Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa
File: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (raw, json)
Hash identifier: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=
Subject key identifier: 35:70:D3:FE:DC:79:56:5D:A8:1C:5D:75:BC:18:BA:C0:E2:74:2C:BF
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019425FC463BA361AA8E73D1AE6E7AADCF5A
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa
Signing time: Thu 02 Jan 2025 07:47:57 +0000
ROA not before: Thu 02 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49020
IP address blocks: 45.142.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:46:3b:a3:61:aa:8e:73:d1:ae:6e:7a:ad:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3570d3fedc79565da81c5d75bc18bac0e2742cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:81:c5:43:bc:dd:0c:2b:4d:d4:8c:25:83:
4c:7f:bc:20:9c:13:79:62:ee:a1:2b:6e:45:2e:9e:
da:70:45:9f:e9:6e:02:cf:ad:14:96:60:1d:76:12:
38:c2:66:6a:d5:f0:c1:26:3e:8a:d1:89:9a:56:52:
23:51:55:9e:cb:df:53:ca:69:c6:5e:45:b3:ee:95:
36:a4:a3:64:8f:d7:ac:26:c2:d2:1d:bf:f6:96:c4:
c0:4e:70:2f:1c:8d:40:45:cc:94:0b:9d:9e:b3:24:
3b:76:94:b2:a7:c4:4e:a6:21:36:43:6f:77:3d:02:
9b:00:93:31:f2:ce:66:39:30:42:2b:de:b3:43:39:
11:b8:d3:88:1c:f6:6d:c9:92:a3:60:db:6c:8f:71:
85:e6:64:ff:a2:6d:2b:2a:00:6b:14:f7:62:be:7a:
ce:74:09:70:a4:75:cd:26:b5:47:30:2d:ac:09:27:
54:1d:1a:d6:d8:b7:49:8c:5f:cd:b4:64:f1:d6:ad:
74:f0:2c:44:97:a5:8c:73:79:15:de:36:6f:57:a9:
15:90:c9:e1:b0:b2:fc:4e:62:8f:fc:46:81:64:90:
2e:da:9b:f8:cc:f8:99:3b:d4:22:b5:b0:ee:51:d0:
98:20:3c:8c:b9:04:33:dd:0e:d4:13:0f:bd:0b:8e:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:70:D3:FE:DC:79:56:5D:A8:1C:5D:75:BC:18:BA:C0:E2:74:2C:BF
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b2:2a:81:a4:ed:84:d0:34:e2:35:f4:86:26:b4:c0:c5:9f:
1a:29:8e:fa:1f:d1:90:c4:3f:fc:05:d9:f1:0c:96:18:b1:4f:
2f:98:6f:6a:45:a6:5e:3e:35:b1:1f:c9:29:ab:8f:d7:f8:bc:
50:86:76:57:68:d9:69:20:f6:f2:f3:cc:af:dd:e5:4d:72:6d:
cc:a0:b0:9e:0b:de:9c:db:c5:98:43:c9:4b:fd:67:5f:3d:6e:
8a:12:20:bb:b4:60:a3:69:69:56:2d:48:45:11:aa:9d:18:f1:
6a:a6:7f:4e:72:67:e9:da:b1:b7:ef:aa:5d:9c:c5:a0:ea:2f:
2c:23:22:02:4b:02:1a:d3:a2:52:c1:df:47:ec:b2:70:85:f0:
cd:9a:c8:f3:5c:11:a1:4e:76:38:81:69:dc:25:c3:c1:b6:2a:
88:6c:ce:13:ad:06:04:c2:c3:01:01:26:ea:15:44:21:74:93:
b5:9c:a2:aa:0c:e0:95:3b:05:c4:e7:83:6a:ae:29:1d:2f:b3:
f9:c3:a9:85:8b:a9:33:d8:41:61:27:00:66:16:c6:47:5d:04:
84:d0:68:4c:46:42:18:e9:ad:78:b0:c6:40:f8:5f:5f:33:b3:
8d:80:c9:df:bc:f5:81:16:8a:27:14:5a:d0:bc:9f:c8:65:78:
7c:33:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:09 2025 by rpki-client