Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ntfUrbz7BUkei1F-tn7_XqXuheE.roa
File: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (raw, json)
Hash identifier: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=
Subject key identifier: 9E:D7:D4:AD:BC:FB:05:49:1E:8B:51:7E:B6:7E:FF:5E:A5:EE:85:E1
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0194244561F05AD0A694A0F0F6B6D0F21DA2
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ntfUrbz7BUkei1F-tn7_XqXuheE.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208619
IP address blocks: 45.92.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:61:f0:5a:d0:a6:94:a0:f0:f6:b6:d0:f2:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed7d4adbcfb05491e8b517eb67eff5ea5ee85e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:54:cf:89:09:33:46:50:a6:93:2c:34:20:
25:4a:9d:f8:8e:5b:ce:13:98:f0:97:fe:55:58:37:
44:09:c8:0a:13:d9:25:86:20:7b:c6:03:9d:d3:95:
03:4a:e5:01:80:07:9c:76:96:ca:eb:53:51:68:ca:
9b:8a:f1:b7:0c:55:3c:a3:bd:2c:75:0c:70:cd:61:
10:4a:52:f7:77:81:4f:52:70:99:56:21:68:0d:9a:
f7:06:06:57:5a:be:1f:96:a5:2d:11:2a:75:6d:33:
8a:c8:ba:b4:8f:b5:ca:21:9f:ac:1d:90:8f:0c:86:
21:0e:8d:41:6c:5e:07:1d:4f:47:99:7e:81:54:92:
61:e2:41:01:58:1e:fa:86:b0:22:a5:c4:57:df:2d:
6a:4a:86:da:07:f1:44:59:71:69:b9:a9:eb:df:1d:
e8:8b:e9:5b:7d:a2:83:b8:52:7f:9f:2f:b2:52:f6:
65:9a:c4:87:fa:9d:bb:91:f1:79:74:25:80:70:26:
bc:80:9b:6b:ae:e4:ac:50:2f:19:54:6b:b9:e7:14:
af:f7:33:b5:7b:10:69:3a:2b:c3:a1:9d:18:b1:bc:
c1:3c:cd:16:bb:2c:61:2b:bd:ed:2a:c3:c3:dd:73:
22:8f:83:4a:b2:44:b7:24:3e:43:9e:f9:90:ab:58:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:D4:AD:BC:FB:05:49:1E:8B:51:7E:B6:7E:FF:5E:A5:EE:85:E1
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ntfUrbz7BUkei1F-tn7_XqXuheE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.132.0/22
Signature Algorithm: sha256WithRSAEncryption
84:6c:cb:90:8c:d3:8a:20:49:c6:f1:be:91:b7:34:7e:ec:85:
8a:29:e2:77:28:54:4b:a2:63:2d:8c:6d:0c:8e:f2:12:39:bb:
35:82:d7:37:0f:5c:90:ee:30:d3:8e:60:02:0c:84:fd:93:b4:
f6:80:0c:5a:b4:39:a2:c5:75:c2:d1:62:64:a5:b2:8c:84:95:
34:d2:1b:d5:33:0d:89:6c:6f:e3:2f:d6:1f:f1:f5:92:32:dc:
30:00:80:55:35:23:e8:14:60:5d:0c:bf:c3:bb:d8:59:a7:76:
13:4f:c7:11:4f:a7:3d:b5:7b:22:a8:f8:14:40:25:08:90:32:
91:d5:17:9e:05:12:b2:f7:6d:26:32:3b:bb:d1:d0:b4:2b:7d:
4a:23:48:db:54:61:ad:fa:2a:9e:38:5b:1c:7e:73:0d:8f:48:
3f:59:43:98:8f:98:5c:40:b5:25:cb:4d:4d:4d:b7:53:6d:00:
78:6c:81:2a:93:65:3f:e9:9a:3d:a6:27:cd:82:12:dd:d7:81:
d5:74:40:70:32:bf:00:50:a7:c7:ae:f9:02:55:8d:f1:d1:e4:
0f:f1:78:3d:3f:b5:36:6b:eb:b6:5e:6e:ef:ad:df:0d:c5:49:
8f:7b:6f:68:39:d4:38:ca:51:e3:aa:6b:c1:d5:aa:86:3d:f3:
19:2d:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:43 2025 by rpki-client