Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/NAy7e1B_lqGb9gi0Y8aUJGHSJLI.roa
File: NAy7e1B_lqGb9gi0Y8aUJGHSJLI.roa (raw, json)
Hash identifier: cObx+Z5O2D+UhjzbeQtvait10t4dfi8tWrlgIsEQmBU=
Subject key identifier: 34:0C:BB:7B:50:7F:96:A1:9B:F6:08:B4:63:C6:94:24:61:D2:24:B2
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0662D288
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/NAy7e1B_lqGb9gi0Y8aUJGHSJLI.roa
Signing time: Thu 24 Feb 2022 14:37:08 +0000
ROA not before: Thu 24 Feb 2022 14:37:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107139720 (0x662d288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Feb 24 14:37:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=340cbb7b507f96a19bf608b463c6942461d224b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:89:85:65:47:fa:e9:e4:43:f2:75:4c:83:
c4:05:b4:9d:f8:dd:6e:81:34:12:eb:30:0c:7f:a3:
16:d9:2a:f7:cd:4e:ad:37:55:39:34:af:3c:f0:e2:
6e:a5:74:56:ca:53:1d:a0:eb:b7:3a:bd:6c:5e:85:
a0:a2:a2:3d:6b:fd:cd:75:b5:1d:dc:5b:cf:04:be:
49:50:2f:5f:3d:c8:23:52:27:06:ec:14:43:8c:ee:
bd:5b:f0:44:24:23:e1:8b:9b:a2:3b:ae:a8:88:fd:
94:c4:53:d8:94:bf:12:dd:51:00:ad:4f:76:be:ca:
26:1b:bb:4f:0e:45:f8:e2:50:8f:31:8a:e7:81:ad:
d0:2f:64:1d:cd:e3:30:1c:56:3c:cc:7d:69:f9:c3:
0e:0c:53:e3:c3:ec:c4:ad:44:88:bf:b1:4c:df:b2:
46:6f:34:1e:ac:d8:ca:7c:17:75:c3:ed:a8:ea:4b:
b9:09:db:d4:58:1e:55:04:c5:6d:51:0f:48:be:ae:
0e:f0:2d:89:ad:37:a9:45:64:2f:f0:17:c6:99:69:
4d:d7:c8:44:63:7c:43:64:3e:43:6f:60:b2:47:c9:
43:6c:9d:21:50:f7:e8:bb:af:ba:43:d3:28:9b:c3:
bc:f1:b7:44:7c:e0:e6:15:04:db:1e:63:0f:d1:fe:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0C:BB:7B:50:7F:96:A1:9B:F6:08:B4:63:C6:94:24:61:D2:24:B2
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/NAy7e1B_lqGb9gi0Y8aUJGHSJLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/23
94.137.74.0/23
94.137.79.0/24
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
4f:82:08:91:eb:ee:f0:6a:39:74:14:70:c5:fe:e5:21:7a:04:
70:40:e7:0d:11:2b:f1:b3:71:d5:57:e4:17:6d:87:68:19:43:
3d:3d:b3:8e:64:37:92:a3:22:eb:da:76:cb:34:d1:dd:14:99:
b1:14:06:2d:9b:bb:67:ba:11:f2:9b:e2:1d:80:2d:fa:f4:68:
85:9e:29:07:33:04:2b:c6:23:01:ba:f4:44:a3:b4:18:5e:b5:
e9:7d:00:5a:cf:78:71:b2:ea:d4:48:07:0b:df:c5:6d:bf:5d:
3e:9b:df:2a:0b:eb:2c:46:e6:d3:3a:f8:bf:52:49:93:5f:f7:
cd:bb:df:11:74:d0:61:c7:10:7b:1c:fd:7c:35:60:e8:e2:06:
0b:77:53:f1:a1:f9:ef:f7:dd:60:4e:79:06:2f:91:eb:96:b4:
f3:66:d5:7f:b3:be:53:d9:fb:61:7e:10:20:67:08:80:0a:16:
31:61:a0:2e:60:b8:57:55:10:6e:32:75:15:ee:6e:5a:31:cc:
e8:3b:23:e6:c8:b0:af:16:32:02:39:d9:f0:f9:c2:cd:d5:3c:
f0:43:73:78:ad:e0:f1:c4:f9:70:b7:60:7f:cd:63:7f:06:ab:
c5:76:53:99:75:42:ff:47:84:5a:a1:b8:9c:2c:15:6d:f9:96:
0e:18:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:13 2025 by rpki-client