Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Nv82XPVAXh7i0NinV8op7cxSCkY.roa
File: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (raw, json)
Hash identifier: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=
Subject key identifier: 36:FF:36:5C:F5:40:5E:1E:E2:D0:D8:A7:57:CA:29:ED:CC:52:0A:46
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E0FF18530B676EA9EC93E3BB04B42
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Nv82XPVAXh7i0NinV8op7cxSCkY.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50437
IP address blocks: 31.131.164.0/22 maxlen: 22
46.151.224.0/22 maxlen: 22
46.151.228.0/22 maxlen: 22
85.255.116.0/22 maxlen: 22
91.228.145.0/24 maxlen: 24
176.116.128.0/24 maxlen: 24
176.116.129.0/24 maxlen: 24
176.116.130.0/24 maxlen: 24
176.116.131.0/24 maxlen: 24
176.116.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0f:f1:85:30:b6:76:ea:9e:c9:3e:3b:b0:4b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36ff365cf5405e1ee2d0d8a757ca29edcc520a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:c8:b9:77:b6:f9:e9:59:05:84:d9:01:87:
e6:9f:2c:90:16:6e:f2:4d:c8:e1:8e:08:f2:3b:2a:
5b:dc:64:f7:44:a2:f1:28:5f:06:b9:42:d6:79:b0:
9d:b3:4d:89:65:22:9a:c7:40:11:44:62:8a:d5:12:
64:96:e5:d2:18:0c:4d:ed:9d:fe:d3:4c:6c:67:ce:
51:44:13:b7:f2:68:60:67:e2:3d:ff:d2:27:08:80:
55:49:ce:fe:44:31:53:ce:fa:ab:35:5e:64:d4:83:
f6:e6:25:56:b0:cc:01:f5:34:1b:33:ea:f1:99:e2:
67:d3:ee:ae:fc:60:03:22:f8:e9:cb:da:51:d7:80:
23:50:77:58:f1:88:2a:d2:fa:ad:37:2c:6f:1b:b9:
1c:3e:70:12:1a:cf:b8:84:a8:64:14:d6:ff:68:56:
d8:56:32:28:a7:f4:64:4a:4e:28:82:66:d3:7a:5a:
02:6b:2a:c7:47:9a:95:44:e1:73:cb:8f:76:7b:9d:
c9:c0:8e:46:b7:f1:df:0e:7d:9e:84:27:a1:42:fe:
49:65:b7:76:45:aa:c7:b0:1d:1e:2d:b2:02:ba:ad:
d5:72:a4:7c:83:22:6a:3d:36:25:64:c3:d2:19:4b:
42:32:16:47:90:3d:c0:66:e8:cf:09:07:f0:9a:41:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FF:36:5C:F5:40:5E:1E:E2:D0:D8:A7:57:CA:29:ED:CC:52:0A:46
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Nv82XPVAXh7i0NinV8op7cxSCkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.164.0/22
46.151.224.0/21
85.255.116.0/22
91.228.145.0/24
176.116.128.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:93:9a:f7:03:64:47:21:09:4c:a5:eb:e2:92:19:d4:3a:80:
54:68:c1:3b:d8:f2:8c:52:cf:78:b5:73:86:65:61:18:44:56:
2b:8f:a0:22:0e:88:89:47:8d:2f:a2:f2:18:20:63:57:30:e3:
27:4b:cc:62:69:2c:ac:dd:d8:ab:e4:34:10:94:64:6a:a3:b9:
0e:e7:08:36:6e:f9:2d:8e:ec:44:21:f6:19:36:53:9b:7a:17:
4e:53:5c:11:0e:60:5b:69:6b:58:53:8a:e4:a3:8f:0c:d5:37:
cd:9a:f3:2e:56:8a:45:2b:ab:c2:c0:fb:5f:41:55:e6:fd:3e:
73:30:3b:85:e7:cc:7d:f0:bf:15:c4:57:e9:7a:80:f8:df:48:
08:ba:ae:70:e9:00:3a:d2:43:c1:73:c5:9c:88:91:f6:ce:27:
9a:ff:62:98:91:1b:fb:83:21:30:cd:84:14:33:12:6e:ff:58:
91:4c:01:ef:2a:ef:46:ae:a9:4a:9f:90:6a:9e:7e:04:73:27:
31:4a:12:9e:6b:73:bb:1d:75:2c:db:59:20:65:c0:80:cb:a8:
c0:14:12:62:35:3c:32:dc:a8:7e:a6:8c:4f:93:bd:5c:28:c9:
93:c4:1e:a2:be:76:48:08:0f:2a:7e:67:b7:6e:2c:88:19:8b:
cf:a5:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:18:33 2025 by rpki-client