Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa
File: NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa (raw, json)
Hash identifier: 8GOI4hJ7xP6rg0LIYF04KTpO9lNuSPc9P1fdRwgO288=
Subject key identifier: 36:C6:D0:2E:5C:63:45:7E:11:F1:DE:AA:0B:9D:8C:83:4C:C9:27:C2
Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial: 019421B20A19FB8475A2A13529AFA3855F35
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 104.129.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0a:19:fb:84:75:a2:a1:35:29:af:a3:85:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36c6d02e5c63457e11f1deaa0b9d8c834cc927c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:e4:64:53:47:28:a5:a1:ff:0f:5a:e9:ba:
ba:d3:0d:57:96:52:d7:1c:e2:35:2b:be:1b:6e:8a:
1a:94:d8:99:04:8c:12:a1:d0:0f:3c:b4:3b:f4:4c:
4f:0d:60:b6:ef:21:2d:0e:14:80:fc:6b:08:f9:b0:
d3:e4:64:45:db:01:18:79:a8:4d:09:cf:94:d0:0f:
9d:48:04:11:2d:04:24:fb:d3:6e:c2:a5:1c:f6:ba:
49:e1:fa:ae:b0:23:e0:23:cf:4b:bd:f3:8d:8a:31:
0c:8d:dd:4f:99:64:b8:7f:e1:c4:64:1b:e3:53:62:
0b:38:45:b2:f3:e0:f6:b2:a1:07:3f:35:cc:75:30:
70:5b:05:f9:9e:93:64:cd:d8:05:45:34:b1:a5:52:
9c:37:7b:58:32:92:8b:0c:49:e3:ce:d4:f8:c5:87:
bb:9e:29:42:79:fd:6f:23:7d:97:cd:4a:48:6a:dc:
9e:00:22:66:12:0d:72:d0:7d:6a:0b:e9:8e:00:ea:
cd:48:59:d3:de:39:4f:6f:4e:34:74:a2:33:9c:e9:
c2:f1:9e:1c:ed:15:e4:77:21:73:dc:07:b5:5b:cd:
b6:e3:2c:09:7e:02:1d:9d:eb:db:c6:b6:bb:e7:f2:
45:e5:15:93:58:54:ad:db:4d:93:c4:71:1a:71:77:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:D0:2E:5C:63:45:7E:11:F1:DE:AA:0B:9D:8C:83:4C:C9:27:C2
X509v3 Authority Key Identifier:
keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.129.174.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fe:77:41:53:97:e6:4a:b2:1b:6c:57:51:93:46:37:50:7c:
3d:a2:a7:66:05:53:1c:e0:73:ef:0d:16:85:91:2d:61:70:c1:
bf:d6:c8:a2:de:37:87:0a:13:89:a5:1e:1f:e8:e0:81:87:a2:
48:2e:20:3f:44:52:23:21:7d:52:cd:91:02:91:5e:22:5b:b1:
69:ab:cb:c0:84:2f:85:48:bb:c7:51:9f:31:54:76:9f:f2:1a:
f6:56:ca:66:15:d0:eb:6a:8b:7e:e6:36:c5:80:86:e5:6e:91:
87:00:c0:7f:7e:cb:9a:65:ca:4a:f5:2b:f1:c1:c2:d4:3f:35:
7a:dc:ff:2c:82:c7:bb:54:0c:2d:b8:0d:d8:81:ce:e5:30:1a:
78:e2:75:3e:a3:ed:f3:64:77:1d:90:25:36:de:71:7e:e4:55:
df:1f:c9:0d:2e:5f:fb:d0:18:7b:23:4a:28:60:26:06:37:b6:
bd:b4:96:64:2b:d1:1b:89:4d:ad:54:3e:ac:bc:d3:29:da:d1:
04:14:dd:37:40:a5:81:d7:2d:1b:17:ae:f1:16:23:22:c1:0c:
3c:66:38:87:4e:66:80:73:8b:fd:ee:58:3a:b0:fb:f5:3f:ca:
30:26:15:a2:f5:88:ff:19:d4:3d:f9:2d:c5:f4:fc:7b:66:48:
a9:5b:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:12 2025 by rpki-client