Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/NnnB1vkpj5x5swbUJT7iDt7eqBw.roa
File: NnnB1vkpj5x5swbUJT7iDt7eqBw.roa (raw, json)
Hash identifier: EGTC9PlH5dUl6fD1Y4YTMcjx4gTRJ52jwPCa0VM1j0M=
Subject key identifier: 36:79:C1:D6:F9:29:8F:9C:79:B3:06:D4:25:3E:E2:0E:DE:DE:A8:1C
Certificate issuer: /CN=758288016f9f8ea2ebbfc9122c75caa1b42b5c91
Certificate serial: 01856E144A2F7C42A8B106783D2ECB01C3DC
Authority key identifier: 75:82:88:01:6F:9F:8E:A2:EB:BF:C9:12:2C:75:CA:A1:B4:2B:5C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYKIAW-fjqLrv8kSLHXKobQrXJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/NnnB1vkpj5x5swbUJT7iDt7eqBw.roa
Signing time: Sun 01 Jan 2023 16:05:01 +0000
ROA not before: Sun 01 Jan 2023 16:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204145
IP address blocks: 45.157.199.0/24 maxlen: 24
45.157.196.0/24 maxlen: 24
45.157.197.0/24 maxlen: 24
45.157.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:4a:2f:7c:42:a8:b1:06:78:3d:2e:cb:01:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758288016f9f8ea2ebbfc9122c75caa1b42b5c91
Validity
Not Before: Jan 1 16:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3679c1d6f9298f9c79b306d4253ee20ededea81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:b6:27:8f:e9:ef:8b:41:b2:5d:09:50:ad:
b1:42:dd:e6:cd:43:c5:88:4b:80:5b:cd:79:f7:47:
bd:c3:d8:ef:21:f4:73:2e:c3:55:80:fe:6a:07:c9:
10:f0:98:d1:7d:fe:4a:96:4b:6a:53:bd:90:21:9c:
c6:6f:e8:0d:db:45:aa:1a:f1:0f:2b:76:a8:44:c0:
1e:96:f6:8e:2f:12:ad:61:dd:95:21:e4:74:00:11:
50:ad:6c:ac:93:ff:1b:27:bd:67:b0:a0:58:8b:02:
f8:43:a0:f7:f9:d4:95:97:b3:2c:b3:97:dd:3e:5e:
ef:1a:de:eb:ac:6a:65:a4:35:56:c3:1c:3e:76:4e:
eb:37:a0:0f:4b:35:46:79:56:02:99:c4:d0:d1:52:
27:24:30:4f:80:71:3b:e2:1b:fe:15:31:03:e1:5d:
e9:15:0f:44:69:ba:6a:54:9c:98:b4:18:31:3e:ad:
b1:15:70:a5:85:e1:99:fe:52:04:f4:8e:90:12:98:
e9:26:89:68:0d:3b:c1:27:1f:eb:f2:5a:ef:99:44:
33:ba:e8:99:e0:a7:73:07:67:5d:9c:49:1a:2f:27:
0d:94:8a:c0:ea:f0:6b:0b:7b:f3:99:eb:90:37:eb:
6e:28:fe:6b:7b:b5:8e:fe:4e:ab:36:18:b7:4c:eb:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:79:C1:D6:F9:29:8F:9C:79:B3:06:D4:25:3E:E2:0E:DE:DE:A8:1C
X509v3 Authority Key Identifier:
keyid:75:82:88:01:6F:9F:8E:A2:EB:BF:C9:12:2C:75:CA:A1:B4:2B:5C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYKIAW-fjqLrv8kSLHXKobQrXJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/NnnB1vkpj5x5swbUJT7iDt7eqBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/dYKIAW-fjqLrv8kSLHXKobQrXJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:12:a9:04:58:42:a4:5a:f6:9b:66:ee:57:b0:31:23:b9:9b:
b7:c7:1f:40:ff:c0:61:c9:e8:a9:e9:e3:39:2e:55:0b:9f:94:
f4:89:1a:21:90:4a:fb:7e:c0:37:42:ee:4e:77:c1:e3:f9:02:
64:05:9e:97:d2:88:96:6d:40:a1:f2:4e:fc:de:e3:69:b2:1b:
de:49:59:34:e8:58:7f:ed:4c:2d:3f:18:b4:9b:71:59:98:1c:
68:53:a8:f6:1d:13:c8:72:a6:87:97:11:86:76:55:60:ef:27:
6f:e9:54:c7:0d:21:eb:a4:0c:ce:3f:08:58:93:4d:e3:00:ee:
e9:f2:cd:ea:f3:36:b8:44:ab:62:9b:1e:46:81:20:bc:14:bd:
92:b4:39:ed:76:a6:2f:e1:50:65:42:a1:c5:ca:38:ba:70:8b:
9b:e1:de:b6:ce:8e:f7:41:1f:09:c7:70:e1:8e:73:f9:b3:4d:
51:9e:45:24:12:11:7e:e0:f0:d8:d3:35:8f:4e:62:b6:0c:17:
31:35:a6:39:6d:4a:6a:0f:c0:9b:dc:45:98:a6:bf:77:be:8f:
e2:1f:64:77:e5:63:e2:7a:4b:ab:d1:4d:48:86:d4:11:ef:c5:
2c:9d:d9:53:65:e0:9f:81:06:59:6c:e1:3f:7f:a7:5b:63:08:
d2:2b:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:45 2025 by rpki-client