Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/941135-00b3-4088-b960-c1aed0f918c0/1/RNVntqJ_XTCiU5PIWIcjLoFBWkk.roa
File: RNVntqJ_XTCiU5PIWIcjLoFBWkk.roa (raw, json)
Hash identifier: CHOyyPVu0OLAbZpoY62fs+zBS/2AeRbEWQsvUqGXFPY=
Subject key identifier: 44:D5:67:B6:A2:7F:5D:30:A2:53:93:C8:58:87:23:2E:81:41:5A:49
Certificate issuer: /CN=36fff450ea8cc9d769c6596c1f8bb7c99bb88861
Certificate serial: 379E6882
Authority key identifier: 36:FF:F4:50:EA:8C:C9:D7:69:C6:59:6C:1F:8B:B7:C9:9B:B8:88:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv_0UOqMyddpxllsH4u3yZu4iGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/941135-00b3-4088-b960-c1aed0f918c0/1/RNVntqJ_XTCiU5PIWIcjLoFBWkk.roa
Signing time: Sat 01 Jan 2022 09:54:41 +0000
ROA not before: Sat 01 Jan 2022 09:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 185.39.92.0/22 maxlen: 22
212.117.96.0/19 maxlen: 19
46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
2a01:8b00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933128322 (0x379e6882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fff450ea8cc9d769c6596c1f8bb7c99bb88861
Validity
Not Before: Jan 1 09:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44d567b6a27f5d30a25393c85887232e81415a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:99:2f:91:b4:5d:83:16:9d:ef:43:27:2b:
0d:36:04:8f:8d:7a:8f:56:c8:7a:2e:52:48:75:72:
42:3d:4e:ee:38:a7:c8:44:5c:d3:32:53:28:ee:22:
75:aa:41:26:c5:2c:33:e3:8b:c5:83:d1:e8:41:95:
57:80:42:1c:d9:4c:e5:24:a1:d6:81:32:8d:8b:2f:
df:c4:47:a3:ee:b2:98:b2:07:20:b7:68:fd:06:9a:
9f:6a:db:13:ed:a4:3d:a9:45:ec:36:3d:01:78:e7:
22:29:c6:f7:d9:9d:83:14:6c:b5:5d:26:4a:b6:c8:
e9:6b:dd:da:45:56:5f:c7:b7:e8:5b:2b:37:19:36:
a3:71:50:bd:02:79:99:7d:00:c6:5e:61:41:42:19:
2c:39:67:de:b5:be:e5:e9:06:87:b5:c3:23:b5:e0:
f6:a5:f7:24:11:e8:dc:81:68:48:ec:d9:20:7d:c6:
99:26:da:2a:9b:d1:b4:d8:b9:d2:17:3f:e8:6b:b7:
c3:5a:f3:53:c7:90:b7:94:89:49:dd:a5:57:8e:d5:
d5:f7:88:d8:a2:05:97:b4:e8:a3:75:f4:0e:d3:74:
c5:57:9b:48:a4:52:6e:2b:8f:9d:b8:0c:12:ad:82:
96:9f:bb:b0:d0:7c:da:1a:73:5d:22:d7:c5:f7:f3:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:67:B6:A2:7F:5D:30:A2:53:93:C8:58:87:23:2E:81:41:5A:49
X509v3 Authority Key Identifier:
keyid:36:FF:F4:50:EA:8C:C9:D7:69:C6:59:6C:1F:8B:B7:C9:9B:B8:88:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv_0UOqMyddpxllsH4u3yZu4iGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/941135-00b3-4088-b960-c1aed0f918c0/1/RNVntqJ_XTCiU5PIWIcjLoFBWkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/941135-00b3-4088-b960-c1aed0f918c0/1/Nv_0UOqMyddpxllsH4u3yZu4iGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
185.39.92.0/22
212.117.96.0/19
IPv6:
2a01:8b00::/32
Signature Algorithm: sha256WithRSAEncryption
6c:7f:e6:84:58:36:ec:04:27:91:9b:0f:cf:49:84:44:c5:b4:
95:41:e6:10:31:79:75:3c:14:57:03:ca:5a:56:2b:b4:28:13:
40:8d:25:f2:d0:83:65:5b:b3:70:a5:56:21:05:1b:c5:6e:1d:
02:c7:a6:5e:06:ed:b6:5f:48:3f:3b:10:d0:21:56:75:4d:00:
23:e5:5c:30:6f:c2:e8:64:e0:17:e7:e8:a3:3f:03:08:50:bc:
ae:7a:6e:43:60:56:a8:b7:fc:d7:db:78:eb:2c:37:1e:0b:bc:
0f:5f:0c:33:60:fa:85:5d:15:d6:b3:bd:df:71:1d:9a:85:96:
ed:ee:2f:09:d4:cd:be:1c:34:8a:bc:32:db:ec:4d:93:4d:34:
8e:75:47:35:7d:ed:2b:57:db:36:3b:8b:99:c2:ea:a5:e7:9b:
73:38:3b:cd:b4:64:80:b4:90:51:98:86:9c:48:71:f4:2c:53:
49:2e:a7:c7:4a:6b:ca:bb:f3:8a:be:4b:58:22:4f:2c:38:3b:
a7:d7:b2:55:bb:88:48:5e:c5:5c:2d:b9:80:1a:b5:59:69:b7:
f1:92:5c:5d:2d:d0:bd:a3:4e:68:97:c3:53:bb:a3:a2:01:22:
9e:cb:9c:38:b1:5e:09:40:93:d5:35:cb:db:0a:28:ba:00:94:
7e:64:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:32 2025 by rpki-client