Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/NoUGtTNKu1KhYPEo3N1UTFGQuQI.roa
File: NoUGtTNKu1KhYPEo3N1UTFGQuQI.roa (raw, json)
Hash identifier: stYcJqNEiVzmUkwWGodU5famvRfeVRXJuDANtVtAlyg=
Subject key identifier: 36:85:06:B5:33:4A:BB:52:A1:60:F1:28:DC:DD:54:4C:51:90:B9:02
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 01857246F07E2C02721AB75F792B5185A4A1
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/NoUGtTNKu1KhYPEo3N1UTFGQuQI.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51248
IP address blocks: 192.145.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f0:7e:2c:02:72:1a:b7:5f:79:2b:51:85:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=368506b5334abb52a160f128dcdd544c5190b902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:e8:c4:d4:18:3a:e9:59:13:7f:b2:fe:33:
ba:31:dd:15:7f:76:a5:23:90:5d:39:28:be:da:b6:
ca:a2:7e:8b:0d:b8:3c:2e:99:b5:d3:19:10:27:38:
85:f8:85:26:b0:8f:c4:ef:ef:01:3b:65:e5:57:a1:
4a:f9:8a:0c:6b:91:92:9e:5c:13:86:d2:25:41:68:
b7:2a:b6:e6:1f:f4:47:4b:4f:23:cb:eb:07:84:86:
62:11:7f:98:9b:d3:4c:68:33:0a:b8:54:18:e2:cc:
f0:0b:c3:bc:9f:92:f1:1c:0b:5b:3f:d4:9c:ad:97:
8c:0e:73:f0:09:8b:2a:f8:7c:89:d1:df:46:57:20:
56:af:a0:45:72:bf:96:c6:19:61:69:4a:bb:86:c6:
d6:86:52:2a:e0:4c:76:ed:ef:49:9e:04:b6:ce:14:
d3:87:a6:9d:7f:27:15:9b:61:55:ab:0b:87:e6:c5:
69:72:da:9c:b5:6c:48:60:cf:02:f2:1f:42:3f:6a:
d8:a1:4c:7b:fd:e7:e8:e2:26:13:4f:ba:06:8a:cc:
7d:bf:37:ad:66:a8:d2:dd:f2:9c:7f:fc:5b:94:25:
b7:7d:00:98:ad:78:5c:55:cc:08:90:65:0d:48:65:
e2:55:4c:04:c0:ae:5a:c9:be:5a:9f:5c:9f:b5:fc:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:06:B5:33:4A:BB:52:A1:60:F1:28:DC:DD:54:4C:51:90:B9:02
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/NoUGtTNKu1KhYPEo3N1UTFGQuQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.98.0/24
Signature Algorithm: sha256WithRSAEncryption
70:45:fa:5e:9a:10:92:70:21:36:3e:54:bf:72:3d:19:8a:1d:
43:29:c1:1f:dd:03:a5:2c:c1:86:36:43:2e:87:ae:88:1b:0c:
06:d0:68:be:40:68:34:59:e6:98:0c:80:cf:25:b1:cc:4e:86:
57:a9:cb:76:3b:2a:72:e6:cc:f1:3c:aa:65:7f:d2:3d:f8:a4:
d2:9e:e8:49:60:3c:3d:09:a1:93:e8:78:d7:b1:4f:27:73:5d:
e1:4c:29:ac:6b:40:50:17:08:76:2c:56:ec:34:d3:d4:36:95:
8e:1f:eb:a6:81:16:67:2f:ae:e3:82:e8:1f:64:71:5c:2f:29:
13:98:eb:1c:5d:f3:6f:27:88:a4:7e:95:a7:a7:ab:ab:16:b9:
43:bf:62:2c:f6:75:2c:01:4d:0b:2a:64:0e:b6:b4:09:52:c7:
7c:16:e9:7e:13:20:02:99:da:2c:be:e8:27:fc:f7:12:76:fa:
78:bc:ea:df:43:7e:30:43:c2:82:a8:c4:b2:db:91:83:59:45:
da:4f:1e:17:9f:17:af:73:7a:dd:89:b5:f5:5e:48:55:c5:de:
56:4d:e2:79:40:d0:50:10:a2:07:7e:3b:f6:ae:77:f6:46:30:
19:0f:e7:00:89:e8:3c:94:5d:b6:0e:0f:0f:6f:e4:a0:9c:6b:
8c:7e:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:12 2025 by rpki-client