5:0e:a8:8d:d7:59:77:f7:37:07:
50:39:7b:0e:42:79:68:a8:fe:c6:73:af:e4:ed:e5:fb:c0:d6:
2e:1c:40:95:6e:b3:14:3d:6a:0f:27:1d:db:fd:2a:c0:96:f8:
cc:e4:fa:0f:e5:47:b3:2b:4c:42:9f:a0:d0:2d:e7:a4:77:b7:
85:34:97:cd:8c:5e:da:78:6c:6a:34:29:9a:68:fe:38:8f:ce:
7c:2e:97:46:bf:b2:c1:c0:45:bb:3a:96:d0:16:30:e5:a2:22:
b7:8a:44:19:12:e6:3e:a2:43:37:c1:3a:5b:83:4a:8b:95:a9:
2c:ed:9f:e1:c2:72:4f:1a:f2:fc:15:dc:e7:1c:c0:36:cd:88:
8c:3f:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:44 2025 by rpki-client