Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/NouaPvm_pxgnZaSsMDeuuZIRGjs.roa
File: NouaPvm_pxgnZaSsMDeuuZIRGjs.roa (raw, json)
Hash identifier: nYpFZsLrdwqDrsUOTj47eXoiORRIxveHjZpyk2lUbWs=
Subject key identifier: 36:8B:9A:3E:F9:BF:A7:18:27:65:A4:AC:30:37:AE:B9:92:11:1A:3B
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01942067ED59D6BFC51C1400E1A6512D9C68
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/NouaPvm_pxgnZaSsMDeuuZIRGjs.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.15.17.0/24 maxlen: 24
2a0e:1c80:16::/48 maxlen: 48
2a0e:1c80:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:59:d6:bf:c5:1c:14:00:e1:a6:51:2d:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=368b9a3ef9bfa7182765a4ac3037aeb992111a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:b7:4a:5d:4e:55:74:55:b7:91:68:f2:c0:
e0:2e:a1:2a:ee:f1:93:27:46:fe:b5:8d:38:c5:73:
1b:0e:bc:9d:e5:9f:22:11:97:93:59:d8:63:92:a4:
23:6a:47:78:c6:d5:ec:31:db:5c:58:3c:77:0d:17:
ee:b1:d6:3c:fe:0a:25:89:38:5c:13:aa:28:5c:d8:
fa:eb:3b:d4:7f:5c:e2:2a:f4:c0:98:85:91:69:da:
e5:69:cb:51:81:ea:38:60:cb:fd:70:15:7d:11:f2:
7e:b0:b6:23:ca:c0:d5:77:11:d8:3b:86:24:35:35:
1c:cd:77:bf:b9:12:b5:74:a6:78:09:40:ea:a1:0f:
25:5a:d7:eb:aa:b5:3a:5a:c0:30:06:12:df:8f:24:
0f:4a:ea:8e:38:99:83:e8:40:a5:37:93:37:bd:56:
52:3b:d6:05:33:09:ed:ce:09:85:4d:dd:0c:a3:d8:
05:77:cb:7d:23:39:b4:1e:59:86:66:b0:6a:e8:fd:
7b:36:3d:6d:53:4b:c9:fc:06:5e:a3:da:40:8c:51:
63:db:4b:18:b9:3f:a7:c2:e7:b0:7f:ce:e5:40:26:
05:eb:57:d7:93:ae:3c:2c:2b:65:87:e2:29:32:36:
6d:7d:5e:1e:23:6e:a2:17:b5:59:8c:7e:e9:6b:90:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:9A:3E:F9:BF:A7:18:27:65:A4:AC:30:37:AE:B9:92:11:1A:3B
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/NouaPvm_pxgnZaSsMDeuuZIRGjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.17.0/24
IPv6:
2a0e:1c80:16::/48
2a0e:1c80:18::/48
Signature Algorithm: sha256WithRSAEncryption
56:24:2b:e3:c0:bc:97:47:0d:03:b6:43:e2:53:75:90:c3:24:
65:1c:be:27:7e:bd:af:28:46:61:0e:17:f5:8f:ac:a8:a3:86:
8f:47:c3:62:1d:a3:d8:07:30:29:b8:da:ff:41:b7:6f:4c:db:
25:a0:41:34:30:b4:29:bf:fb:37:2d:a2:4f:90:62:36:2e:74:
5f:b7:f3:55:61:bf:41:3c:44:22:74:d0:52:a2:c3:77:6d:95:
63:9e:b8:4c:da:39:cc:aa:24:b2:90:97:78:65:74:c2:13:90:
25:bb:37:90:fe:7d:df:fe:b5:b2:77:05:a8:38:67:45:99:82:
f4:f4:8a:ad:5f:d8:11:66:e1:0c:43:b0:46:ff:9c:e8:b0:96:
46:8e:69:b6:de:7b:fd:08:a4:35:bd:50:e0:f1:79:33:87:f1:
53:c4:0a:de:cf:1c:54:42:5a:0e:60:5d:02:79:f0:ce:8e:68:
03:b0:c6:d5:18:d7:5a:aa:f7:77:87:02:0d:c2:73:32:dd:d5:
ab:68:95:4e:7f:7d:51:c9:44:a9:bb:81:c0:e8:ee:63:e2:5f:
a9:b0:2c:4d:c3:cc:b4:06:e1:d4:95:ec:98:6b:0f:82:ae:23:
66:50:75:c5:03:0d:28:9e:d6:e3:87:98:61:f6:15:55:d0:a4:
0f:09:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:23:26 2025 by rpki-client