Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/Nnby7o6mFlYlrVPvdB03Ht51TB0.roa
File: Nnby7o6mFlYlrVPvdB03Ht51TB0.roa (raw, json)
Hash identifier: Wo2z/3Y1cWpDfDhantfVDxwMLyFCslmiCT+B4rPalG8=
Subject key identifier: 36:76:F2:EE:8E:A6:16:56:25:AD:53:EF:74:1D:37:1E:DE:75:4C:1D
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 0188B906B1121081B8AC008908488FB987F8
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/Nnby7o6mFlYlrVPvdB03Ht51TB0.roa
Signing time: Wed 14 Jun 2023 08:30:03 +0000
ROA not before: Wed 14 Jun 2023 08:30:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 45.146.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:06:b1:12:10:81:b8:ac:00:89:08:48:8f:b9:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Jun 14 08:30:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3676f2ee8ea6165625ad53ef741d371ede754c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:dc:59:e1:f2:1d:54:49:3a:12:cb:8a:9f:
c8:c7:0d:b1:32:46:5e:61:08:f1:72:85:32:00:ea:
fd:3b:a6:e7:a6:d6:f2:8f:20:79:43:2f:60:ba:a4:
c8:a9:fe:f4:66:4e:92:e3:ad:3d:4b:08:5e:37:6a:
c8:b1:e8:cd:d6:10:4d:ef:4c:25:2d:69:b1:da:f8:
16:dc:ad:42:e2:2e:78:6a:31:c2:34:c6:e5:31:b6:
1f:27:75:9d:c8:df:55:e7:ea:28:c9:35:e5:17:65:
bb:6c:f5:54:58:41:56:2e:70:12:f7:1b:c0:e3:67:
a7:fd:ac:c6:de:c2:fe:c6:77:24:bf:d2:48:70:d4:
4e:8a:4a:76:d9:32:39:b8:cf:94:3a:b3:d9:d1:1d:
45:19:04:bf:f1:5a:ae:f7:d5:87:af:f2:0e:73:3a:
f0:36:32:87:f9:e6:05:89:d9:4a:8f:b3:7d:ea:71:
88:c6:c9:8c:e7:84:a5:17:0a:f1:45:85:e7:a6:40:
14:ae:aa:29:1f:0e:73:ae:1a:52:3d:ec:b5:2b:da:
5b:dd:e2:a4:e2:a8:d0:2e:d1:35:8b:7c:2e:85:af:
71:f1:ca:be:4d:f8:b9:c7:26:b7:10:a0:d7:6e:ce:
4e:70:a7:f1:fc:18:dc:6b:34:a1:b5:16:97:d2:60:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:F2:EE:8E:A6:16:56:25:AD:53:EF:74:1D:37:1E:DE:75:4C:1D
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/Nnby7o6mFlYlrVPvdB03Ht51TB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.162.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0f:3d:05:9c:9a:7c:b4:96:88:e9:11:15:52:53:5a:80:ed:
b4:fc:ad:f8:18:cf:c0:46:f3:ac:f3:b7:bd:85:07:3f:48:07:
a6:c7:fd:29:22:36:c8:67:ce:16:d8:a9:49:23:36:3a:3e:1e:
a9:4f:4e:0b:c5:90:34:40:b9:d0:e4:3b:d0:d8:a2:a5:e9:c6:
32:c9:9a:2e:04:ef:b0:bd:e4:d1:36:76:8e:6c:09:e4:55:2f:
20:85:f6:12:1e:14:99:cc:5e:08:0e:8b:c7:74:51:2c:b2:fd:
fc:e7:e4:38:8e:79:9e:b7:ba:4e:ce:93:fc:eb:a8:33:34:d1:
59:f5:86:b5:45:d0:a4:f7:06:9b:7a:99:34:eb:74:04:be:33:
4a:52:29:93:98:b8:78:a0:d9:08:1e:36:ea:4b:e2:a8:11:f2:
9a:52:cc:1e:26:4b:99:d0:af:92:39:3d:07:d0:15:45:a6:8c:
e8:ff:a9:02:3a:63:d5:02:f2:6c:71:db:c7:f6:69:f7:0c:1d:
14:44:b6:9d:24:cf:85:a1:df:90:9d:e2:02:06:b7:ea:97:bc:
b1:e4:60:76:57:4f:ef:24:e0:93:4b:43:b9:36:c6:b4:36:9d:
73:63:79:9f:a5:89:f5:f4:e6:ca:61:4a:a4:b8:72:63:ed:cd:
e7:e2:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:48 2025 by rpki-client