Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Nnh4-7eqRxwGHoRVZMLvhTPakv4.roa
File: Nnh4-7eqRxwGHoRVZMLvhTPakv4.roa (raw, json)
Hash identifier: mupmx6EVhY6r18Yy9j1PLI6OSj37SGrP9X/5UUlkW6A=
Subject key identifier: 36:78:78:FB:B7:AA:47:1C:06:1E:84:55:64:C2:EF:85:33:DA:92:FE
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0407B5C8
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Nnh4-7eqRxwGHoRVZMLvhTPakv4.roa
Signing time: Sat 01 Jan 2022 08:03:32 +0000
ROA not before: Sat 01 Jan 2022 08:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 5.181.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67614152 (0x407b5c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 08:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=367878fbb7aa471c061e845564c2ef8533da92fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:b5:d2:2e:9b:5a:e0:1a:10:68:ec:ee:a8:
e5:35:4d:66:26:9c:9e:7d:bf:bd:4a:95:08:a8:53:
8e:04:18:0d:95:c1:f3:42:cc:73:32:9e:85:dc:f0:
79:26:4b:34:41:6b:4e:4a:07:b6:5d:5b:45:d3:0f:
1c:5a:98:dc:a1:a3:ba:19:2b:21:c1:cb:2a:1f:f6:
10:2e:82:7c:fa:ae:2d:ed:d3:5e:0f:f7:c9:bd:0b:
e9:2a:67:83:63:ac:c3:53:38:a6:8b:cb:1f:aa:b1:
c3:97:51:c3:01:90:12:ae:a3:00:49:92:ec:23:9b:
be:d9:a0:5d:8d:3a:bd:88:ec:bc:96:d7:fc:b9:8b:
e9:11:49:9e:24:c5:72:19:33:3c:29:8a:2c:1b:02:
9e:75:19:84:e4:d4:ec:d5:71:06:5e:28:c0:b4:0b:
34:d2:2f:92:cb:57:54:80:d9:8f:e4:fa:53:60:46:
7e:c2:5e:e2:3c:28:98:fc:a0:33:a9:21:65:c1:d6:
40:e3:1a:cb:a9:1b:eb:dc:7b:f1:65:29:e4:aa:e0:
03:43:76:5e:8c:77:94:6b:38:c8:c0:de:e6:a0:7b:
32:d7:1c:1f:c9:f1:68:b4:6d:c6:55:fc:69:2f:9b:
f5:6e:0c:85:8b:45:75:24:78:4a:a2:77:cc:e4:09:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:78:FB:B7:AA:47:1C:06:1E:84:55:64:C2:EF:85:33:DA:92:FE
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Nnh4-7eqRxwGHoRVZMLvhTPakv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:f3:ce:29:fd:b2:e5:e8:cb:36:4b:de:ea:00:46:cf:4b:1c:
e7:47:30:62:b7:72:ec:f9:84:9e:81:ea:fc:24:23:44:d3:cd:
2c:f1:88:8a:6c:e1:92:93:7a:f2:ea:d1:5e:0c:53:f0:d3:00:
39:ad:a7:94:1c:45:4d:43:79:1d:47:20:51:ec:5a:e3:8a:97:
41:9f:c9:22:51:b1:69:8d:1b:49:11:64:44:14:27:01:22:12:
86:90:3a:40:ab:b4:df:f3:6e:fd:4d:be:91:d2:44:81:e5:ea:
5b:c3:17:4d:15:07:f4:14:6c:e5:0b:3f:5a:c2:18:93:67:be:
56:1f:81:be:cd:90:33:ac:b1:ea:f4:72:f3:f2:bc:bf:d0:04:
e6:dd:d2:13:cc:93:14:91:1b:5c:9a:42:f5:66:8e:6f:4f:ad:
96:18:da:bd:c1:24:e7:31:34:68:74:bd:f0:50:d2:98:33:49:
a9:b6:f9:61:bb:5e:b0:c2:eb:67:f9:aa:05:3e:17:ed:56:80:
44:f7:97:30:6b:d8:f0:5f:4a:1d:ac:89:9b:96:11:8f:f7:e6:
43:91:41:ec:37:b6:8e:24:0a:98:f0:a0:a0:b6:1b:67:ad:0d:
22:51:2c:23:59:c2:e9:37:09:f7:cc:a8:5a:22:c3:95:03:ff:
67:d2:f2:60
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBAe1yDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MjQwMzkzOTkwMTdmYTA5M2RjOGQ1MDM3OTlmNmNhNDAzZjBiZDA1MB4XDTIyMDEw
MTA4MDMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzY3ODc4ZmJiN2Fh
NDcxYzA2MWU4NDU1NjRjMmVmODUzM2RhOTJmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhOtdIum1rgGhBo7O6o5TVNZiacnn2/vUqVCKhTjgQYDZXB
80LMczKehdzweSZLNEFrTkoHtl1bRdMPHFqY3KGjuhkrIcHLKh/2EC6CfPquLe3T
Xg/3yb0L6Spng2Osw1M4povLH6qxw5dRwwGQEq6jAEmS7CObvtmgXY06vYjsvJbX
/LmL6RFJniTFchkzPCmKLBsCnnUZhOTU7NVxBl4owLQLNNIvkstXVIDZj+T6U2BG
fsJe4jwomPygM6khZcHWQOMay6kb69x78WUp5KrgA0N2Xox3lGs4yMDe5qB7Mtcc
H8nxaLRtxlX8aS+b9W4MhYtFdSR4SqJ3zOQJ3jECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ2eHj7t6pHHAYehFVkwu+FM9qS/jAfBgNVHSMEGDAWgBRiQDk5kBf6CT3I
1QN5n2ykA/C9BTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lrQTVPWkFYLWdrOXlOVURlWjlzcEFQd3ZRVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvZWIyMzlhLTMzYzgtNGRiZC1iYzk2LTMyNTk0OTZlN2M1Zi8x
L05uaDQtN2VxUnh3R0hvUlZaTUx2aFRQYWt2NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
ZWIyMzlhLTMzYzgtNGRiZC1iYzk2LTMyNTk0OTZlN2M1Zi8xL1lrQTVPWkFYLWdr
OXlOVURlWjlzcEFQd3ZRVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW1uDANBgkqhkiG9w0BAQsFAAOC
AQEAtPPOKf2y5ejLNkve6gBGz0sc50cwYrdy7PmEnoHq/CQjRNPNLPGIimzhkpN6
8urRXgxT8NMAOa2nlBxFTUN5HUcgUexa44qXQZ/JIlGxaY0bSRFkRBQnASIShpA6
QKu03/Nu/U2+kdJEgeXqW8MXTRUH9BRs5Qs/WsIYk2e+Vh+Bvs2QM6yx6vRy8/K8
v9AE5t3SE8yTFJEbXJpC9WaOb0+tlhjavcEk5zE0aHS98FDSmDNJqbb5YbtesMLr
Z/mqBT4X7VaARPeXMGvY8F9KHayJm5YRj/fmQ5FB7De2jiQKmPCgoLYbZ60NIlEs
I1nC6TcJ98yoWiLDlQP/Z9LyYA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:55 2025 by rpki-client