Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/NhgBecJhbXJyu80EUHu6BPAS8Mg.roa
File: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (raw, json)
Hash identifier: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=
Subject key identifier: 36:18:01:79:C2:61:6D:72:72:BB:CD:04:50:7B:BA:04:F0:12:F0:C8
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0194258FB7413CA85374825B4821ECBF6DDD
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/NhgBecJhbXJyu80EUHu6BPAS8Mg.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204393
IP address blocks: 45.135.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b7:41:3c:a8:53:74:82:5b:48:21:ec:bf:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36180179c2616d7272bbcd04507bba04f012f0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:91:7f:16:44:49:f2:03:b1:32:5e:85:ed:
b0:a1:a9:5f:8d:51:c4:fa:a3:67:a9:6a:60:b3:81:
39:ab:98:6e:35:df:f8:dc:c5:57:38:57:4a:8b:76:
1f:7d:bc:73:8f:1f:fd:e6:0e:4a:47:3a:30:ee:76:
2d:e4:33:c5:0a:c2:c7:4e:42:4e:78:3a:37:61:50:
71:14:2d:f4:49:e8:95:74:84:d0:9a:6b:53:f6:de:
c3:cd:58:e0:7e:99:fc:93:e5:05:68:66:5d:02:ee:
51:55:bd:a5:ac:0a:06:f6:b0:28:e8:ee:a6:da:73:
ab:dc:8b:0f:2c:0f:2d:67:86:80:73:08:aa:d7:94:
c4:99:24:be:1e:87:2d:e8:d6:c3:d3:a6:9e:90:1a:
5f:20:ba:f2:f3:fc:b1:69:11:d9:b8:b0:3a:fe:30:
db:96:65:44:fd:e7:39:9d:28:00:d8:70:66:ea:93:
a5:f2:b3:96:9e:9c:d9:59:12:84:63:a1:52:f7:3a:
cb:1c:bc:7c:3b:77:28:64:a1:f4:86:a0:65:be:fa:
73:20:71:21:9e:e5:ce:15:1a:9c:68:e1:37:88:18:
05:f8:52:11:08:c7:86:c6:b1:b7:d9:29:ab:2f:f1:
cb:f3:a4:79:16:4c:03:08:ef:85:ab:dd:57:18:ee:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:01:79:C2:61:6D:72:72:BB:CD:04:50:7B:BA:04:F0:12:F0:C8
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/NhgBecJhbXJyu80EUHu6BPAS8Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.242.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3b:83:3b:77:5f:95:f5:f5:54:73:9c:65:69:29:c0:96:39:
9c:c3:32:82:4d:e3:d1:37:df:e3:e4:c6:80:b0:05:f9:a5:7a:
ce:5f:4b:9d:25:59:2d:d3:af:9a:a7:d5:df:38:37:48:7f:01:
e7:fd:c8:36:70:c2:0d:01:93:28:5c:dd:84:58:10:a4:e5:fd:
2e:93:35:e7:65:7a:b0:0d:8b:32:26:65:14:de:5c:79:43:bf:
03:39:d5:bc:ec:d6:7d:a8:d3:ea:fd:c4:34:b9:92:38:d8:5a:
05:4f:0d:54:f7:c3:8b:23:98:1e:5d:ef:f3:32:4a:52:7d:99:
5a:1a:2c:73:fc:6a:fe:d5:14:7b:fc:cc:e2:34:b8:20:ed:b3:
45:be:16:d2:c0:2b:51:03:08:db:98:52:2f:5d:be:ec:38:1c:
a7:67:24:55:bd:e3:e9:a3:47:01:56:3c:17:bb:c9:0a:cb:e6:
86:11:04:28:7a:ab:1c:9a:ff:38:13:81:a5:ea:d8:78:a7:26:
3c:2c:c2:a0:55:6e:2d:f7:09:24:65:7b:16:44:dc:97:77:ee:
49:1f:33:5f:31:67:25:05:16:1c:f0:5a:11:b7:b3:70:7c:4b:
35:b6:e6:d8:86:45:d7:50:b9:82:5f:9f:01:35:6b:b8:94:0b:
91:0e:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:51 2025 by rpki-client