Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/NEGZ6FpI55ShJ_rEITHlG27ZnfM.roa
File: NEGZ6FpI55ShJ_rEITHlG27ZnfM.roa (raw, json)
Hash identifier: btNVEf/OVPAJkJgHgJyS6eN/nh6h0COZi5pa73oih04=
Subject key identifier: 34:41:99:E8:5A:48:E7:94:A1:27:FA:C4:21:31:E5:1B:6E:D9:9D:F3
Certificate issuer: /CN=a3156e1bb9e544a66e2164d15491e2e16f0078c5
Certificate serial: 098B8170
Authority key identifier: A3:15:6E:1B:B9:E5:44:A6:6E:21:64:D1:54:91:E2:E1:6F:00:78:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxVuG7nlRKZuIWTRVJHi4W8AeMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/NEGZ6FpI55ShJ_rEITHlG27ZnfM.roa
Signing time: Tue 14 Jun 2022 07:57:44 +0000
ROA not before: Tue 14 Jun 2022 07:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41230
IP address blocks: 185.134.136.0/23 maxlen: 23
2a0e:2a40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160137584 (0x98b8170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3156e1bb9e544a66e2164d15491e2e16f0078c5
Validity
Not Before: Jun 14 07:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=344199e85a48e794a127fac42131e51b6ed99df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:24:12:61:5a:96:13:21:f0:b5:57:3d:35:
a0:cc:2c:95:45:34:d6:e2:97:cd:5f:38:72:72:4e:
6c:c3:69:ee:d7:4e:2c:6d:3e:88:1a:8c:8d:ba:ff:
5d:d1:67:3f:bc:81:7b:10:f2:a0:87:23:d9:41:fd:
3d:63:c7:03:e9:69:32:d2:87:df:08:a7:bb:87:da:
f9:67:e0:76:a9:8a:c4:d9:60:94:1c:bc:6c:d0:0d:
f9:64:92:8a:03:2f:a1:9d:4d:57:cd:d7:4f:ab:4b:
c4:b6:31:c2:86:3b:13:f8:31:d9:82:58:d1:75:52:
78:b2:52:52:6c:d4:0b:86:f8:f2:47:fd:9d:6d:70:
24:a6:6c:72:5f:37:4f:a8:a2:bc:ee:18:21:7e:a2:
19:69:a1:27:7f:d1:3a:b3:62:5f:25:b5:a0:2b:5d:
e2:cd:6f:b0:8c:e3:81:06:b5:b5:0b:8a:be:35:3d:
b5:69:eb:f9:c0:6c:94:17:8e:c0:aa:46:04:5b:ad:
7e:e4:49:95:18:60:01:83:3b:ea:66:8b:49:fb:d2:
93:ed:2e:f4:a9:a6:3a:25:fa:ad:86:4b:a8:b7:ce:
f8:fc:02:fa:df:b4:b4:a3:90:40:2b:2a:1f:e0:ff:
6f:d9:82:1e:02:6f:e9:b2:db:4c:92:73:0e:3d:3c:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:99:E8:5A:48:E7:94:A1:27:FA:C4:21:31:E5:1B:6E:D9:9D:F3
X509v3 Authority Key Identifier:
keyid:A3:15:6E:1B:B9:E5:44:A6:6E:21:64:D1:54:91:E2:E1:6F:00:78:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxVuG7nlRKZuIWTRVJHi4W8AeMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/NEGZ6FpI55ShJ_rEITHlG27ZnfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/oxVuG7nlRKZuIWTRVJHi4W8AeMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.136.0/23
IPv6:
2a0e:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
67:9b:95:86:56:a6:83:52:f3:38:96:28:12:0e:87:02:80:02:
c1:aa:56:49:ec:00:05:c6:a6:25:1e:27:95:8b:44:c2:8c:6f:
3f:9d:8f:a0:0c:29:5c:a7:3e:81:0a:4b:95:f3:0f:b1:1c:46:
63:e5:32:5c:c0:7c:a3:52:00:70:9d:4d:52:26:5a:a2:26:ae:
57:59:49:47:40:17:a4:34:9d:1e:fb:d0:83:15:29:14:a1:6d:
12:d8:f1:ff:35:02:7e:65:27:1c:0a:7d:6a:91:48:f2:56:91:
8d:3f:bf:bf:c2:83:18:59:44:43:a6:2b:f7:48:f0:9f:f7:a5:
ed:29:b0:02:a4:f5:99:e6:c4:51:15:b1:6d:3b:a9:2e:16:05:
0e:42:29:03:75:c8:05:d0:9b:f6:ee:8d:80:cd:ce:81:94:49:
32:34:52:31:49:47:33:9b:44:26:d3:7d:7f:b1:30:82:3b:67:
8d:c6:db:82:17:b9:50:f0:86:bf:11:30:4d:37:85:93:1b:c3:
8e:92:8d:d5:a9:be:c1:b4:00:49:e5:8a:46:41:3b:aa:fa:4c:
92:10:87:ba:a0:4c:6f:d7:1b:3e:2d:08:a8:8b:1e:f2:ed:7d:
76:a5:1b:e8:3d:5e:b6:e9:78:0f:35:1b:10:71:6a:62:b9:cc:
59:4b:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:26 2025 by rpki-client