Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/NauuGUSZn-SgPXuLy6E5pAV66N0.roa
File: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (raw, json)
Hash identifier: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=
Subject key identifier: 35:AB:AE:19:44:99:9F:E4:A0:3D:7B:8B:CB:A1:39:A4:05:7A:E8:DD
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019422202E86464EEC03A40A9CE36A173544
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/NauuGUSZn-SgPXuLy6E5pAV66N0.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 45.8.146.0/24 maxlen: 24
45.87.152.0/24 maxlen: 24
141.98.168.0/24 maxlen: 24
141.98.170.0/24 maxlen: 24
188.119.121.0/24 maxlen: 24
194.116.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:86:46:4e:ec:03:a4:0a:9c:e3:6a:17:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35abae1944999fe4a03d7b8bcba139a4057ae8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:6a:85:bb:42:0c:85:71:15:90:22:fb:35:
de:8e:a3:a8:54:12:0a:7c:48:12:98:9b:8e:b8:e2:
0d:19:ba:59:f7:e9:84:95:7d:e0:55:10:5c:2d:a6:
70:87:c3:ad:bd:33:83:fa:33:ed:eb:3b:4e:dc:55:
2d:f4:7a:e9:a6:96:ae:a8:09:b0:53:0b:7a:e0:fb:
d8:ba:82:a2:68:e2:8f:0d:b8:a3:7e:28:bb:11:64:
52:c9:63:cd:a8:c3:c3:75:02:7b:a2:1e:d2:be:a8:
dc:73:86:21:96:ca:57:69:11:18:da:c7:61:8f:eb:
7e:5f:a9:c9:21:5f:98:e7:46:e2:6c:06:0a:e9:d7:
dd:af:63:aa:cd:b3:9c:13:2b:c9:84:1f:76:af:a4:
02:c2:16:86:4e:2b:bb:99:70:38:76:46:b3:cf:6a:
ed:d1:15:d1:41:a1:60:13:78:ef:6a:21:09:03:f3:
fa:05:ba:f8:ef:fb:9e:23:49:bf:4f:81:f3:8c:b0:
36:26:ee:2a:79:95:84:13:f5:e2:42:f6:af:a1:a3:
31:38:76:45:8d:5f:17:72:70:07:f2:a9:ab:06:ed:
8e:20:77:b6:b3:5f:d8:1c:9d:91:d9:66:54:5b:ad:
e5:3e:86:b2:32:96:2a:6e:23:a7:93:5e:7c:90:a5:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:AE:19:44:99:9F:E4:A0:3D:7B:8B:CB:A1:39:A4:05:7A:E8:DD
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/NauuGUSZn-SgPXuLy6E5pAV66N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.146.0/24
45.87.152.0/24
141.98.168.0/24
141.98.170.0/24
188.119.121.0/24
194.116.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c7:c8:d6:5a:9c:17:de:ed:b1:65:46:f0:c4:3e:be:6e:09:
15:7a:ca:58:52:19:a0:64:06:0a:82:1c:1f:a8:ca:14:df:8b:
2f:c1:e9:94:d0:27:09:56:ed:a2:8b:25:7e:89:37:75:f1:6d:
76:fb:78:2a:60:46:49:b6:e5:9c:2b:d3:cd:cf:f0:2e:04:2e:
fc:31:e5:c6:ea:01:b5:77:0f:12:90:3b:18:83:08:83:0e:6c:
7b:d4:5b:dc:04:7b:ce:98:64:6e:7c:64:fd:3a:5c:3d:3e:78:
fa:e8:f6:6d:d2:bb:17:97:4d:08:92:15:a0:2a:3f:50:1e:07:
dc:73:a7:94:c7:75:ad:92:ae:7f:a0:35:78:a8:44:e8:97:c6:
7c:55:9d:c3:67:76:8d:26:ea:c9:91:b2:2c:09:21:26:91:4c:
51:7a:d7:84:ab:78:7a:82:d3:52:b2:8e:d6:f2:61:44:50:85:
36:80:3b:cd:bb:89:01:a2:72:47:0e:6f:93:02:e2:1e:03:bf:
17:e9:ce:92:35:da:4a:31:76:b5:51:5b:5b:72:9f:d5:71:3f:
eb:be:97:d8:db:1d:e0:cf:20:7b:79:f9:49:09:4c:9f:d9:10:
62:37:71:01:63:6a:0c:97:57:74:57:71:f5:3c:1e:b9:c3:d5:
23:7c:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:58:48 2025 by rpki-client