Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/DzWlzWcfAj2NtHbR2GGDWdx7qxg.roa
File: DzWlzWcfAj2NtHbR2GGDWdx7qxg.roa (raw, json)
Hash identifier: QmI6FPGLwMzhwWs+7nD+bM3D6cmDtwLOUzVJ5tPADkc=
Subject key identifier: 0F:35:A5:CD:67:1F:02:3D:8D:B4:76:D1:D8:61:83:59:DC:7B:AB:18
Certificate issuer: /CN=354479e9b5a1786e6e87407ae9dde511779a507f
Certificate serial: 01843742BA079A2FE036C9C6D6192A950F8B
Authority key identifier: 35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUR56bWheG5uh0B66d3lEXeaUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/DzWlzWcfAj2NtHbR2GGDWdx7qxg.roa
Signing time: Wed 02 Nov 2022 07:33:50 +0000
ROA not before: Wed 02 Nov 2022 07:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:42:ba:07:9a:2f:e0:36:c9:c6:d6:19:2a:95:0f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354479e9b5a1786e6e87407ae9dde511779a507f
Validity
Not Before: Nov 2 07:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f35a5cd671f023d8db476d1d8618359dc7bab18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:d6:ff:55:85:29:c2:60:be:c9:bb:ff:c1:
7c:d1:b1:97:03:d9:9f:f3:c0:af:53:b1:9e:47:73:
d4:a8:d6:64:df:19:52:11:a7:62:05:21:d0:8a:1a:
20:47:ac:96:b8:7e:18:58:c7:6f:75:b8:82:06:a8:
c9:97:e7:71:c9:25:91:57:53:cf:46:bd:20:e3:71:
09:64:99:7f:5a:31:ad:4a:d8:73:f7:9d:a9:c5:e7:
22:4d:c3:b8:0e:ca:ce:01:75:a6:dd:a3:88:3f:9c:
ea:f5:98:5a:38:bb:5c:ce:42:bb:05:ae:93:75:6c:
83:5a:55:1b:2b:27:cb:98:db:42:07:a7:63:d7:02:
6e:c6:6d:b7:0c:a9:e9:c8:52:ab:6b:8c:fe:70:ef:
78:3d:ce:e6:dc:30:d3:4e:f4:4d:aa:73:eb:83:6b:
4d:fe:9d:3d:69:a9:1b:8f:db:de:4e:d2:ea:c5:d9:
6f:0a:83:74:26:a7:a6:c3:86:7e:d9:a1:68:57:90:
4f:47:94:8c:81:34:dc:d3:68:44:4a:74:6c:48:ae:
3f:9e:e5:de:37:ce:a6:24:23:d8:96:3a:72:9b:25:
92:f0:d5:eb:22:6c:e0:46:7c:bf:81:c0:11:07:80:
23:b2:05:d1:aa:3c:ea:b5:8a:f5:cd:06:e1:a2:9b:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:A5:CD:67:1F:02:3D:8D:B4:76:D1:D8:61:83:59:DC:7B:AB:18
X509v3 Authority Key Identifier:
keyid:35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUR56bWheG5uh0B66d3lEXeaUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/DzWlzWcfAj2NtHbR2GGDWdx7qxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.230.0/23
Signature Algorithm: sha256WithRSAEncryption
23:72:4f:70:0a:ed:ac:2d:dd:e8:42:44:b4:c8:f0:8c:7d:83:
bb:b0:6b:ec:92:d0:81:28:66:60:7e:d8:51:15:f5:02:70:59:
83:e8:e5:75:b8:14:7b:7b:d0:10:7a:da:09:26:b1:10:d4:03:
f9:e3:26:dd:f0:b0:07:88:77:32:38:cf:5c:48:ee:96:58:60:
f4:05:57:02:3f:d6:ae:ab:79:63:12:90:f9:e6:dd:c3:dd:55:
78:b1:8b:0e:b4:af:62:5d:38:25:6a:89:b5:bf:f2:0a:c6:3d:
aa:b3:7e:01:92:9c:fc:d1:e9:dd:d7:4e:23:64:21:8a:46:86:
54:a4:3e:09:93:ff:a4:47:84:71:b1:ad:1b:e2:9f:b1:90:8c:
12:d6:d3:b7:05:ad:19:a5:7b:ab:9f:de:2f:bc:07:3d:31:f7:
c7:ec:89:a2:ba:f8:f3:2d:6a:94:a6:8f:c6:f6:26:ae:37:57:
80:90:8e:15:de:2b:ca:dd:8a:d5:12:01:85:d8:9f:df:68:55:
d4:8b:8b:80:a8:a6:51:54:ae:fc:66:df:df:02:ae:9e:aa:bc:
21:5f:cf:3c:02:3d:62:3d:ed:23:cf:0e:cd:4c:22:15:75:30:
34:46:07:6f:4a:2e:3d:96:5a:1a:93:31:e1:84:1a:9a:b1:35:
0d:87:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:34 2025 by rpki-client