Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/nzlSxWZsboYDCBP1Utx_mgPwND8.roa
File: nzlSxWZsboYDCBP1Utx_mgPwND8.roa (raw, json)
Hash identifier: NBJSJQ+AHesaJUrTDNXXqvqlDGRt5HwygIkHYTj6ca0=
Subject key identifier: 9F:39:52:C5:66:6C:6E:86:03:08:13:F5:52:DC:7F:9A:03:F0:34:3F
Certificate issuer: /CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Certificate serial: 01869DEAE6B7B0AC9CF8A34C3460CE51ADF6
Authority key identifier: 14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/nzlSxWZsboYDCBP1Utx_mgPwND8.roa
Signing time: Wed 01 Mar 2023 16:04:22 +0000
ROA not before: Wed 01 Mar 2023 16:04:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 185.149.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:ea:e6:b7:b0:ac:9c:f8:a3:4c:34:60:ce:51:ad:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Validity
Not Before: Mar 1 16:04:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f3952c5666c6e86030813f552dc7f9a03f0343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:35:cb:88:6f:84:b1:48:4b:89:e8:8e:3e:
aa:ab:5b:ee:8a:a6:e7:5a:44:a7:6e:82:57:ee:b8:
b2:5f:7e:d6:8c:ea:2d:fb:b0:eb:78:43:11:a7:57:
4c:53:c1:bc:16:92:13:c1:e0:9a:22:4b:7f:2a:d9:
64:a9:e0:87:79:43:4d:ae:35:55:32:ad:1f:11:3f:
ea:eb:75:e0:6f:08:fd:76:0d:d7:d8:1a:67:56:bf:
b3:d1:56:da:97:15:74:41:17:88:3d:63:5b:fa:0d:
fd:c3:f7:86:23:78:3c:77:d1:cb:83:fb:5c:d3:22:
26:d9:ff:7d:39:88:8c:23:43:a7:4f:84:b9:8d:01:
ce:3b:9c:38:aa:c5:56:d2:9b:71:68:97:da:88:07:
cd:23:86:cb:d6:e3:61:3b:40:0f:6b:b5:5f:c9:c3:
ea:dd:f0:be:6a:ca:03:a0:f2:38:4d:1d:97:af:93:
6a:f5:b9:c3:6d:d4:08:4f:3f:01:fc:dd:67:08:ec:
d4:1b:8c:e8:19:fd:30:99:ab:80:77:97:12:68:67:
a8:38:40:08:73:8b:12:1c:5e:29:a7:a1:bb:0c:0f:
fa:a4:23:92:2d:69:3b:51:63:2a:6c:4a:0b:f2:9e:
b4:21:fa:31:83:57:e6:92:90:51:a5:ad:e8:d6:ed:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:52:C5:66:6C:6E:86:03:08:13:F5:52:DC:7F:9A:03:F0:34:3F
X509v3 Authority Key Identifier:
keyid:14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/nzlSxWZsboYDCBP1Utx_mgPwND8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0c:d5:d3:75:d9:24:e7:26:87:86:51:1f:a2:ef:b7:bd:60:
ba:ac:24:3a:0e:5d:ed:e3:bf:91:4b:97:6f:32:33:1b:01:c1:
19:37:80:53:60:c8:e5:1c:e0:88:7f:26:1a:d8:65:d3:2d:75:
41:52:90:b2:be:cf:ba:62:31:08:9a:18:ad:75:68:a0:8b:b3:
ce:14:8a:de:f1:f9:45:df:35:f4:3a:ff:0c:c9:bf:46:f6:de:
0c:02:a9:4f:f5:cf:9e:35:e0:b2:87:1d:c5:5d:ef:0e:23:86:
ee:c2:06:f0:96:02:a8:79:95:4f:66:7f:5a:e7:04:d2:13:94:
60:23:c5:05:8b:f3:02:12:86:61:60:03:c7:e5:d0:96:7e:9c:
7b:b9:25:36:f8:72:c3:8b:ce:7d:fd:0f:6b:3e:45:01:9c:98:
7d:d2:76:f2:48:7c:a2:8a:46:41:c3:59:ba:ee:4f:09:d1:37:
72:78:ca:d9:3e:7f:e9:35:ec:94:7f:7f:a3:01:e2:c1:34:5d:
27:76:06:91:6f:99:bb:ff:60:fc:43:bf:2b:70:3b:57:7a:4d:
5a:70:66:54:cd:24:1a:91:61:ce:36:51:00:32:8d:26:ab:a9:
22:31:25:b8:51:6b:ba:c6:9e:39:42:a8:8d:40:8d:18:52:6e:
d1:df:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:43 2025 by rpki-client