Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/nz_NsWkMko_HHSiqJlqXLSgqTMI.roa
File: nz_NsWkMko_HHSiqJlqXLSgqTMI.roa (raw, json)
Hash identifier: 5WMRxCyHMmH12/4wRlssmFIttZJFhb4Hj9J7nqRoPok=
Subject key identifier: 9F:3F:CD:B1:69:0C:92:8F:C7:1D:28:AA:26:5A:97:2D:28:2A:4C:C2
Certificate issuer: /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial: 172E41
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/nz_NsWkMko_HHSiqJlqXLSgqTMI.roa
Signing time: Thu 10 Mar 2022 10:29:02 +0000
ROA not before: Thu 10 Mar 2022 10:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51511
IP address blocks: 91.241.163.0/24 maxlen: 24
91.241.162.0/24 maxlen: 24
91.241.161.0/24 maxlen: 24
91.241.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519169 (0x172e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Validity
Not Before: Mar 10 10:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f3fcdb1690c928fc71d28aa265a972d282a4cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:c8:3e:cb:81:4a:4c:f6:90:04:9d:65:6f:
b9:a2:19:c4:65:53:da:72:05:87:4b:93:37:2e:d7:
ce:05:c5:09:df:fd:7e:42:ce:70:41:bd:31:ee:94:
61:8d:b8:68:e9:75:74:8f:3e:8f:ed:cc:d3:4b:34:
01:37:28:95:a6:d0:51:86:19:b2:cf:45:07:f1:d2:
bd:f1:4a:fc:6f:91:cb:d2:b7:01:4c:24:7e:0a:92:
ca:d4:ea:a4:8d:b9:32:b5:99:14:9b:f5:7e:e4:da:
b1:e4:6b:38:34:2f:11:90:49:15:5d:8a:fb:be:cc:
b6:27:bb:d2:bf:16:03:7c:57:94:c9:3e:9a:6d:8b:
e7:e0:ae:3c:a9:f8:b6:c2:fb:34:3b:28:67:04:56:
b4:4d:02:8d:9a:9a:29:1a:5a:89:35:fa:cc:28:9b:
4e:ff:22:11:32:ae:9b:21:c2:ca:88:ff:e7:52:bf:
4e:66:30:a0:57:b8:af:49:33:dd:3f:6b:a3:a5:96:
e2:e0:79:9b:5b:3b:f4:a4:e3:88:b5:cc:a1:d8:df:
94:8a:91:3b:20:ee:f7:aa:e5:8a:73:89:be:3a:ec:
08:07:3b:a4:d4:89:84:c2:96:94:7d:ce:19:e9:af:
0d:df:3e:27:88:3f:82:d8:05:7d:08:0e:83:32:78:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:CD:B1:69:0C:92:8F:C7:1D:28:AA:26:5A:97:2D:28:2A:4C:C2
X509v3 Authority Key Identifier:
keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/nz_NsWkMko_HHSiqJlqXLSgqTMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:91:e8:79:d2:e5:0a:23:1f:c1:b2:a1:cb:9d:21:4c:a3:4f:
3e:63:13:7e:41:b0:c8:fc:f6:1c:92:6e:28:8b:65:d2:d3:a0:
ef:eb:bc:cb:91:67:cd:c6:aa:72:22:72:87:0e:76:e2:77:e9:
14:67:36:90:83:ae:17:17:9d:0b:05:d2:1a:83:b5:42:d0:1c:
74:25:f3:d9:d3:89:bf:c9:f6:bf:97:0d:66:1c:4a:65:9b:59:
a7:71:8b:c2:61:c9:77:d3:a2:a9:e1:cf:32:81:97:16:ee:7d:
30:bf:a0:fb:36:a4:11:bb:06:42:2d:99:3c:37:17:e5:3b:72:
4f:dd:9f:b8:5b:3e:fa:d3:73:2d:81:c6:64:6d:bf:02:df:84:
77:96:34:17:6d:7b:58:98:e0:25:0c:29:46:f4:03:22:66:ee:
34:80:68:44:88:ce:b1:7d:62:25:18:bf:18:31:49:43:0b:f7:
ca:d4:c7:3f:44:53:f8:f2:41:a5:17:3d:e1:cc:a7:c5:a3:f5:
f2:4a:66:a3:93:d8:a5:ff:8e:b0:fd:37:4d:f2:18:ce:7e:c7:
73:13:d3:d4:46:46:99:81:df:02:c2:92:51:f3:34:f5:d7:db:
f5:60:66:b9:de:0b:eb:4b:11:50:db:be:b7:07:a1:07:ec:21:
e4:d3:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:11:33 2025 by rpki-client