Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/00AaNRP6J8t8k1B7FKHfK1mn_nk.roa
File: 00AaNRP6J8t8k1B7FKHfK1mn_nk.roa (raw, json)
Hash identifier: 7OxD67GFAHiQF2IFogz8J5efWFSP4DClfyFhfYiv38o=
Subject key identifier: D3:40:1A:35:13:FA:27:CB:7C:93:50:7B:14:A1:DF:2B:59:A7:FE:79
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184ADB54ED6714B2138FE8EAF71EEFA5B31
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/00AaNRP6J8t8k1B7FKHfK1mn_nk.roa
Signing time: Fri 25 Nov 2022 07:34:11 +0000
ROA not before: Fri 25 Nov 2022 07:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 45.149.187.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:b5:4e:d6:71:4b:21:38:fe:8e:af:71:ee:fa:5b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 25 07:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3401a3513fa27cb7c93507b14a1df2b59a7fe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:bd:a5:9f:fb:99:53:f6:24:f3:be:a5:a2:
87:61:50:25:12:ba:bd:85:f1:05:75:ba:d2:5b:4a:
43:96:c9:7a:41:78:32:20:81:aa:f7:8b:4e:f4:f9:
60:20:d9:f5:0f:3c:1f:74:be:54:b3:72:7a:0e:fe:
ca:17:c7:1c:aa:e5:21:79:8b:86:87:02:87:07:c1:
8a:ed:40:69:18:95:cd:3a:2b:de:6b:94:cd:25:83:
70:fe:a9:58:83:8e:09:54:2c:33:ca:e4:c5:5d:61:
82:6f:9e:01:3b:12:02:5b:ec:4f:97:ea:6a:15:7e:
ce:7b:1e:77:eb:fb:28:9d:28:66:b1:c8:06:e2:34:
85:2d:75:9b:54:79:ef:34:d3:d7:1f:e2:b8:e4:20:
4d:32:2f:d0:f4:60:9d:46:58:7a:2b:e1:b1:26:0a:
76:85:46:e5:4f:2b:2b:15:73:a2:f2:65:b1:ef:f4:
44:77:7c:b9:73:b2:3b:48:66:e9:d4:20:e1:0c:c0:
30:1c:89:5d:07:17:f6:e9:b7:1a:da:c9:c9:1f:16:
d6:5c:47:41:08:3a:33:ed:d6:7a:a5:82:3c:eb:92:
3e:41:c7:44:22:64:da:dd:a7:02:82:02:ea:ca:fe:
9d:05:63:36:7e:c0:26:41:3b:bb:fd:65:1f:bf:b3:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:1A:35:13:FA:27:CB:7C:93:50:7B:14:A1:DF:2B:59:A7:FE:79
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/00AaNRP6J8t8k1B7FKHfK1mn_nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.187.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b7:64:8e:b2:30:05:6f:4f:e2:ad:78:c9:88:7f:65:c1:bd:
ba:1a:e3:c9:8c:9d:7a:cc:79:85:6f:0c:0f:d3:25:ba:27:ed:
a9:08:ff:3f:21:d2:74:e1:b4:12:1c:21:37:93:ae:b0:05:1a:
54:a0:5e:e4:7d:fb:06:47:7a:5e:39:35:42:4e:3e:94:91:89:
6a:43:f3:d1:6c:28:d7:01:ae:65:2d:4d:bb:38:cb:0c:ae:fe:
7b:1d:88:2a:de:b1:22:81:69:48:28:26:a9:6e:0a:50:f0:47:
60:f0:c1:ef:34:78:55:a9:88:db:df:1a:40:17:46:55:5f:6a:
2a:f2:9f:89:12:8a:6c:66:f5:85:2e:6a:6b:5a:73:9c:5f:1a:
1d:46:2f:eb:cb:61:4e:36:17:92:3b:c6:90:59:46:df:d2:eb:
af:58:b8:0b:85:0d:56:23:a2:13:1d:cd:6c:f7:53:21:19:05:
14:1f:55:23:71:23:2c:de:36:b2:c5:4c:2b:fd:a7:30:aa:3b:
16:78:f5:28:a7:e6:c0:5f:72:db:45:5f:1d:21:3e:69:cd:57:
3f:c6:77:15:a1:ef:6e:56:6a:db:ee:ee:39:ea:79:d1:a7:6a:
ad:8d:8c:c6:e6:6b:9c:4f:59:ab:9d:cc:4c:d4:a9:eb:30:5b:
74:8d:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:12 2025 by rpki-client