Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/NPHbYcmcieA1bILHwhnWUFFS7_s.roa
File: NPHbYcmcieA1bILHwhnWUFFS7_s.roa (raw, json)
Hash identifier: kSuyQPnV4VOnN/Ul+M4rPxBFygSY//8PYVnilYaGmok=
Subject key identifier: 34:F1:DB:61:C9:9C:89:E0:35:6C:82:C7:C2:19:D6:50:51:52:EF:FB
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 0192BD73832202F5607CF28B76706505EB81
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/NPHbYcmcieA1bILHwhnWUFFS7_s.roa
Signing time: Thu 24 Oct 2024 07:35:16 +0000
ROA not before: Thu 24 Oct 2024 07:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44549
IP address blocks: 5.32.136.0/21 maxlen: 21
91.199.161.0/24 maxlen: 24
185.205.116.0/22 maxlen: 22
185.205.116.0/24 maxlen: 24
194.247.162.0/23 maxlen: 23
2a06:c180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:73:83:22:02:f5:60:7c:f2:8b:76:70:65:05:eb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Oct 24 07:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34f1db61c99c89e0356c82c7c219d6505152effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:c9:87:35:64:81:c1:95:28:e7:49:47:e1:
08:a0:d7:4f:df:27:04:76:a4:2e:d7:7a:4c:b4:ec:
a6:a1:16:93:d8:7d:d1:dd:a6:0d:11:f0:09:4b:7d:
16:12:da:eb:de:e9:f3:85:24:73:c1:97:bd:b0:49:
4d:60:06:a2:36:18:d0:9e:7a:9e:4c:45:90:8b:40:
bd:d3:34:ec:d8:3f:ea:c0:61:8b:39:f0:45:83:b0:
d0:ca:e9:d7:2a:95:38:51:43:c2:52:97:57:dc:cf:
77:40:5c:02:b1:bb:2b:82:d4:19:55:bd:99:53:fe:
ee:05:13:b8:14:de:78:5e:56:b9:9e:08:b6:ed:22:
8e:f1:4c:1c:b3:1b:57:e9:b5:69:44:4e:00:e1:a8:
af:d3:2f:38:b0:ad:7e:1f:a1:65:63:05:e7:06:a6:
35:bc:55:82:02:16:d3:ad:c7:81:6e:b5:42:11:c5:
fd:5b:37:1b:7d:24:2a:1a:67:d6:a1:2e:d7:0e:50:
2a:3b:cd:6c:9f:c4:e7:06:f7:e5:2c:43:40:16:97:
94:da:ca:6c:90:0d:21:14:41:ca:a9:ee:37:07:c5:
94:22:a3:bb:45:cb:35:3f:16:1e:ba:b7:23:a5:a6:
19:1e:80:e9:3c:83:74:13:aa:c4:a7:5b:5d:5f:98:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F1:DB:61:C9:9C:89:E0:35:6C:82:C7:C2:19:D6:50:51:52:EF:FB
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/NPHbYcmcieA1bILHwhnWUFFS7_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.136.0/21
91.199.161.0/24
185.205.116.0/22
194.247.162.0/23
IPv6:
2a06:c180::/29
Signature Algorithm: sha256WithRSAEncryption
1d:c3:a3:2b:f6:95:17:17:f0:9b:e8:50:0c:c4:d7:5e:d6:64:
b0:e9:9d:94:6e:79:bc:e9:b9:89:9e:3d:d8:42:67:b7:12:00:
0b:41:9c:37:9c:5d:92:e6:1b:05:1f:42:c2:e2:29:f3:1b:d0:
70:8d:27:70:ea:c4:21:76:0f:06:6f:c7:ee:29:51:ff:7f:1d:
43:83:19:0c:81:18:92:0b:b4:b7:86:ba:8a:d7:16:c4:ae:9a:
b5:6a:5f:37:78:81:ce:19:ca:75:7a:bc:dc:d3:cb:24:6c:41:
3f:05:2c:ba:7f:d1:1f:74:c1:24:8e:30:1a:26:a1:e3:43:0e:
1c:6e:5e:d7:93:56:d7:df:b7:f6:45:6b:69:d3:76:59:18:9b:
ea:63:36:41:b4:15:1d:ab:ef:5d:37:11:47:a3:d5:e2:cd:b3:
83:cb:08:5b:71:fa:ff:49:4f:2b:20:93:24:45:38:b1:be:2d:
ac:6f:1c:2f:52:32:45:ad:6c:1c:12:0f:b0:fd:5a:5e:46:57:
6e:9f:d5:8e:38:ab:d7:95:a7:86:2a:7c:eb:d4:05:64:47:91:
ed:3d:f7:8a:56:e2:ef:16:89:fb:6a:0e:98:bf:14:22:3a:c1:
21:13:31:be:a3:8b:51:80:21:16:f6:de:cc:14:52:d6:ee:ec:
e3:24:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:06 2025 by rpki-client