Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/rrNKC_jyBV94GYgpyoSc1WVaQx4.roa
File: rrNKC_jyBV94GYgpyoSc1WVaQx4.roa (raw, json)
Hash identifier: 6nuYQAyiJnaiIQvymDnoE88ATeLJMr3Jeydl9fk004I=
Subject key identifier: AE:B3:4A:0B:F8:F2:05:5F:78:19:88:29:CA:84:9C:D5:65:5A:43:1E
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018824C78C6FA7D830BDC5F6D5891CA06857
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/rrNKC_jyBV94GYgpyoSc1WVaQx4.roa
Signing time: Tue 16 May 2023 13:37:17 +0000
ROA not before: Tue 16 May 2023 13:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.28.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:c7:8c:6f:a7:d8:30:bd:c5:f6:d5:89:1c:a0:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: May 16 13:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeb34a0bf8f2055f78198829ca849cd5655a431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:6d:d7:97:bf:f6:61:6c:fa:97:b6:44:49:
c7:71:b7:a1:32:76:9e:99:80:29:3a:12:b5:e7:0e:
1e:f2:9a:dc:72:e7:3e:bc:2a:0c:fa:5c:05:cd:c9:
26:8b:6a:dd:31:c9:91:84:84:a9:84:95:a3:0d:37:
03:21:d6:a3:8d:42:5e:51:58:fc:83:e3:09:30:08:
e8:12:a4:08:91:55:b7:44:83:95:4b:e2:d9:cf:fb:
02:25:b3:8d:22:e0:55:47:1a:f1:f6:b9:b1:e5:bc:
ec:76:a4:dd:09:af:b6:1e:60:ec:53:ab:0a:d2:67:
3f:06:00:fb:0c:18:36:d1:7a:71:79:c9:8b:b1:a7:
cf:29:6a:df:c0:16:5e:56:bf:3c:9c:f5:f4:22:14:
c4:eb:ef:01:27:43:67:50:fc:76:bd:55:ec:1a:12:
4d:7c:09:ae:83:b3:67:4a:bb:97:1b:2c:8d:1e:63:
3f:1e:92:6c:fd:7c:f5:f9:28:07:55:83:34:6e:94:
da:cd:11:98:65:77:52:80:f4:07:83:a9:af:d1:aa:
c2:cc:79:17:e6:be:a0:9f:f9:ae:f0:db:a4:b3:fb:
be:34:aa:2a:ae:31:a6:24:8d:42:8c:03:7f:8b:8f:
0b:44:61:06:63:e7:88:3c:78:a4:6f:d0:31:8e:c5:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B3:4A:0B:F8:F2:05:5F:78:19:88:29:CA:84:9C:D5:65:5A:43:1E
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/rrNKC_jyBV94GYgpyoSc1WVaQx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/24
86.62.28.0/24
86.62.30.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:f4:a0:a3:c1:74:72:75:cd:8d:c4:bb:01:47:4a:78:b5:9f:
ea:bd:84:c9:d1:2c:6c:03:14:b0:e4:f8:ed:8d:fc:af:c7:b0:
b3:79:b5:9f:31:cb:ef:c2:93:39:e9:de:cd:5d:e9:f6:2d:cf:
f8:d9:6d:1d:3e:e4:c3:32:b7:1f:fd:c3:7b:08:fd:7d:19:7d:
ce:96:9e:83:19:79:c3:00:d6:f0:a4:df:02:9c:21:73:a7:ff:
78:57:15:55:23:c6:e9:e0:ca:c0:03:7e:a2:ac:e4:46:7b:20:
1b:46:0f:d8:1d:36:4d:2f:56:e5:e4:ec:2f:61:b5:06:24:24:
ec:de:46:66:28:83:54:87:ee:8a:d3:72:a6:6e:6d:a0:2f:b1:
38:5e:f5:30:4f:0d:5a:b3:d3:79:2f:e7:79:78:70:1d:4d:fd:
49:33:b8:96:0a:48:99:cd:45:4b:a1:58:26:94:04:42:19:bb:
55:9b:69:30:0a:dc:01:9b:f7:71:b0:c0:de:51:bd:34:3d:86:
ff:74:81:1f:0b:cd:80:4f:07:38:b4:99:bf:7e:8b:7e:07:5f:
1a:92:01:f5:35:66:37:f5:c2:32:f3:e2:c5:25:95:6d:2d:c2:
87:85:76:9a:0c:43:fb:8e:2c:dd:ed:38:63:46:bd:aa:89:ad:
3e:1c:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:32 2025 by rpki-client