Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/NU4oPvBdanCpQYtg5EcSpwQwUWQ.roa
File: NU4oPvBdanCpQYtg5EcSpwQwUWQ.roa (raw, json)
Hash identifier: 0FgHgO+nB7xm3VDV/Bp/BSqeacOfan9EdaOJLGOJnGU=
Subject key identifier: 35:4E:28:3E:F0:5D:6A:70:A9:41:8B:60:E4:47:12:A7:04:30:51:64
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01953D57DAE0BD9E5F6048178C7C6103683F
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/NU4oPvBdanCpQYtg5EcSpwQwUWQ.roa
Signing time: Tue 25 Feb 2025 13:42:02 +0000
ROA not before: Tue 25 Feb 2025 13:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.136.37.0/24 maxlen: 24
45.136.39.0/24 maxlen: 24
185.38.26.0/24 maxlen: 24
185.38.27.0/24 maxlen: 24
194.31.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:57:da:e0:bd:9e:5f:60:48:17:8c:7c:61:03:68:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Feb 25 13:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=354e283ef05d6a70a9418b60e44712a704305164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:e8:8b:de:d5:f4:b2:2c:76:98:f9:38:4b:
b8:d6:fd:1b:bf:68:4c:62:8a:6f:af:68:b1:01:ee:
c4:57:2a:71:74:6c:54:35:72:2d:c3:27:86:dc:55:
22:fe:f7:b3:f7:f7:64:6e:9f:bd:2a:d6:e3:66:48:
3c:a8:1f:cd:de:44:73:f9:84:a7:0f:99:d7:bb:93:
e4:3c:10:8c:dd:85:e4:d5:cc:33:93:22:92:5b:9c:
e8:fe:36:0a:35:a0:41:32:3b:1d:aa:f9:b8:2b:f5:
3c:0c:99:be:ba:5f:8e:c6:96:9f:c9:bd:c5:c4:a8:
ad:c0:f1:26:af:39:b7:3c:4a:83:a8:7c:6d:9d:1f:
20:3b:cf:40:fd:5f:bf:42:93:7b:b8:5c:61:3a:97:
c8:57:69:78:3f:3b:35:2a:e9:ed:cb:27:5d:bb:19:
5e:d0:00:b4:25:b2:22:c3:ee:d7:42:8c:cc:9b:0b:
11:d8:45:83:94:43:83:14:74:87:97:86:84:9d:28:
85:09:14:39:e2:d3:b2:67:4a:84:4e:a7:09:fb:66:
f4:f5:c6:ba:26:db:58:4f:aa:e4:e1:2c:ba:37:13:
cb:0e:bc:4a:7a:89:52:7f:30:46:ce:94:dd:84:fc:
31:82:b7:1d:23:0b:5e:50:98:78:41:07:8e:25:b8:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:28:3E:F0:5D:6A:70:A9:41:8B:60:E4:47:12:A7:04:30:51:64
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/NU4oPvBdanCpQYtg5EcSpwQwUWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.37.0/24
45.136.39.0/24
185.38.26.0/23
194.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2e:51:18:ed:ce:1e:bf:3d:35:84:e0:d2:3d:80:5d:0d:44:
ed:86:68:0b:4a:4a:b5:8b:8e:47:df:76:74:ae:97:c5:c4:e3:
8b:c2:7c:b2:f6:a4:09:e0:cd:c0:01:c1:c8:40:39:5d:3a:a1:
4d:28:71:e2:0e:7b:8a:4f:2e:6f:bc:11:f7:1c:82:1c:00:8b:
5d:e9:49:11:85:1b:33:99:04:0d:67:3d:9b:58:1b:fb:5d:ac:
54:b1:16:f1:1d:fa:28:21:ef:1e:9d:b1:26:bf:a4:ed:c8:38:
3e:31:d3:2a:27:72:a5:ac:6b:4f:f9:c9:b3:ef:5d:35:d9:63:
c9:b7:c7:fd:04:68:64:5d:39:3a:88:d6:0d:44:9f:88:d8:7b:
05:0e:83:f1:3a:e9:34:e5:01:81:39:bf:5b:88:88:ef:1e:d7:
5a:98:40:31:13:df:68:c7:32:78:a6:08:7f:83:55:f3:88:71:
34:67:f8:5b:30:f5:c9:12:a9:fc:8c:e8:5a:b5:df:c8:24:f7:
d3:4b:f4:2b:2a:fc:63:d8:44:27:ff:ae:7b:3c:fd:02:13:9c:
2f:d3:d0:72:11:2d:04:4a:33:f2:27:8e:16:e9:9e:34:60:e3:
79:26:67:f2:b0:55:8f:2a:bd:ff:13:6b:dd:6d:f7:8b:c0:0d:
90:ec:86:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:15:06 2025 by rpki-client