Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/NvRBWJ-b9Ns1JzW55W2FCxAgWZY.roa
File: NvRBWJ-b9Ns1JzW55W2FCxAgWZY.roa (raw, json)
Hash identifier: W6Q7IT0sgGaSH1ZWwo+VNgyLvx3ulioPoBinqbpAaEE=
Subject key identifier: 36:F4:41:58:9F:9B:F4:DB:35:27:35:B9:E5:6D:85:0B:10:20:59:96
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 01856E01CE7B42615A11C4FC44143D64F753
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/NvRBWJ-b9Ns1JzW55W2FCxAgWZY.roa
Signing time: Sun 01 Jan 2023 15:44:50 +0000
ROA not before: Sun 01 Jan 2023 15:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202416
IP address blocks: 82.136.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:ce:7b:42:61:5a:11:c4:fc:44:14:3d:64:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 15:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36f441589f9bf4db352735b9e56d850b10205996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:f9:5d:81:26:84:ed:3f:a7:a3:74:ec:6c:
6b:06:d7:e4:d5:60:7d:fd:aa:25:b0:33:9e:fb:9b:
77:54:43:1e:44:9a:39:9b:aa:13:2a:52:9b:69:12:
05:8d:36:ce:0e:6b:2e:de:d9:4d:43:b8:ce:68:6e:
5c:a7:52:21:11:42:49:60:08:03:1d:82:51:cd:74:
81:26:89:c8:b2:fd:62:30:fe:86:f5:85:a8:e2:00:
e6:84:bc:fc:d0:81:1c:6e:4e:a9:f0:10:62:bb:06:
62:e4:48:98:66:b8:14:8b:a3:00:d2:47:1b:fa:bf:
29:94:aa:e9:ff:bf:c6:b0:53:53:eb:2c:ff:1f:a9:
8e:7b:df:89:26:8c:3d:cf:68:60:1a:65:5c:2c:99:
6c:cc:5c:f5:8d:9b:a3:25:2b:f9:1a:0a:08:dc:dd:
8d:e9:24:f9:af:fa:b4:85:10:64:7c:a4:7e:c5:a8:
78:ab:c9:84:d7:b7:04:ce:84:6b:f6:a4:15:c7:9b:
44:47:28:f9:7a:61:98:22:34:e9:c6:89:36:0c:ea:
ab:c4:68:54:96:0d:34:6c:14:c8:ce:d5:49:99:8e:
2b:ff:95:7b:d7:59:55:dc:d0:e0:69:57:14:d7:73:
40:18:fc:14:49:a0:a2:9f:1c:d8:73:3b:38:bf:1f:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:41:58:9F:9B:F4:DB:35:27:35:B9:E5:6D:85:0B:10:20:59:96
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/NvRBWJ-b9Ns1JzW55W2FCxAgWZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.136.32.0/24
Signature Algorithm: sha256WithRSAEncryption
69:95:8c:95:de:a2:e8:ff:ee:34:45:ac:24:19:5e:d6:bd:1f:
4e:7d:03:4f:9f:f4:5e:a1:15:f9:27:e8:7f:ce:05:ad:a1:4f:
50:40:6c:89:12:37:49:a9:4e:21:18:9e:1a:22:08:64:b3:b3:
96:c4:67:f4:19:01:59:a8:d0:80:9b:65:fb:df:c7:1d:82:a0:
cd:59:d4:54:c1:37:32:66:ba:84:af:f2:77:85:e9:c7:39:79:
91:6f:e2:27:ec:e8:fa:8f:7c:d9:db:e9:6d:cc:2b:c8:c6:ff:
63:5e:77:d0:ba:82:d5:af:a8:27:7a:fa:72:88:39:72:00:dc:
d5:81:08:75:56:ed:8e:5d:b1:37:cf:21:f1:2f:13:ca:ad:88:
80:35:e9:b3:85:f0:1d:b6:20:4e:36:2e:72:09:f2:4d:aa:e7:
62:28:08:b2:48:84:c8:0f:54:95:a3:32:67:4c:0a:8d:08:ba:
de:09:56:19:41:00:ef:62:26:e1:45:f0:a1:cd:d9:a8:04:b7:
8d:d3:98:0b:39:b6:c7:ea:f9:11:1b:17:7d:b9:eb:94:9c:95:
b1:31:dc:b8:c4:41:40:af:8c:78:0a:85:10:ba:7a:c6:a1:9e:
d8:ba:9d:74:11:41:42:bc:23:84:8f:ac:3a:3a:db:67:db:09:
da:a7:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:31 2025 by rpki-client