Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/Nbz2PeFWNzfV5kFwB8Kr3vMq0VQ.roa
File: Nbz2PeFWNzfV5kFwB8Kr3vMq0VQ.roa (raw, json)
Hash identifier: DSz9+A9hsIHzAUizDs1Crx6MhnUz4HkQ8MyFLE3+pD4=
Subject key identifier: 35:BC:F6:3D:E1:56:37:37:D5:E6:41:70:07:C2:AB:DE:F3:2A:D1:54
Certificate issuer: /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial: 01F49E80
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/Nbz2PeFWNzfV5kFwB8Kr3vMq0VQ.roa
Signing time: Sat 01 Jan 2022 02:02:01 +0000
ROA not before: Sat 01 Jan 2022 02:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.44.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32808576 (0x1f49e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Validity
Not Before: Jan 1 02:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35bcf63de1563737d5e6417007c2abdef32ad154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:a1:18:ab:4e:7f:b6:1f:a7:92:5f:32:74:
8f:0b:ae:16:85:29:53:3c:41:c6:ee:2c:5d:46:56:
c1:2c:eb:b1:6e:df:22:ea:e9:c5:15:1d:b5:44:45:
67:53:e8:c6:db:a9:45:c8:49:e5:84:f0:ab:b0:a8:
93:99:56:dd:96:e3:6e:16:2c:9b:09:a0:23:1e:7a:
0d:5b:f7:e3:97:d6:b2:18:13:f1:e5:26:5e:68:a7:
f8:a7:c6:7c:7d:61:65:81:f4:0c:c8:60:15:cf:a3:
22:b3:7c:58:a5:15:c2:80:68:01:8e:a6:e6:24:fe:
d2:10:04:c3:8d:22:5a:f5:93:44:4a:e2:85:5b:f5:
bc:53:b4:13:35:5f:71:f8:34:c0:5f:c8:53:39:35:
c0:2e:32:31:9a:2c:81:80:62:1d:a7:22:07:eb:39:
ca:92:b5:fc:e3:5f:59:9b:29:c2:d8:58:f4:2c:54:
1f:69:9e:ca:b5:21:ef:a0:5f:32:9d:92:a0:4b:ec:
bf:9b:ae:e1:80:dd:ee:dd:a4:1f:99:72:1b:75:71:
6d:5a:5b:60:f6:92:99:b2:cb:cc:4f:28:d5:23:cf:
ab:d8:36:3b:96:d8:97:66:ed:23:58:94:eb:ef:1d:
e5:ae:19:bf:2c:e6:d1:af:87:b8:a5:ec:f0:e3:d4:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:F6:3D:E1:56:37:37:D5:E6:41:70:07:C2:AB:DE:F3:2A:D1:54
X509v3 Authority Key Identifier:
keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/Nbz2PeFWNzfV5kFwB8Kr3vMq0VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f2:a6:69:42:77:28:45:2c:9b:0e:af:a0:3b:a5:7b:ab:27:
00:fd:ab:40:17:0f:61:29:fa:72:e9:e2:a1:a5:29:17:82:a8:
5a:6c:21:88:8e:c1:68:56:41:dc:b2:a6:cc:aa:d0:22:59:9e:
ae:60:a5:8e:ff:30:e4:12:ae:6d:69:1e:82:e5:89:aa:89:cb:
16:cf:42:d3:5a:7b:f6:27:5c:d4:90:0b:06:e0:00:d0:8a:97:
a1:1f:b9:9d:f3:d9:bd:9e:53:94:92:b7:d8:d8:91:20:c1:73:
5b:13:ae:a6:41:58:c2:e5:3d:47:40:45:78:9a:ca:fe:81:5f:
c5:19:81:1d:0f:de:98:96:19:90:d1:50:33:e1:20:37:d7:62:
48:10:44:82:50:df:d9:10:37:ae:b5:f2:dd:b3:8c:a2:71:63:
f4:2a:b6:d9:5b:23:96:0b:39:03:fe:8b:1d:8c:72:00:ef:ec:
1f:e9:4b:b4:e7:fc:9e:a5:a2:2e:55:62:7e:e3:21:a5:6f:ca:
a9:bf:e2:35:e2:a4:14:c0:5e:b0:7a:de:05:af:0c:13:e9:7a:
f6:df:73:e4:e5:61:12:db:f7:7e:9b:29:6b:4b:93:24:61:66:
d9:32:f4:14:37:a0:df:82:47:c2:2f:6b:05:01:a1:eb:ab:ac:
89:f6:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:19 2025 by rpki-client