Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/nuABQqmqrGw9brkaftCtQb5FzlA.roa
File: nuABQqmqrGw9brkaftCtQb5FzlA.roa (raw, json)
Hash identifier: TvmNE37Ou7UHEZB3dRNjjxWtGEZiGemq2a0YkJmp33c=
Subject key identifier: 9E:E0:01:42:A9:AA:AC:6C:3D:6E:B9:1A:7E:D0:AD:41:BE:45:CE:50
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01837B5FA16444CD7AD545843FFC411A23E8
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/nuABQqmqrGw9brkaftCtQb5FzlA.roa
Signing time: Mon 26 Sep 2022 19:56:48 +0000
ROA not before: Mon 26 Sep 2022 19:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.25.0/24 maxlen: 24
82.118.28.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
212.2.239.0/24 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7b:5f:a1:64:44:cd:7a:d5:45:84:3f:fc:41:1a:23:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Sep 26 19:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ee00142a9aaac6c3d6eb91a7ed0ad41be45ce50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:9f:f9:15:1e:2f:9a:6f:cb:98:8c:53:5c:
36:dc:e1:f0:88:9b:7e:0b:e1:33:b1:d8:de:a3:49:
61:03:f7:02:11:3f:cf:aa:48:ff:02:a6:85:e7:9a:
3b:b3:2e:17:2e:4f:19:4c:dd:57:ec:34:d1:74:0d:
3b:b8:8c:e9:99:93:89:1d:3b:ce:27:34:8a:d4:76:
77:d8:ff:3e:f6:3e:96:6c:4b:2d:d1:bd:08:a0:16:
41:5f:41:32:f8:2c:48:e0:aa:a2:f7:59:51:92:3e:
91:ec:36:b2:71:75:37:c5:b5:46:ac:eb:26:51:61:
de:a9:c6:18:40:9f:80:79:3e:f9:08:0b:53:e2:9f:
c5:75:e5:94:84:36:7a:c4:a1:e1:b8:5e:8b:49:e1:
af:b7:11:5c:b6:ef:3d:7f:bf:9d:a9:65:6c:cf:f1:
fc:6e:2d:d9:c2:77:7c:96:f2:b5:74:f8:75:6d:58:
7e:8b:95:ab:58:2c:b6:2c:c6:81:e6:36:7a:4c:a2:
7a:b6:ac:dc:15:60:cf:14:a5:6f:72:6d:3a:d2:3b:
16:de:10:c6:27:bb:2c:8c:2d:26:2f:de:ff:65:12:
22:ca:78:e5:34:9b:14:bb:78:9b:85:39:92:ef:e5:
fc:33:03:fe:9e:2d:d8:c6:b5:24:29:e0:19:39:b3:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E0:01:42:A9:AA:AC:6C:3D:6E:B9:1A:7E:D0:AD:41:BE:45:CE:50
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/nuABQqmqrGw9brkaftCtQb5FzlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0/24
82.118.28.0/22
141.98.72.0/24
141.98.74.0/23
212.2.239.0/24
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:71:f0:75:e2:0f:93:33:04:b7:5c:38:58:26:72:b8:c8:32:
ab:65:ce:37:12:0c:b0:24:8f:be:2e:14:15:15:30:7a:f3:da:
3f:b8:de:d6:3b:0c:10:61:b3:73:da:ba:20:27:e1:bf:c8:ea:
8b:21:28:26:6e:b2:b5:ae:42:f6:1e:2b:19:06:d5:50:94:36:
89:70:e8:bf:77:06:4c:5e:cf:bd:55:93:21:aa:38:e9:2d:2a:
b4:87:01:55:92:f4:a6:17:56:3f:b4:44:ca:1d:f1:28:0d:f2:
55:5e:35:9e:10:5a:9a:3a:35:7c:0d:87:69:9f:a7:07:60:ad:
4f:4a:11:b1:48:f7:4f:bf:ab:fc:48:bb:8f:38:6d:b1:81:2d:
72:a9:71:1e:6a:5b:cd:25:48:02:e6:05:1b:88:6e:27:e8:d0:
dc:99:f2:92:f0:7c:a3:48:ef:54:90:9d:58:98:c2:cd:a5:27:
24:e6:26:da:dd:05:b4:3a:96:0f:02:59:f8:60:92:39:2a:4a:
98:98:e6:94:0a:d9:db:d7:16:7d:03:80:ff:a3:23:56:4f:c9:
02:7e:7b:60:c1:b4:b9:3f:25:b1:86:a2:e1:a4:e5:77:24:5e:
ac:66:5e:2f:62:23:4c:94:83:d8:78:4c:b2:63:6b:a0:f8:c7:
d1:60:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:26 2025 by rpki-client