Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NgWJPHurkGlhNYFV5xy5jz9_Yk4.roa
File: NgWJPHurkGlhNYFV5xy5jz9_Yk4.roa (raw, json)
Hash identifier: bXFuPjVIYVA/BEdNvRkX9IGyh/+SZZPMlRBj8d0tgv0=
Subject key identifier: 36:05:89:3C:7B:AB:90:69:61:35:81:55:E7:1C:B9:8F:3F:7F:62:4E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD18A25C913C328DFBF9C48ECA76FC
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NgWJPHurkGlhNYFV5xy5jz9_Yk4.roa
Signing time: Thu 02 Jan 2025 07:48:51 +0000
ROA not before: Thu 02 Jan 2025 07:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11426
IP address blocks: 45.43.132.0/22 maxlen: 22
104.249.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:18:a2:5c:91:3c:32:8d:fb:f9:c4:8e:ca:76:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3605893c7bab906961358155e71cb98f3f7f624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:a5:cc:ab:15:80:e0:9e:01:1c:14:08:9f:
65:c5:9b:62:a4:f0:02:1a:6b:43:bb:62:99:84:6e:
48:28:02:c9:c0:ef:ce:c6:39:bb:7d:34:8d:dc:69:
da:20:d3:cf:dc:06:31:54:4d:b1:61:fc:01:67:4d:
00:4d:f6:9a:c2:ec:53:1d:26:a9:44:6f:89:95:db:
3d:08:2a:c7:ee:91:44:1c:16:73:ac:33:77:b6:ac:
66:a6:ab:1c:3d:a4:d1:5b:16:78:ec:3e:d3:5c:52:
5e:b1:1a:8d:51:f6:f2:e5:60:41:d2:d9:d0:f3:c6:
3d:1d:07:56:45:bd:04:cb:40:f9:ce:9b:15:14:7a:
d3:dc:9d:ef:ee:d7:87:57:4f:c3:d4:3e:e5:39:98:
6d:94:ed:76:fb:8b:54:e8:70:34:a0:b7:85:7b:a8:
75:9f:34:db:84:89:1e:ff:58:30:24:a1:e1:62:96:
c4:16:c7:94:e7:9f:0a:e2:f4:43:d0:78:c9:19:b9:
54:1d:d7:39:fd:d5:8e:16:54:31:5e:81:3b:78:da:
7f:0f:6c:f8:03:99:23:79:c1:46:9d:dd:86:f0:62:
b8:c8:f4:31:a2:fc:fe:00:0f:07:47:c7:0d:fa:a2:
bb:fa:dc:c5:fe:b6:f6:1e:80:f7:56:7b:09:04:7a:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:05:89:3C:7B:AB:90:69:61:35:81:55:E7:1C:B9:8F:3F:7F:62:4E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NgWJPHurkGlhNYFV5xy5jz9_Yk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.132.0/22
104.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
94:cf:2b:00:ce:b4:d8:6e:02:2d:67:c0:e9:81:de:29:6a:1f:
a9:6e:62:0d:11:00:5c:ee:d6:a8:c8:3e:2b:ff:d4:0a:5e:a5:
3e:6c:b0:ab:f4:93:fa:f1:ac:9c:fa:cc:c6:52:19:62:a2:a8:
94:6f:1e:be:26:9c:1c:63:72:24:4a:ab:4e:5c:9b:68:cf:dd:
2d:9f:13:8a:6e:5c:10:7a:a9:f5:08:21:4b:c0:28:74:8a:8f:
10:8b:f7:c6:13:fa:f2:5d:ca:60:fa:c9:3f:fb:89:c8:f9:28:
4d:19:35:36:51:13:f2:26:9d:17:91:28:cd:36:79:63:71:74:
42:4a:ae:4c:54:ce:7c:33:19:08:b0:f6:e6:d6:8e:2e:dc:19:
e0:74:13:0b:2f:25:19:86:dc:4e:bf:93:4a:cf:b5:64:a6:01:
9c:08:08:12:23:de:14:95:18:75:68:35:65:40:40:59:4b:a9:
3b:e9:d1:58:51:24:41:3d:1d:77:7d:67:ac:26:56:37:5f:ac:
58:53:56:72:25:6c:52:84:83:c0:d9:a0:5a:68:37:c3:e5:3d:
22:12:a4:54:41:53:91:ed:c3:ce:af:1a:66:91:02:b5:f0:55:
5f:00:d9:29:90:23:bc:b0:ce:2d:73:ae:f6:c5:9e:b4:f4:0a:
92:7e:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:54:58 2025 by rpki-client