Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NCC8YJBWjJ8jH5fJYG7k_zftjyM.roa
File: NCC8YJBWjJ8jH5fJYG7k_zftjyM.roa (raw, json)
Hash identifier: 1ewUkAqDqQt8/cTTlR7fz8q0UEEop/atctrCH+9g64I=
Subject key identifier: 34:20:BC:60:90:56:8C:9F:23:1F:97:C9:60:6E:E4:FF:37:ED:8F:23
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1475008FB6DD309F76EB2FC808E5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NCC8YJBWjJ8jH5fJYG7k_zftjyM.roa
Signing time: Thu 02 Jan 2025 07:48:50 +0000
ROA not before: Thu 02 Jan 2025 07:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 45.43.168.0/22 maxlen: 22
64.137.0.0/22 maxlen: 22
64.137.4.0/22 maxlen: 22
104.239.68.0/23 maxlen: 23
104.239.70.0/23 maxlen: 23
104.239.120.0/23 maxlen: 23
104.239.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:14:75:00:8f:b6:dd:30:9f:76:eb:2f:c8:08:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3420bc6090568c9f231f97c9606ee4ff37ed8f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:3f:9e:1e:d8:fd:ff:59:0b:de:2b:d1:4e:
49:76:64:e9:68:09:ba:08:7f:d8:12:1b:ab:b6:77:
21:cc:d9:d4:ad:52:49:bf:21:e5:1c:b2:4f:d4:39:
db:46:ac:5d:e6:a0:8c:f2:bb:50:18:d6:7b:21:37:
21:1a:05:b1:ce:87:58:fa:9a:8a:11:b5:c5:cb:44:
77:d3:b1:1c:f0:06:ae:99:53:46:89:2f:03:25:0d:
40:4a:60:68:16:fa:41:88:39:05:f5:65:35:31:31:
4f:25:a9:b3:a8:1b:b4:97:96:5a:55:b9:17:be:10:
65:2f:c8:e7:ce:23:42:b1:ac:61:d4:71:85:19:35:
d7:0a:e3:3c:85:49:a8:0c:54:e1:bd:41:be:48:17:
78:50:a3:6b:77:1b:1e:bb:4f:39:1a:1c:ee:41:9c:
82:47:d4:21:60:29:59:57:08:51:d4:9a:52:65:cd:
1f:c6:44:73:3a:5a:58:d4:b9:61:ef:9f:35:53:ae:
fa:fe:88:3d:2a:b5:c4:01:3b:3f:ff:ed:5f:97:46:
58:08:1e:3a:5c:ae:94:d4:03:31:8e:22:28:32:43:
94:e8:e4:28:30:37:9f:59:d2:de:01:40:6f:78:bd:
c1:b6:90:b9:8d:72:1d:35:d4:16:1b:7c:6b:c5:2e:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:BC:60:90:56:8C:9F:23:1F:97:C9:60:6E:E4:FF:37:ED:8F:23
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NCC8YJBWjJ8jH5fJYG7k_zftjyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.168.0/22
64.137.0.0/21
104.239.68.0/22
104.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:82:b9:0a:eb:20:4e:a9:0d:2c:5c:be:40:d0:c0:84:53:2d:
a3:93:0b:88:e0:6e:88:07:d1:47:0a:1e:17:88:cb:c8:28:3d:
3d:49:98:75:0a:27:f2:04:bd:2f:24:04:da:88:b4:77:05:dc:
41:25:82:8c:82:0b:37:9b:43:2a:b6:6f:8b:4d:bf:07:12:75:
05:a5:40:34:0c:57:38:bb:5b:7e:da:2f:c7:a8:65:25:19:40:
30:b7:bf:8f:73:1f:e6:f3:eb:69:5b:7e:0c:ec:35:ab:ea:bf:
53:b0:8f:a0:cb:0e:cf:8e:00:8f:c9:a2:be:6b:2d:ea:cd:45:
25:51:62:ec:9e:99:61:0e:14:46:88:8d:e7:26:6d:04:c2:75:
92:e5:fb:9d:15:12:02:aa:1a:21:30:e0:e8:fa:ba:a2:c8:e9:
f2:21:94:be:cc:51:3e:12:af:16:7e:73:e2:61:e5:04:ff:7d:
c7:f4:e1:35:62:e8:8c:29:0a:6e:57:14:49:87:5e:23:23:e5:
69:aa:8b:9c:85:56:a6:ef:fe:1b:60:c3:ee:c7:f2:2b:a6:bd:
27:4b:03:70:fb:93:a2:c8:3c:97:30:48:64:54:c4:72:7d:55:
c3:86:ec:52:b0:37:ca:32:27:71:37:74:32:24:a4:1b:ce:ed:
1e:9a:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:56 2025 by rpki-client