Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/82d1bc-e92b-4b08-83bd-faac263f8e67/1/nnuHygp-akoVbPDOBMb8D5uVWaM.roa
File: nnuHygp-akoVbPDOBMb8D5uVWaM.roa (raw, json)
Hash identifier: B93BvVadDIne04yqV6z2Dbvq7yyJ4Xgq5HBGcBVgf2A=
Subject key identifier: 9E:7B:87:CA:0A:7E:6A:4A:15:6C:F0:CE:04:C6:FC:0F:9B:95:59:A3
Certificate issuer: /CN=6bef53642cd811cdfb5847fb1ad3ed2b3600233f
Certificate serial: 01850A655EF0F93958C2379558A289A08FB9
Authority key identifier: 6B:EF:53:64:2C:D8:11:CD:FB:58:47:FB:1A:D3:ED:2B:36:00:23:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-9TZCzYEc37WEf7GtPtKzYAIz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/82d1bc-e92b-4b08-83bd-faac263f8e67/1/nnuHygp-akoVbPDOBMb8D5uVWaM.roa
Signing time: Tue 13 Dec 2022 07:31:33 +0000
ROA not before: Tue 13 Dec 2022 07:31:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56309
IP address blocks: 45.136.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:65:5e:f0:f9:39:58:c2:37:95:58:a2:89:a0:8f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bef53642cd811cdfb5847fb1ad3ed2b3600233f
Validity
Not Before: Dec 13 07:31:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e7b87ca0a7e6a4a156cf0ce04c6fc0f9b9559a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:cb:1c:98:c2:25:27:25:74:a6:6c:90:28:
fb:04:7e:ec:97:20:85:07:62:dc:9e:99:47:ef:01:
61:84:95:62:f5:72:03:8c:2d:2f:fd:d8:db:1b:79:
9d:25:78:af:1e:1b:ab:c1:ba:32:09:a3:8e:d1:3e:
5e:ac:25:41:ab:d1:02:f7:43:d1:56:90:81:fa:24:
65:97:a9:07:b9:5b:22:d1:3e:40:02:75:c9:33:22:
94:51:93:df:3a:a5:d3:71:68:dc:97:0d:66:c9:72:
fe:f2:97:12:ab:28:5e:5d:b2:c2:ec:7b:9f:e1:2e:
f0:f1:73:22:b9:76:1d:12:28:52:ed:11:d6:b5:71:
23:69:3a:8a:cf:3a:45:dc:f2:14:32:81:22:a1:ad:
79:dd:77:9f:e6:4e:d6:4c:97:7f:01:63:12:76:7c:
fe:b2:20:dd:f0:5b:4e:0d:f7:6c:ca:0f:0d:18:ce:
e2:ab:4f:8d:91:79:6c:71:bb:02:fa:7b:2d:63:91:
f1:8f:5a:3f:0f:f3:8f:c7:38:81:80:2a:5f:7a:0b:
b2:76:f6:1e:fd:66:87:61:6e:6e:d2:d4:65:79:9c:
2c:0c:a3:a1:2f:75:f4:9e:b6:30:68:7e:c6:21:b4:
dc:0b:63:f7:63:63:32:ce:c7:37:06:f4:4d:40:eb:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:87:CA:0A:7E:6A:4A:15:6C:F0:CE:04:C6:FC:0F:9B:95:59:A3
X509v3 Authority Key Identifier:
keyid:6B:EF:53:64:2C:D8:11:CD:FB:58:47:FB:1A:D3:ED:2B:36:00:23:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-9TZCzYEc37WEf7GtPtKzYAIz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/82d1bc-e92b-4b08-83bd-faac263f8e67/1/nnuHygp-akoVbPDOBMb8D5uVWaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/82d1bc-e92b-4b08-83bd-faac263f8e67/1/a-9TZCzYEc37WEf7GtPtKzYAIz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:33:84:65:33:e3:8d:ac:62:58:80:bf:77:32:0c:43:9e:35:
41:75:b1:da:14:68:82:c0:92:07:62:4b:b9:24:09:ec:d8:22:
58:1d:d6:e6:97:9f:01:e5:65:8d:ed:ef:eb:f9:a1:73:0f:57:
55:c1:83:18:e3:f9:0d:e0:12:2f:1d:e2:c8:dc:ab:0e:f8:fa:
23:fd:39:c8:d3:a0:09:1c:e7:82:8e:da:b4:73:27:2a:fe:41:
8e:fb:ba:2c:23:eb:59:85:d0:78:b8:14:4a:c3:46:3a:ae:3e:
7d:52:d9:84:8a:4d:81:16:ea:07:e7:99:70:ff:de:0a:70:1b:
a9:e3:4d:a9:bf:6d:af:51:3f:f4:e3:1b:f2:b1:89:17:df:49:
87:0c:ef:f0:03:08:a7:cd:8d:c3:6f:09:7f:bb:4c:d0:3b:57:
5e:6b:72:6f:77:2e:50:ca:01:14:b3:7f:36:a2:ef:a5:90:dd:
ef:84:19:fa:e2:0e:17:7a:eb:0c:05:49:38:0d:9f:c2:b5:1b:
67:3a:8b:cc:c3:ec:1b:9b:26:3f:38:74:c8:8c:7f:3c:17:91:
92:7c:71:71:8a:59:83:4e:60:51:35:3e:af:6c:de:9d:96:71:
d6:0f:ae:c9:e0:d1:91:1e:c6:ef:ca:f8:1e:20:87:c7:15:72:
0a:0d:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:38 2025 by rpki-client