Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NZAt_fpmLoRifUOY2uv-LhhREEo.roa
File: NZAt_fpmLoRifUOY2uv-LhhREEo.roa (raw, json)
Hash identifier: fn1zpqx+DIJ7T2ozY9UGaL/ePxTvclUgdL3h3m0+Qg8=
Subject key identifier: 35:90:2D:FD:FA:66:2E:84:62:7D:43:98:DA:EB:FE:2E:18:51:10:4A
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0190A4DFE33AFA56AFA75585A028518862D1
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NZAt_fpmLoRifUOY2uv-LhhREEo.roa
Signing time: Fri 12 Jul 2024 02:57:34 +0000
ROA not before: Fri 12 Jul 2024 02:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a4:df:e3:3a:fa:56:af:a7:55:85:a0:28:51:88:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 12 02:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35902dfdfa662e84627d4398daebfe2e1851104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:c9:bb:3a:ec:37:d8:56:fe:da:63:45:4f:
28:eb:1b:4d:1a:cf:83:84:8f:e3:73:45:5a:f8:52:
46:5e:db:17:77:8c:9a:56:6e:6c:60:0a:a0:0f:16:
13:e5:8e:2f:03:e8:f6:b9:1b:38:57:85:93:fb:26:
c7:86:38:bf:6f:3c:90:3d:e4:92:12:23:42:50:a1:
c1:e7:85:23:80:e4:d2:b8:d2:f3:53:44:ac:ac:95:
b5:1e:a6:1c:db:85:90:48:21:c9:08:73:99:22:6a:
c7:98:04:ab:21:2a:8e:84:f2:30:12:da:5d:bf:ce:
a2:e5:5d:8a:8a:ea:47:80:ce:26:55:2c:b3:3d:7e:
59:60:99:68:da:d4:1a:6b:ba:76:92:6f:fa:b3:d0:
62:8b:2f:b3:11:70:3d:e5:87:6d:02:65:88:e1:89:
ff:65:0f:21:c3:a7:3d:ba:9c:e8:c7:dd:d2:86:eb:
a8:0e:4a:c3:87:25:06:bc:8a:45:06:93:40:ff:3e:
2a:31:80:86:f9:8e:cf:6e:8c:87:16:79:fc:6d:1c:
15:3b:30:2d:f6:b6:7a:02:40:f6:ec:65:7e:23:eb:
42:12:27:75:38:9a:7d:8d:66:26:89:c6:67:d9:8d:
9e:bf:e3:83:b6:f2:90:ed:34:7d:42:28:bd:3d:b7:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:2D:FD:FA:66:2E:84:62:7D:43:98:DA:EB:FE:2E:18:51:10:4A
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NZAt_fpmLoRifUOY2uv-LhhREEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.147.0/24
37.49.151.0/24
94.74.147.0/24
94.74.168.0/24
94.74.173.0/24
109.203.161.0/24
176.46.129.0-176.46.130.255
176.46.133.0-176.46.135.255
Signature Algorithm: sha256WithRSAEncryption
8b:0b:9a:c1:9d:3f:38:46:a1:8a:00:b6:72:d1:16:f6:b8:7e:
95:68:13:72:74:0b:be:44:8b:f5:3e:05:96:5f:66:e5:09:ed:
7d:70:fd:03:84:9b:68:b1:a6:a6:b6:53:bb:a7:ee:dd:b8:16:
de:7d:95:04:51:f7:25:1e:ac:b5:2d:4a:73:be:0d:bb:03:0f:
15:1f:2f:20:38:9d:b8:a6:79:1b:ae:d5:e1:8d:ce:f8:92:7f:
bc:79:3a:24:60:8b:8d:1c:40:49:77:08:15:11:51:8f:0d:88:
f0:96:e5:b5:c0:cd:42:79:a6:f9:52:27:3e:df:18:88:21:96:
8c:c0:97:25:b1:8c:66:71:6e:34:8c:31:24:f4:54:91:44:e3:
a4:41:76:56:47:06:3f:5b:65:b1:c8:f8:c6:d2:c5:fb:19:0a:
dd:c5:ba:0c:85:f0:76:ea:b1:bb:4e:5b:cb:31:71:e5:c5:38:
5a:f8:5d:41:26:3f:d8:39:07:5a:c8:6e:85:ef:8e:ca:24:73:
10:ea:ed:d0:f0:e4:a6:f4:88:c8:d5:59:aa:47:57:ce:06:78:
4d:e6:4b:ce:86:83:1e:71:e1:55:0c:34:9f:62:3b:38:15:ee:
0f:4a:dd:a3:b9:b3:00:15:24:0c:59:f3:ae:a2:8b:45:18:75:
34:dc:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:36 2025 by rpki-client