Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/NhicUss_-kBiNIFBTBFdbugxZaU.roa
File: NhicUss_-kBiNIFBTBFdbugxZaU.roa (raw, json)
Hash identifier: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=
Subject key identifier: 36:18:9C:52:CB:3F:FA:40:62:34:81:41:4C:11:5D:6E:E8:31:65:A5
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019428267F499D1A4D328F14D0082DCAA7A6
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/NhicUss_-kBiNIFBTBFdbugxZaU.roa
Signing time: Thu 02 Jan 2025 17:53:19 +0000
ROA not before: Thu 02 Jan 2025 17:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206576
IP address blocks: 5.45.16.0/23 maxlen: 23
5.45.18.0/24 maxlen: 24
2a01:6c8:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:7f:49:9d:1a:4d:32:8f:14:d0:08:2d:ca:a7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Jan 2 17:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36189c52cb3ffa40623481414c115d6ee83165a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:82:dc:55:ce:6a:8b:aa:61:37:85:8b:8b:
42:b7:8d:0c:bf:c7:4e:f1:6f:63:61:f0:f7:7d:53:
10:e9:43:da:37:b3:1e:47:cf:10:af:be:bd:13:0c:
28:f5:a8:ce:41:f8:17:e4:5c:b2:93:ba:52:bb:4f:
23:7b:2a:4a:6c:02:99:f7:b2:eb:cf:4c:38:fc:cb:
3c:f0:61:72:21:5f:2e:8e:90:54:59:e3:a9:ef:67:
60:59:23:d5:4a:e9:fe:e9:27:97:18:f7:40:38:36:
b4:5f:30:ee:7d:31:5e:b2:ad:f3:c1:29:5b:14:d9:
6d:1a:b6:b0:85:cc:11:5a:4c:fe:f8:5d:31:5d:40:
42:37:7f:09:29:2d:14:3c:2b:e4:74:2f:c0:c6:41:
d3:b5:79:58:3b:5b:39:23:a5:fd:2d:7d:3f:40:87:
14:69:32:67:90:a9:b0:bb:61:ae:4d:2e:28:30:2f:
d3:f1:91:0b:2b:16:fe:2e:f5:cf:fa:66:a2:b5:55:
79:2f:24:dd:1b:4d:f8:77:7d:68:0c:c3:9a:65:ea:
70:c6:84:46:2e:a3:d1:87:7c:73:49:5f:bc:4f:14:
d0:62:c8:f9:9b:01:01:bc:aa:22:c7:f2:22:65:e2:
4c:2c:c3:2c:ba:21:9d:75:3d:08:80:ca:3b:cc:24:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:9C:52:CB:3F:FA:40:62:34:81:41:4C:11:5D:6E:E8:31:65:A5
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/NhicUss_-kBiNIFBTBFdbugxZaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.16.0-5.45.18.255
IPv6:
2a01:6c8:2000::/36
Signature Algorithm: sha256WithRSAEncryption
81:96:34:8f:be:20:cb:c2:78:02:ab:6a:5e:c6:10:3a:f4:15:
99:31:ce:b3:22:17:c4:12:ed:8e:97:9c:a8:71:4a:69:5b:5e:
2e:16:8e:6d:52:a4:ca:6e:9c:62:0b:0f:b2:cd:33:5b:40:7d:
9f:0f:a3:52:d6:ff:c2:15:68:fa:d0:65:3d:65:de:95:a2:37:
3b:95:f2:2a:b1:fc:29:68:7d:3d:c1:65:61:77:24:78:b1:92:
e9:fa:ab:24:cb:3e:e3:62:ed:c5:05:f0:6f:5d:ed:d2:7d:7a:
dc:29:8d:20:f8:bf:8d:a7:e5:f5:7f:8f:dc:b5:18:3b:fb:ed:
69:ba:31:4f:18:e0:6d:34:72:5b:01:5e:75:91:e6:8e:ad:40:
5b:27:f9:8b:8d:6b:ae:56:2b:5f:b4:b7:5a:e9:17:63:a7:e5:
6d:1a:40:71:71:62:8e:0c:91:9b:99:f4:2c:a6:91:b8:b7:c6:
3e:5d:01:70:ee:d7:46:00:37:49:cb:f2:14:6c:93:fd:b6:e8:
01:63:01:5d:72:eb:37:4b:15:f9:4b:4b:10:60:bf:91:1f:4a:
57:0f:ce:40:cb:98:c8:fd:ca:47:9a:7b:52:bb:07:86:70:d4:
4f:ee:4f:2a:8e:4c:ef:4c:67:f0:83:9f:54:65:8e:5f:1e:d3:
51:f3:de:87
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQoJn9JnRpNMo8U0AgtyqemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk
MWM4NTcwHhcNMjUwMTAyMTc1MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjE4OWM1MmNiM2ZmYTQwNjIzNDgxNDE0YzExNWQ2ZWU4MzE2NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnymC3FXOaouqYTeFi4tCt40Mv8dO
8W9jYfD3fVMQ6UPaN7MeR88Qr769Ewwo9ajOQfgX5Fyyk7pSu08jeypKbAKZ97Lr
z0w4/Ms88GFyIV8ujpBUWeOp72dgWSPVSun+6SeXGPdAODa0XzDufTFesq3zwSlb
FNltGrawhcwRWkz++F0xXUBCN38JKS0UPCvkdC/AxkHTtXlYO1s5I6X9LX0/QIcU
aTJnkKmwu2GuTS4oMC/T8ZELKxb+LvXP+maitVV5LyTdG034d31oDMOaZepwxoRG
LqPRh3xzSV+8TxTQYsj5mwEBvKoix/IiZeJMLMMsuiGddT0IgMo7zCTvBwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDYYnFLLP/pAYjSBQUwRXW7oMWWlMB8GA1UdIwQY
MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt
OTllNzgwYmYzYjk4LzEvTmhpY1Vzc18ta0JpTklGQlRCRmRidWd4WmFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4
LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAQFLRAD
BAAFLRIwDgQCAAIwCAMGBCoBBsggMA0GCSqGSIb3DQEBCwUAA4IBAQCBljSPviDL
wngCq2pexhA69BWZMc6zIhfEEu2Ol5yocUppW14uFo5tUqTKbpxiCw+yzTNbQH2f
D6NS1v/CFWj60GU9Zd6Vojc7lfIqsfwpaH09wWVhdyR4sZLp+qskyz7jYu3FBfBv
Xe3SfXrcKY0g+L+Np+X1f4/ctRg7++1pujFPGOBtNHJbAV51keaOrUBbJ/mLjWuu
VitftLda6Rdjp+VtGkBxcWKODJGbmfQsppG4t8Y+XQFw7tdGADdJy/IUbJP9tugB
YwFdcus3SxX5S0sQYL+RH0pXD85Ay5jI/cpHmntSuweGcNRP7k8qjkzvTGfwg59U
ZY5fHtNR896H
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:14 2025 by rpki-client