Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/nbxZ3_a8AektIeqVGz45xrwdaas.roa
File: nbxZ3_a8AektIeqVGz45xrwdaas.roa (raw, json)
Hash identifier: p51I0WB83obHPtETZTKnN90TsycZSCF7/6cahFUWuEA=
Subject key identifier: 9D:BC:59:DF:F6:BC:01:E9:2D:21:EA:95:1B:3E:39:C6:BC:1D:69:AB
Certificate issuer: /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial: 0188542E10776201461D6BE9966BCB323BAA
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/nbxZ3_a8AektIeqVGz45xrwdaas.roa
Signing time: Thu 25 May 2023 18:31:24 +0000
ROA not before: Thu 25 May 2023 18:31:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 45.132.39.0/24 maxlen: 24
45.135.35.0/24 maxlen: 24
193.0.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:2e:10:77:62:01:46:1d:6b:e9:96:6b:cb:32:3b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Validity
Not Before: May 25 18:31:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dbc59dff6bc01e92d21ea951b3e39c6bc1d69ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:32:1c:ab:ce:6b:c2:98:24:31:eb:7e:29:
4c:5e:8b:9e:48:8a:97:2c:8d:4c:86:79:2b:cf:d9:
c2:7b:c7:bc:b3:c1:b8:05:e9:fe:c9:5e:01:bf:72:
26:21:5e:01:60:8c:ab:9e:21:14:87:3e:8d:9c:63:
28:86:38:db:50:7e:f1:52:49:ef:a8:de:d4:7a:8c:
22:b5:6b:4a:e8:5f:50:57:00:8b:29:9a:43:e6:1a:
e7:95:11:ff:91:15:93:bb:b4:77:d0:bb:2b:1c:17:
a2:cb:70:fe:a7:23:93:18:23:f2:f5:56:a7:e6:52:
09:18:d9:eb:59:8e:5f:08:a6:51:51:fd:f6:d8:3b:
f6:a5:f0:ad:db:37:6e:df:84:df:e3:1f:f1:88:03:
14:41:61:87:0d:74:47:36:3f:c9:ec:ed:51:40:d6:
74:db:63:a1:6a:1c:67:1d:f0:58:c0:f8:c3:69:88:
48:92:e6:73:24:da:14:69:bb:66:91:27:d4:de:33:
2d:6a:53:46:25:22:d0:98:2a:a5:5c:06:64:a2:d2:
b2:3b:de:65:57:88:fd:94:85:fb:ff:44:9b:b1:97:
3e:33:36:d8:79:c9:6a:38:64:52:bb:4e:0d:6b:04:
41:eb:63:50:b1:f8:8b:b0:af:25:38:36:bf:45:9c:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BC:59:DF:F6:BC:01:E9:2D:21:EA:95:1B:3E:39:C6:BC:1D:69:AB
X509v3 Authority Key Identifier:
keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/nbxZ3_a8AektIeqVGz45xrwdaas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.39.0/24
45.135.35.0/24
193.0.245.0/24
Signature Algorithm: sha256WithRSAEncryption
47:02:36:9c:84:78:6a:f9:0c:5d:00:c7:f2:5f:63:74:20:86:
80:f8:c3:e1:0c:0f:66:14:da:95:e6:af:3c:f3:32:b4:fe:2a:
ee:d5:a1:60:5b:c5:93:1c:d4:1e:08:f1:eb:2a:5f:a5:f5:fa:
36:e5:29:0b:1d:ca:e2:d9:ac:e8:79:e6:23:77:80:bd:7f:5b:
4c:63:1a:e6:fc:50:7f:34:5d:b4:cf:79:54:70:9c:49:96:10:
15:68:f5:b9:78:d3:b4:6c:a1:7f:18:bf:7e:37:91:eb:42:9e:
10:ba:3e:4e:1b:2a:d9:32:61:23:63:30:68:7e:08:a2:d6:ef:
58:59:34:57:3f:0e:b9:42:41:99:03:7c:01:4b:ad:05:b3:73:
37:f0:9c:ae:c2:20:87:1b:43:29:69:8b:25:be:39:86:31:31:
33:8c:70:a2:13:2d:eb:00:c9:f0:ee:25:5b:ed:68:4b:c8:91:
53:0e:ec:67:68:a8:65:e9:b4:e2:91:76:cb:64:2e:9a:46:a1:
24:6a:eb:46:57:52:05:63:02:fa:70:bb:cf:9b:77:d1:aa:78:
7f:11:9a:90:fc:29:34:6f:d6:6d:0c:b0:bb:ee:3a:8f:2e:1a:
e1:58:75:b7:5f:3b:00:fb:83:c6:dd:46:f0:55:29:35:0e:4a:
80:7e:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:40 2024 by rpki-client on console-ams.rpki-client.org