Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/nkpGksz3gCVvZCT_hVblqrx0ZXw.roa
File: nkpGksz3gCVvZCT_hVblqrx0ZXw.roa (raw, json)
Hash identifier: e98GJe9aNyV683Te8SLJqRptJIud3a05FbxjDacmN+w=
Subject key identifier: 9E:4A:46:92:CC:F7:80:25:6F:64:24:FF:85:56:E5:AA:BC:74:65:7C
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 05789F26
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/nkpGksz3gCVvZCT_hVblqrx0ZXw.roa
Signing time: Thu 02 Jun 2022 17:23:22 +0000
ROA not before: Thu 02 Jun 2022 17:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.95.212.0/22 maxlen: 24
5.181.184.0/22 maxlen: 24
45.8.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91791142 (0x5789f26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jun 2 17:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e4a4692ccf780256f6424ff8556e5aabc74657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:d4:ff:45:26:7d:5e:fb:8a:19:ad:84:af:
2f:a2:c8:2b:30:d0:d4:a1:09:c2:73:16:c0:ef:62:
b3:ff:44:43:89:3a:89:74:61:b0:33:ad:e3:ab:08:
d9:ee:3d:85:e8:fe:db:3b:1a:af:d9:11:b5:42:bd:
c3:f9:f2:af:a3:cb:2e:71:44:2a:4d:90:b6:15:1a:
7a:3a:ed:91:fd:1c:4e:50:6e:f3:73:81:7d:32:da:
e7:ac:24:91:ee:47:17:27:81:3a:85:d7:56:7d:e1:
54:b4:10:af:50:cb:5d:a7:1d:b7:0a:e3:4d:d2:a4:
e3:4f:e2:0b:11:f6:eb:c8:e6:35:9f:b4:0b:7c:01:
b7:80:d9:29:d6:98:fc:9d:f7:4b:be:74:ba:d6:79:
c8:10:d3:7f:47:45:31:87:aa:1d:8c:f7:3f:5d:f3:
9e:1d:c6:05:ca:12:b5:e7:87:76:80:de:b4:e8:6b:
87:da:a8:06:49:c1:33:ef:ef:fe:47:b3:b9:02:00:
61:c5:b4:5b:59:97:e1:54:0f:84:ae:ee:88:ef:ab:
b6:9a:54:94:a0:eb:52:4f:60:f7:54:e9:e9:36:fe:
38:02:b2:3f:36:4c:26:04:d8:bd:90:b7:33:a7:8f:
9c:5b:37:7c:1c:0e:6f:f0:6a:50:17:f4:b3:73:c0:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:46:92:CC:F7:80:25:6F:64:24:FF:85:56:E5:AA:BC:74:65:7C
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/nkpGksz3gCVvZCT_hVblqrx0ZXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.184.0/22
45.8.216.0/22
45.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:d6:39:a4:75:77:67:66:a0:5a:b0:f6:6f:bc:ae:0c:64:8e:
e6:50:88:6a:4c:c8:60:d0:bb:2d:25:04:34:14:c2:fa:e7:3b:
bb:da:eb:f3:cb:54:c2:55:39:d2:a6:7a:90:ad:30:22:b4:02:
7f:61:f4:30:8c:dd:7e:d3:bf:9c:5a:d2:00:05:67:c5:18:83:
34:60:5f:d9:df:97:54:76:1c:44:e7:75:c0:d0:2c:87:7d:77:
b7:ab:d0:df:a6:8c:0d:d4:fc:fc:46:c1:09:c6:58:52:cd:89:
4f:db:ed:82:c6:ff:68:d3:95:b8:34:55:b9:58:05:16:80:18:
93:fa:c4:0c:df:eb:57:df:c6:f8:95:4a:58:33:17:3c:f0:10:
4e:d2:fc:d7:64:7e:4b:8c:95:99:26:b9:04:2b:a0:98:17:ff:
16:53:83:9e:b0:9f:ad:49:f3:24:0d:df:6d:99:3f:13:1d:42:
46:cd:db:2c:4e:2d:5a:8c:af:01:3f:72:78:c6:82:c1:7e:17:
f3:9e:a3:5c:e8:e8:ff:a0:48:14:af:56:4e:6f:47:66:cc:0c:
99:4c:63:c3:2b:bf:76:93:45:87:00:f7:e2:65:76:0d:63:ed:
ef:87:f9:a7:54:d2:1d:f8:93:ac:e3:44:4f:9b:84:bf:53:b0:
34:db:f0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:15 2025 by rpki-client