Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/nppvTips8XGcmj9VgC_a0xkLzT8.roa
File: nppvTips8XGcmj9VgC_a0xkLzT8.roa (raw, json)
Hash identifier: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=
Subject key identifier: 9E:9A:6F:4E:2A:6C:F1:71:9C:9A:3F:55:80:2F:DA:D3:19:0B:CD:3F
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 01953F1C2044F9F01606A248D7CD4372CBA3
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/nppvTips8XGcmj9VgC_a0xkLzT8.roa
Signing time: Tue 25 Feb 2025 21:56:02 +0000
ROA not before: Tue 25 Feb 2025 21:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 45.87.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3f:1c:20:44:f9:f0:16:06:a2:48:d7:cd:43:72:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Feb 25 21:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e9a6f4e2a6cf1719c9a3f55802fdad3190bcd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:7b:dd:14:35:e6:0f:13:98:1f:af:a7:d7:
2c:f6:22:a2:23:24:9b:09:c6:51:2e:29:50:c5:cf:
2e:fa:30:95:d8:8e:b3:42:38:2e:dd:04:1e:2b:25:
d5:aa:7d:d9:c5:a9:a3:1b:b7:c3:03:6a:9c:85:51:
f8:9e:14:e5:37:de:59:ad:d8:ba:9e:31:da:16:3d:
3b:44:b1:f1:b0:49:55:e6:d9:33:bf:ee:1b:f4:e9:
7e:e7:12:d0:ae:f2:aa:64:c8:6d:fa:d2:10:66:0d:
73:cc:19:fc:2b:a4:49:10:35:4b:80:60:ba:7a:ff:
a8:32:89:ed:b2:5e:3e:37:87:89:1a:c7:80:88:3e:
d5:9a:0f:bd:2d:3a:a9:db:75:6c:c4:6c:a3:b8:1f:
55:7a:6e:e6:f7:b6:1c:26:b7:4c:30:f3:57:96:8f:
17:b9:e6:68:8f:f8:80:1b:e2:dc:b7:07:e7:d1:64:
1f:26:4d:47:0d:2c:44:d2:18:29:72:81:44:8a:ac:
9e:32:bf:1f:78:9f:a2:52:4c:46:d7:0d:b4:d1:ae:
a7:de:21:0f:57:ea:f6:cf:54:d8:27:10:dd:e9:dd:
f3:5a:9c:d3:d9:9d:c6:63:d6:1f:04:6a:6e:c1:09:
ca:3f:68:72:a4:2b:d5:5f:31:69:2b:08:fa:0b:58:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9A:6F:4E:2A:6C:F1:71:9C:9A:3F:55:80:2F:DA:D3:19:0B:CD:3F
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/nppvTips8XGcmj9VgC_a0xkLzT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8e:de:45:54:85:58:32:15:ea:ba:c2:ec:16:56:6a:7b:c5:
43:96:64:c3:c1:9f:9b:de:f9:a6:df:8c:e7:8b:28:dc:b0:37:
51:7c:89:58:3d:ec:94:b7:a9:51:40:dd:31:98:4e:07:b2:6b:
0e:63:1e:bc:41:d3:a2:2a:c6:64:d5:27:31:40:e8:2e:be:9e:
f3:8a:ce:f7:0b:c9:27:6d:05:df:c7:6c:40:31:18:3c:b8:df:
be:de:77:0f:62:92:54:c9:8f:16:08:57:63:47:f5:a3:9b:1a:
bd:63:a3:ae:d6:ca:b6:cd:b8:34:45:4f:35:27:72:9a:0d:1d:
02:5b:b4:13:92:e0:d6:df:c4:02:09:d4:8c:71:07:bb:84:f6:
0a:13:a2:3d:3d:ab:2d:37:6e:bf:c5:cd:29:e7:15:99:ea:71:
8a:26:99:69:32:3d:5a:17:98:8b:98:32:9b:1b:3f:13:cd:f8:
c2:e3:c3:7f:a1:71:bc:65:96:bc:d3:44:ae:68:4e:41:63:9c:
48:23:9a:74:6f:d8:24:f8:8d:14:d1:51:3e:6c:e4:6c:1b:5b:
4b:84:e3:d5:e2:50:7a:7c:f0:16:b4:53:e8:ec:2e:cf:50:8a:
65:65:91:78:3c:a8:ba:dc:59:3e:f9:31:b2:18:84:65:b8:42:
9b:93:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:37:19 2025 by rpki-client