Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/nkujfO--L6cqhVKo_IbrmDf8p9Y.roa
File: nkujfO--L6cqhVKo_IbrmDf8p9Y.roa (raw, json)
Hash identifier: ZLn2hjVfKg0qeHyLg5zSie0Ac1dhUwFlWRt9lXq0LT4=
Subject key identifier: 9E:4B:A3:7C:EF:BE:2F:A7:2A:85:52:A8:FC:86:EB:98:37:FC:A7:D6
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0187DB1731C638ACD7CBFB2C7C485988EB4F
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/nkujfO--L6cqhVKo_IbrmDf8p9Y.roa
Signing time: Tue 02 May 2023 06:12:22 +0000
ROA not before: Tue 02 May 2023 06:12:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.156.226.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:17:31:c6:38:ac:d7:cb:fb:2c:7c:48:59:88:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: May 2 06:12:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e4ba37cefbe2fa72a8552a8fc86eb9837fca7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:e9:d0:34:91:32:3e:36:b7:b3:80:c5:41:
24:a4:d3:83:77:74:ea:d5:28:a4:04:29:db:02:73:
c7:b0:43:db:e6:08:0f:b9:2d:d8:86:dc:0b:e5:64:
5c:a4:e4:8a:50:53:08:8e:9e:0b:12:c9:4e:a2:65:
e3:6d:76:ba:30:37:49:56:41:cb:5a:09:3f:d8:5a:
f6:b7:6b:7c:a3:ff:e1:be:e6:ee:06:dd:bc:fd:40:
70:bf:2c:f8:6b:82:08:62:14:26:98:ca:8b:f5:04:
1f:47:83:64:38:73:3a:14:c3:5e:86:20:95:76:c6:
98:97:85:24:0e:53:06:58:16:04:ad:17:1e:06:8d:
5c:a7:61:ba:48:79:9e:23:0d:c0:09:1a:9c:fb:5c:
20:fb:f8:42:9d:84:33:4b:c6:a3:c8:4d:e8:95:9c:
9e:d9:05:ea:b9:37:1f:8f:49:49:bd:ab:b0:66:5e:
70:ae:16:96:de:8b:c7:b6:bf:52:9b:85:78:0c:c1:
e3:43:46:41:59:56:5a:08:c2:4c:85:c3:d4:78:cf:
64:4b:e1:56:bc:0c:f7:a8:fe:e6:d5:2c:d6:97:11:
b4:1d:19:85:ac:92:33:bd:1d:fd:ea:7a:de:cb:5b:
d9:7c:92:75:e7:81:d0:9d:07:42:f1:7d:37:88:59:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:A3:7C:EF:BE:2F:A7:2A:85:52:A8:FC:86:EB:98:37:FC:A7:D6
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/nkujfO--L6cqhVKo_IbrmDf8p9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.226.0/24
46.102.116.0/24
Signature Algorithm: sha256WithRSAEncryption
42:48:9c:fa:41:1b:a9:d0:90:cc:fa:79:09:4a:04:88:26:0e:
81:8b:41:9e:cc:7a:bd:c8:bc:7f:6b:39:92:cd:0c:21:17:aa:
0b:57:c4:33:f1:27:7b:b0:77:33:72:bc:f4:d9:d7:d5:02:c7:
24:b9:d0:33:94:e5:e2:7f:fa:ee:8c:e6:3c:73:91:30:f7:b0:
4f:91:ce:46:97:f4:41:3a:b5:4f:d7:8d:b7:9d:e3:d1:b9:67:
31:35:cc:a3:cc:0e:3f:61:6b:07:0a:ee:87:ca:92:c7:71:97:
1b:ed:0f:3f:45:f8:1e:74:47:e1:c0:bc:a3:7d:23:0d:10:81:
6a:bf:48:a6:ed:84:0a:5f:97:18:d3:99:ae:54:50:32:ad:ce:
d1:17:a4:e9:a0:0f:ee:10:6f:38:94:d8:ef:44:f6:0a:58:40:
25:56:78:ee:83:7b:66:fc:19:09:44:76:81:38:29:61:3e:e8:
0f:85:8c:7b:05:a2:b9:f5:8f:04:11:c7:75:28:3c:45:24:7c:
03:ee:5e:11:a5:71:6a:d0:2d:31:2c:83:20:6f:ae:a6:04:0d:
23:a5:c0:88:08:29:93:cd:09:d2:6e:17:a4:2f:ed:99:d7:64:
0a:bf:50:4c:91:aa:94:3d:16:d8:64:1f:91:05:aa:2f:25:33:
c0:56:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:03 2025 by rpki-client