Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/NMpItkmkV9cF1En97i5-ElyjOS4.roa
File: NMpItkmkV9cF1En97i5-ElyjOS4.roa (raw, json)
Hash identifier: RVjjjMTSaE4uJhHd3U113LJx7n1LDt46WNG3a8jjbuU=
Subject key identifier: 34:CA:48:B6:49:A4:57:D7:05:D4:49:FD:EE:2E:7E:12:5C:A3:39:2E
Certificate issuer: /CN=d71ab9573edf87172cc4d61bdcf0480826f213cc
Certificate serial: 018964C089ADF4EB60DF1D10B6F75674CD5B
Authority key identifier: D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/NMpItkmkV9cF1En97i5-ElyjOS4.roa
Signing time: Mon 17 Jul 2023 16:48:06 +0000
ROA not before: Mon 17 Jul 2023 16:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 178.212.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:89:ad:f4:eb:60:df:1d:10:b6:f7:56:74:cd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d71ab9573edf87172cc4d61bdcf0480826f213cc
Validity
Not Before: Jul 17 16:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34ca48b649a457d705d449fdee2e7e125ca3392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:0e:b7:3f:0d:c3:c1:5e:77:7d:fd:dc:6b:
3a:2b:a2:6e:db:2d:c4:db:bf:ec:c0:21:80:21:0f:
88:30:56:eb:96:66:4e:8c:b8:00:ff:83:a4:82:d0:
3a:6f:90:57:e4:0a:58:b8:09:e3:b5:93:5b:ce:cd:
3f:53:ba:38:52:0b:b8:a4:47:9e:ed:2d:2c:1b:ed:
72:fe:c6:c0:49:6a:32:dc:3f:06:8f:3c:c4:b9:06:
8a:08:59:3a:f1:0e:b5:de:e1:a1:59:df:d5:fb:80:
d1:ff:a4:9d:3e:cc:91:1f:10:75:cf:8d:fa:3b:ea:
f9:5c:c8:a6:82:79:f4:f3:14:ab:f0:c7:43:c1:12:
22:54:ac:0d:6d:04:9d:58:1a:28:54:cc:c8:b7:1e:
38:48:89:0f:05:e9:9a:df:60:97:41:d1:3b:99:e1:
ae:0b:35:85:c0:dc:2a:56:68:14:f1:6d:a9:06:f3:
84:c5:e3:34:43:a2:8b:97:5e:5d:21:91:06:f1:fc:
25:11:69:79:b0:30:30:32:67:64:7d:73:54:09:dd:
7d:56:c5:4b:42:02:ae:43:33:f3:7f:d3:4e:1a:50:
1d:56:47:83:0b:eb:e2:10:24:d6:2a:54:d8:8b:52:
51:d5:e3:eb:e5:63:48:d0:d9:e5:ae:ab:9b:7a:a7:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:48:B6:49:A4:57:D7:05:D4:49:FD:EE:2E:7E:12:5C:A3:39:2E
X509v3 Authority Key Identifier:
keyid:D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/NMpItkmkV9cF1En97i5-ElyjOS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/1xq5Vz7fhxcsxNYb3PBICCbyE8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:9d:51:31:d3:4d:c0:8c:38:e3:fa:45:33:76:c6:d9:51:4c:
fd:10:7c:7e:46:2d:75:d8:d4:27:9c:71:3f:35:32:30:f5:50:
2d:cc:1b:b4:bb:98:94:d5:0a:02:bc:63:b6:78:b8:d8:ff:83:
fa:f0:14:aa:18:86:f6:f0:78:05:2e:99:5d:39:61:64:24:4d:
80:2d:f4:05:fb:10:9d:22:b2:1b:78:3a:d9:cb:b4:17:93:bb:
43:a3:f5:d2:0a:5a:3e:10:0d:f4:4f:fd:ea:2a:53:e4:9d:81:
e7:7a:af:ea:ef:a5:8b:ea:06:10:25:ec:21:4d:d6:f3:d9:c4:
85:87:14:c1:38:a8:76:27:a9:b4:3e:2c:91:e1:57:f7:0f:b5:
e2:c0:76:5a:44:8f:c8:e4:1d:c7:ad:21:6e:eb:d3:1d:17:de:
9f:9f:3d:a7:6b:2c:2e:4d:ba:8a:77:64:e1:5b:24:8f:0c:ed:
a9:cf:0e:a4:18:a0:96:d0:f4:ae:62:ca:f4:5a:7e:d4:35:25:
0d:79:68:f0:54:63:3e:80:7e:cc:52:12:eb:9e:dc:2e:74:16:
2c:2a:fb:87:14:be:ed:44:35:b2:4c:62:f7:1c:b3:69:7d:aa:
58:d1:e4:08:03:fa:c8:fc:b6:35:73:64:87:f3:fe:31:7f:69:
cd:24:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:36:23 2025 by rpki-client