Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/NmaxB66H3YTIMKEtcFnJn3D6ot4.roa
File: NmaxB66H3YTIMKEtcFnJn3D6ot4.roa (raw, json)
Hash identifier: JbXWOhIK4yW1nHo50PuOCruNfTtJDsLa4oHB06ZfdS4=
Subject key identifier: 36:66:B1:07:AE:87:DD:84:C8:30:A1:2D:70:59:C9:9F:70:FA:A2:DE
Certificate issuer: /CN=c79078eb7e94e74c7a621c88593d6b7208106f2e
Certificate serial: 08352494
Authority key identifier: C7:90:78:EB:7E:94:E7:4C:7A:62:1C:88:59:3D:6B:72:08:10:6F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5B4636U50x6YhyIWT1rcggQby4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/NmaxB66H3YTIMKEtcFnJn3D6ot4.roa
Signing time: Fri 27 May 2022 08:57:13 +0000
ROA not before: Fri 27 May 2022 08:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57335
IP address blocks: 45.154.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137700500 (0x8352494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79078eb7e94e74c7a621c88593d6b7208106f2e
Validity
Not Before: May 27 08:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3666b107ae87dd84c830a12d7059c99f70faa2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:0c:41:6b:9e:5e:5c:42:78:55:ed:af:f1:
15:9e:02:46:ae:b6:0a:93:30:28:90:16:47:7f:ab:
72:27:3f:e6:f2:bb:ea:09:51:1e:2b:27:8c:ec:8a:
03:94:4c:f2:99:36:ef:7b:d9:20:d0:8c:ed:e9:59:
a7:a4:d9:c8:12:36:e5:e8:de:7f:88:f1:06:d0:e1:
04:51:bd:4d:93:1b:d2:f8:49:4f:a4:aa:df:9c:9b:
a3:08:9c:e2:26:9c:13:21:f5:fa:f0:41:7c:c3:0f:
9c:ce:ba:91:69:fd:54:13:1d:87:b4:f9:0e:a3:ab:
2f:e9:c3:6f:be:97:64:99:6b:a4:f8:72:9a:2a:c8:
d4:26:4b:b4:2f:e1:46:22:2f:51:fc:84:bd:d1:27:
83:c9:47:fe:e0:f7:6b:a0:43:d6:a0:05:24:dc:b0:
e3:1f:e3:66:12:64:fc:bd:6a:22:b5:45:d2:9e:8f:
56:c7:69:65:c0:4c:d0:ed:e5:4d:16:55:3c:d3:6f:
21:c7:2a:71:14:23:f7:6c:b4:69:f6:29:31:06:de:
f8:e0:74:d4:cc:98:e7:95:d2:60:4a:ef:a8:6a:bd:
61:74:2e:f2:5f:bf:2c:e8:9a:bc:bc:0b:44:e8:62:
2c:a1:1c:90:21:e5:28:63:5e:02:69:d9:85:2d:af:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:B1:07:AE:87:DD:84:C8:30:A1:2D:70:59:C9:9F:70:FA:A2:DE
X509v3 Authority Key Identifier:
keyid:C7:90:78:EB:7E:94:E7:4C:7A:62:1C:88:59:3D:6B:72:08:10:6F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5B4636U50x6YhyIWT1rcggQby4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/NmaxB66H3YTIMKEtcFnJn3D6ot4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/x5B4636U50x6YhyIWT1rcggQby4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.216.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:a5:c5:ab:bf:eb:7e:ae:70:4d:9c:07:65:36:7d:56:2d:02:
d7:57:74:91:b4:eb:63:bf:74:6e:22:73:6d:ac:cc:bf:3e:ec:
60:bb:5e:0d:5e:8a:01:aa:60:af:3d:fe:66:6e:21:41:44:9b:
2d:6f:c7:77:64:47:11:80:66:cb:c6:ec:0e:c0:c1:4a:70:48:
d9:ed:82:4e:9d:2e:c0:80:87:52:11:b6:aa:e9:79:b0:61:ff:
11:cc:eb:5d:31:aa:c8:9c:b1:d3:95:42:e5:c0:4e:21:0e:aa:
ff:7c:c5:71:33:d2:31:11:5c:aa:03:56:35:a1:b2:db:5d:4d:
23:77:a2:31:02:f9:8a:bb:b1:8a:3f:58:1b:1a:6c:2f:75:2d:
ff:5e:e8:eb:fa:da:52:70:48:8b:6c:0d:d4:da:d0:f8:ce:17:
44:df:51:fc:91:17:b6:ad:f8:ab:c3:75:fe:d1:16:3a:11:70:
d8:dd:ab:37:0d:a0:58:c5:18:69:1b:e6:31:6a:b1:1c:6b:2e:
4c:16:1a:5b:a2:c4:ee:31:be:a7:41:ea:bc:f0:9d:86:7f:3f:
f3:b2:8a:c8:dd:3b:e5:a4:20:91:42:7b:e5:5d:2e:03:9f:1c:
5c:ba:78:95:b9:e8:31:2b:a9:2a:c2:6a:25:b8:55:85:9b:46:
aa:99:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:04:20 2025 by rpki-client