Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/NRC0Xl5ITlue8e7eebX4ih9RNkE.roa
File: NRC0Xl5ITlue8e7eebX4ih9RNkE.roa (raw, json)
Hash identifier: rUeWelyQwAPycFIvv0Fnr2m6INVl2U8PTO55LpUZyV0=
Subject key identifier: 35:10:B4:5E:5E:48:4E:5B:9E:F1:EE:DE:79:B5:F8:8A:1F:51:36:41
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 018B60E534EE17DF50182AE1566A7C844D50
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/NRC0Xl5ITlue8e7eebX4ih9RNkE.roa
Signing time: Tue 24 Oct 2023 08:55:15 +0000
ROA not before: Tue 24 Oct 2023 08:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212939
IP address blocks: 185.86.183.0/24 maxlen: 24
185.86.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:e5:34:ee:17:df:50:18:2a:e1:56:6a:7c:84:4d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Oct 24 08:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3510b45e5e484e5b9ef1eede79b5f88a1f513641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:db:f8:d8:7a:ff:f8:46:10:7f:a0:68:29:
71:96:38:65:7e:ea:45:0e:11:c2:7d:25:65:c4:69:
c1:f2:a0:f8:96:26:5e:6a:50:5b:7c:40:84:24:b1:
06:61:4c:08:99:e5:b9:7c:70:35:3d:cc:b7:df:a5:
f8:4d:38:aa:6c:07:25:18:42:70:12:7f:c8:79:14:
37:82:35:58:52:b9:f5:71:d0:60:ae:3e:3c:b5:17:
77:2b:86:d9:dd:fb:ec:04:be:60:3d:09:6f:a2:ec:
21:5f:06:61:e1:0e:a6:43:ea:e6:c1:90:ad:dc:58:
47:fa:46:a7:f6:94:c0:d9:76:0b:99:10:2d:5e:34:
2f:68:85:b3:7b:e5:75:71:95:df:08:55:d0:c8:dd:
39:36:0c:9f:28:72:0a:4a:94:15:fb:c7:42:e4:2c:
1e:5e:fb:a9:da:e9:1d:61:80:68:cd:65:0d:74:70:
7a:8f:f7:3e:03:ab:0c:9b:7d:59:2f:a0:1e:df:ef:
42:f5:45:e6:ab:0e:04:56:34:29:a1:c9:3a:3f:09:
3e:8a:c3:90:ea:a7:73:a9:f5:2b:33:72:82:c7:6a:
8f:5d:c6:76:d5:49:ca:36:f0:3a:d9:4e:d5:37:4b:
d2:88:27:31:a4:42:b9:17:38:e3:26:f7:c5:a9:2d:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:10:B4:5E:5E:48:4E:5B:9E:F1:EE:DE:79:B5:F8:8A:1F:51:36:41
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/NRC0Xl5ITlue8e7eebX4ih9RNkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.182.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:3b:a7:b6:4d:68:aa:be:5e:17:a7:5d:f9:a5:59:94:64:20:
d6:77:cc:c6:64:cc:4d:af:8f:32:64:8f:56:13:41:89:dc:1d:
42:18:5e:47:20:ee:07:9a:26:29:39:99:f4:dd:f8:9f:34:6b:
0e:9f:fb:60:d6:9b:a5:0d:41:82:1b:ee:c6:1c:b3:45:09:ff:
39:ac:6c:17:f2:7c:67:d1:0b:a3:42:4a:55:11:30:52:48:c8:
2f:96:ff:07:a6:55:07:d8:66:ac:4a:f2:94:73:1d:51:11:31:
14:eb:e3:d3:f4:10:3f:01:53:1b:f8:d6:d3:fa:27:6e:a1:ca:
51:97:0e:7f:3c:f8:93:51:8d:54:38:f3:d4:5a:bb:3c:6d:1c:
17:f5:c7:b4:26:03:d9:b3:22:cd:e5:b1:52:62:7b:9e:52:cf:
7b:90:e7:0d:6c:11:40:5e:7c:6d:9c:46:b4:3d:40:96:49:a1:
f1:29:5d:fa:f2:ee:5a:cf:8b:78:45:f5:77:6e:44:74:b4:1a:
64:61:a4:42:21:62:c2:ce:c8:53:11:c0:3b:88:0a:1c:ed:12:
97:02:47:fc:20:33:29:93:3b:ce:6a:19:75:2b:82:3f:fb:ef:
45:8e:d2:b4:a2:a1:47:34:6e:4f:47:69:f1:55:c7:aa:e4:36:
4d:f1:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:38 2025 by rpki-client