Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/NarM5n124YmagTwIGt9IXW_RgUQ.roa
File: NarM5n124YmagTwIGt9IXW_RgUQ.roa (raw, json)
Hash identifier: jd7pkmHdr+mB/+FTewVJ2JFLa27mUOAT3tMqHjguqYM=
Subject key identifier: 35:AA:CC:E6:7D:76:E1:89:9A:81:3C:08:1A:DF:48:5D:6F:D1:81:44
Certificate issuer: /CN=22582c47b01e06d883694841e3c980382c559406
Certificate serial: 7CF196
Authority key identifier: 22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlgsR7AeBtiDaUhB48mAOCxVlAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/NarM5n124YmagTwIGt9IXW_RgUQ.roa
Signing time: Sat 01 Jan 2022 00:51:14 +0000
ROA not before: Sat 01 Jan 2022 00:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 212.52.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8188310 (0x7cf196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22582c47b01e06d883694841e3c980382c559406
Validity
Not Before: Jan 1 00:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35aacce67d76e1899a813c081adf485d6fd18144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:5e:99:3c:28:de:89:02:e4:9e:18:1c:74:
40:41:6b:6f:87:e3:43:12:50:7e:ac:c1:63:f9:f1:
03:55:dc:d2:52:e4:54:06:c0:ab:e9:3a:e0:72:3a:
de:97:87:26:a6:ca:47:53:d0:a0:80:63:16:47:d1:
c5:7b:1a:20:ae:94:a6:87:d7:52:bc:00:32:32:01:
a3:40:57:89:54:82:d7:7e:47:2a:7d:4d:ea:d5:6e:
6f:1a:99:28:2a:11:d5:d0:a8:2e:40:4f:03:b1:85:
85:dc:44:36:45:c8:1a:6b:70:42:54:d1:48:10:86:
20:0f:cb:5d:dc:60:70:1b:6a:9d:14:0b:3e:b4:ba:
a4:db:87:0d:05:54:b0:a2:e6:fa:d2:b0:f1:86:78:
7d:d1:33:d9:ca:a7:1f:29:48:83:16:fd:4c:b4:52:
e7:07:19:34:e8:a6:a8:e7:7e:08:8b:10:0c:63:96:
8d:ef:2e:fc:24:91:32:45:06:1f:43:18:59:b6:4e:
18:1b:eb:62:00:b7:63:37:c6:1a:06:5a:63:e8:49:
11:5e:c2:60:a5:2a:5a:a4:7e:32:ed:f6:7a:1a:35:
49:5a:00:5f:f0:c3:91:ca:c3:5c:8c:4c:44:66:fe:
34:7e:34:70:a7:e0:4b:9f:71:44:de:9c:11:8d:9d:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:CC:E6:7D:76:E1:89:9A:81:3C:08:1A:DF:48:5D:6F:D1:81:44
X509v3 Authority Key Identifier:
keyid:22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlgsR7AeBtiDaUhB48mAOCxVlAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/NarM5n124YmagTwIGt9IXW_RgUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.20.0/24
Signature Algorithm: sha256WithRSAEncryption
42:99:20:94:68:d3:f3:a9:d6:3c:df:d7:ae:0d:9c:e5:5b:88:
0e:c9:b4:8f:6e:d2:c3:b8:d6:f5:be:3d:9d:e2:f3:dc:c9:34:
5e:f0:0c:09:1f:9d:6e:e9:49:48:36:26:09:ca:ab:3f:00:e1:
c4:5d:6e:7b:fa:0b:e1:9b:f9:4a:15:67:2e:4f:7f:2a:84:4e:
a2:8e:2b:6e:20:21:f1:b0:d3:2b:3b:cc:de:fc:25:07:14:6c:
5f:d8:1b:50:68:2b:e5:89:4f:17:a2:85:a5:95:a7:45:6a:92:
1d:ea:a0:1f:0b:a0:a6:99:3e:51:6b:0b:9e:76:4d:66:e1:7d:
ba:07:41:bc:77:eb:bc:cc:82:11:77:76:48:61:4e:9e:71:f2:
f8:7c:e6:3a:1b:9d:71:c2:97:2f:0c:76:fe:b1:a6:57:e9:92:
80:54:0b:f5:3f:59:e9:b9:3d:ab:2b:71:94:f8:71:9c:21:6e:
58:44:e0:b8:c4:dd:2a:68:f4:df:2c:2a:78:a8:69:2c:69:ca:
b2:df:15:14:28:5c:af:14:96:a4:75:cc:ed:49:09:45:52:92:
1d:23:de:45:8f:25:b8:19:46:02:1f:b9:42:5c:ad:0f:3d:2c:
76:f3:7a:49:e4:f2:75:ed:44:63:4f:77:4f:39:dd:30:2e:a9:
53:82:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:22:47 2025 by rpki-client