Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/NugaULO-gk2PkOZCdWGeX6P0AEo.roa
File: NugaULO-gk2PkOZCdWGeX6P0AEo.roa (raw, json)
Hash identifier: 8kssSSwOaL7T7gF8FWk5eaVlo82DD3FktYjwSUShJPs=
Subject key identifier: 36:E8:1A:50:B3:BE:82:4D:8F:90:E6:42:75:61:9E:5F:A3:F4:00:4A
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 0194228E402DBF0F38577F72B9269115AEBF
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/NugaULO-gk2PkOZCdWGeX6P0AEo.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209279
IP address blocks: 185.188.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:40:2d:bf:0f:38:57:7f:72:b9:26:91:15:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36e81a50b3be824d8f90e64275619e5fa3f4004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:7e:59:85:bd:8b:1e:b1:d2:29:43:55:fa:
dc:a9:3d:99:05:3d:7d:f5:ac:ba:15:0b:5c:cf:dc:
39:73:fa:c5:b7:ce:2c:f3:41:7e:54:82:6e:fb:11:
41:9d:65:13:fd:7c:d9:63:26:1b:f4:f4:ee:8f:6d:
c0:09:d8:f6:f5:48:09:ea:5c:ed:01:38:c5:f1:71:
b8:fa:ad:66:a4:ca:96:73:f8:1b:00:8f:96:e0:b8:
09:98:90:cb:f6:04:62:f9:be:b6:0e:bb:6b:77:a6:
ff:02:ea:dd:90:f8:79:80:9a:35:36:76:e7:88:c7:
47:fa:6d:68:77:fb:9c:06:2c:32:01:bb:5c:c4:39:
ec:12:05:95:10:45:7c:4e:73:63:8b:90:3e:7d:fd:
29:7f:bb:57:9d:5f:58:10:19:87:56:ee:94:e4:7b:
23:66:c9:5a:f5:17:16:fd:fc:99:cd:0e:36:c7:18:
47:79:fc:87:26:8a:01:c2:bb:e2:24:db:e7:9a:b8:
9c:d6:8e:8e:af:32:4a:99:74:df:13:f0:59:16:8e:
d1:da:eb:44:c9:61:b0:9f:2c:4c:83:2e:df:5e:e5:
81:aa:68:dc:80:f7:7d:69:9b:0b:2e:42:44:98:d2:
b8:2e:3c:b8:af:44:ce:3a:b1:14:fe:0b:34:e3:18:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:1A:50:B3:BE:82:4D:8F:90:E6:42:75:61:9E:5F:A3:F4:00:4A
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/NugaULO-gk2PkOZCdWGeX6P0AEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.31.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e1:00:5e:7f:9d:64:c8:9b:4b:8d:a6:fb:8d:46:45:a9:00:
77:4f:bb:3e:a3:12:be:9d:4e:21:d0:2d:c7:e9:1c:f2:47:71:
9b:3f:e7:53:a8:f0:7f:de:4d:71:d5:22:2d:ff:f8:59:32:c5:
fd:79:13:6d:04:0c:ac:a9:5f:78:0d:6c:49:79:a2:d3:c4:c6:
fb:85:ad:14:e4:5e:bc:85:ea:8f:9c:75:e4:b1:d7:90:55:73:
24:90:02:db:22:3a:ee:73:ed:37:15:88:ee:fb:c9:eb:e7:3c:
bb:5f:79:fc:d1:ca:23:87:af:0f:0b:77:3f:51:aa:ef:78:9d:
ce:ae:0e:00:fc:25:1e:88:cd:2b:b5:0b:fd:47:86:a9:ba:2d:
e2:1c:7f:b3:48:59:3a:26:83:c1:5b:42:9e:2b:b6:ff:65:a5:
6e:33:2e:7e:33:de:36:d2:21:95:06:96:9a:d3:a9:f8:54:6b:
1b:f6:05:bf:18:01:b7:62:2c:b5:71:63:d2:07:19:1c:d6:66:
62:b0:d0:bc:7d:34:e7:18:e9:15:d4:41:fe:d7:59:c1:97:bf:
ae:05:e2:55:fa:89:94:21:b3:55:9c:ac:ae:12:23:91:13:fb:
cd:00:b7:1e:23:30:fb:46:ce:ed:bc:45:a5:eb:99:57:a1:c4:
e4:a4:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:05 2025 by rpki-client