Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NqBuJEMI7LdpQYXoApbSGs7sPh8.roa
File: NqBuJEMI7LdpQYXoApbSGs7sPh8.roa (raw, json)
Hash identifier: 0Dr/kQ2O8LQDQV7H3YMTT4z7LANt7k1oXuDNS7+DyZw=
Subject key identifier: 36:A0:6E:24:43:08:EC:B7:69:41:85:E8:02:96:D2:1A:CE:EC:3E:1F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194BB8E845348EA5B6DE2C3E1AFDE7F538B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NqBuJEMI7LdpQYXoApbSGs7sPh8.roa
Signing time: Fri 31 Jan 2025 08:51:06 +0000
ROA not before: Fri 31 Jan 2025 08:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212017
IP address blocks: 45.90.236.0/24 maxlen: 24
45.90.237.0/24 maxlen: 24
185.106.124.0/22 maxlen: 24
185.128.52.0/22 maxlen: 22
185.129.104.0/22 maxlen: 24
185.227.172.0/22 maxlen: 22
185.232.8.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:8e:84:53:48:ea:5b:6d:e2:c3:e1:af:de:7f:53:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 31 08:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36a06e244308ecb7694185e80296d21aceec3e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:d4:ed:a9:54:12:f4:a4:28:95:7c:fe:fa:
6b:f4:ea:f7:93:9a:82:9f:bb:a7:73:aa:b3:b8:38:
f7:e3:c8:94:e3:d6:93:04:6c:dc:c8:54:db:95:c7:
67:7c:f3:ed:ee:db:ec:a7:fd:98:6a:6a:6b:b9:2b:
d8:4c:63:74:4e:1b:c8:a0:19:d1:8a:f2:c7:9e:b7:
df:91:e9:74:4d:e5:a5:08:8c:be:a7:6d:76:85:a3:
a5:33:bb:e7:75:03:e8:6b:f2:56:58:d3:0f:5d:b1:
15:f9:9c:01:dc:0b:81:37:f0:c2:61:26:d9:7e:2c:
6f:50:2d:6d:1d:4e:35:76:b4:d4:27:77:68:2f:69:
8b:11:6d:9e:9b:09:85:5b:a5:82:b7:a6:ea:87:4e:
4a:eb:e9:b1:86:16:98:99:4b:84:44:9c:28:e2:57:
ac:fe:7b:59:8e:51:17:58:4f:64:4f:5e:dc:f7:95:
f7:11:ec:72:c9:d7:be:de:bf:45:0d:15:97:bd:cf:
fd:4e:8e:a9:cc:aa:56:15:0e:aa:cb:82:e0:43:02:
c9:48:ad:6b:f2:79:8b:1b:5f:26:22:0b:2e:3b:b8:
b3:54:65:61:a5:42:4e:96:c6:77:44:2e:bb:3f:9e:
05:a3:ee:e6:de:29:c4:07:30:af:da:d0:4f:ef:40:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A0:6E:24:43:08:EC:B7:69:41:85:E8:02:96:D2:1A:CE:EC:3E:1F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NqBuJEMI7LdpQYXoApbSGs7sPh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/23
185.106.124.0/22
185.128.52.0/22
185.129.104.0/22
185.227.172.0/22
185.232.8.0/22
193.17.180.0/24
193.17.182.0/24
194.48.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:28:a0:bd:b1:b0:7c:38:18:a8:28:71:06:7f:95:9a:ce:36:
14:90:b2:76:5b:36:8d:36:69:63:63:8e:82:01:d5:0b:da:07:
b6:a0:bb:c2:e7:bd:a5:ee:0d:dc:f0:91:10:4a:16:2c:aa:b4:
c8:31:a2:6c:cb:d8:85:03:ce:4b:d4:09:79:b6:6f:de:0e:a0:
ea:a5:33:25:fa:71:08:bc:bd:82:83:49:31:16:63:e4:c0:e5:
aa:7b:d0:85:70:ef:2a:02:57:13:b7:81:99:61:09:66:73:c7:
07:cf:28:67:8a:98:d7:0f:eb:94:16:b0:99:7a:65:16:63:28:
78:d7:56:d5:24:bf:11:49:b6:19:7e:0e:d4:ea:d4:16:b3:d3:
eb:f2:ab:44:87:4f:2d:14:ae:0d:f7:81:b7:cb:5b:75:00:47:
ab:33:4b:c6:bf:b7:ec:7a:a4:51:1b:65:1d:cc:a3:9d:fd:82:
4c:74:f3:1f:79:cd:ad:d8:2d:b6:a2:11:a5:b8:97:09:b8:1c:
88:12:07:76:5e:f4:8f:d3:e8:a8:f4:6a:d3:e8:37:4c:0a:82:
2f:c2:24:e6:52:b6:e0:82:5a:c7:bf:0e:49:cf:8b:e2:7f:39:
49:26:86:68:6e:e5:9e:44:fc:8a:a5:db:f1:f1:1e:3f:92:e8:
3a:66:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:54 2025 by rpki-client