Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/NhXAxr82j13CORIdeWDl9PifhbY.roa
File: NhXAxr82j13CORIdeWDl9PifhbY.roa (raw, json)
Hash identifier: LWTp4X6BWg45hL0vGetxJ41kPYBDS+pDAAij0HwwDrY=
Subject key identifier: 36:15:C0:C6:BF:36:8F:5D:C2:39:12:1D:79:60:E5:F4:F8:9F:85:B6
Certificate issuer: /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial: 019427B5E945F3481AB1E2C36B61072B7326
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/NhXAxr82j13CORIdeWDl9PifhbY.roa
Signing time: Thu 02 Jan 2025 15:50:20 +0000
ROA not before: Thu 02 Jan 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57099
IP address blocks: 212.162.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e9:45:f3:48:1a:b1:e2:c3:6b:61:07:2b:73:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3615c0c6bf368f5dc239121d7960e5f4f89f85b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:73:a8:9c:60:4b:d1:62:d1:f7:b0:83:e5:
f0:fa:4d:70:35:36:1f:b7:05:7c:f0:a1:df:eb:72:
2b:b0:e8:be:f9:c2:25:28:66:c5:22:9e:7f:05:0c:
6d:ea:d0:22:f4:10:fc:e4:c3:43:3f:c2:ab:70:65:
15:02:d7:90:1a:f8:b1:21:ae:c2:f0:22:37:5c:b5:
7b:49:72:80:89:f4:c0:4a:df:4a:76:c1:d2:0a:e2:
9d:82:b1:f8:c4:4f:5a:64:fb:14:86:cc:47:df:8b:
6d:fe:a5:42:a4:ba:85:04:87:da:40:e9:37:e0:2e:
54:0a:d0:0f:fb:96:2c:0a:4b:1e:84:0c:a4:b5:cc:
58:70:26:d0:63:67:a7:ed:57:05:3a:c5:84:0f:78:
1e:c6:2d:86:a2:b3:4d:e7:7d:13:f0:e6:67:0f:c7:
78:b0:38:d1:7e:44:c0:71:d2:af:a0:df:2a:a2:fa:
43:d4:ea:25:bf:fc:5e:03:8f:09:39:94:c1:07:03:
41:9d:ae:39:32:00:81:a7:8d:27:06:08:73:fe:db:
33:e5:f3:02:22:b6:61:73:1a:e3:ee:9c:95:7b:38:
b6:3f:05:e6:4a:2e:22:c3:eb:99:ec:55:14:43:11:
71:24:9c:f2:22:98:9a:49:eb:c6:dd:32:dd:12:b5:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:C0:C6:BF:36:8F:5D:C2:39:12:1D:79:60:E5:F4:F8:9F:85:B6
X509v3 Authority Key Identifier:
keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/NhXAxr82j13CORIdeWDl9PifhbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.162.128.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c0:33:1e:17:67:0d:e4:e2:6c:05:a9:a2:e6:95:db:bc:73:
b8:f0:8d:de:86:0c:b1:8c:df:a2:1a:3b:13:36:97:23:f5:0b:
21:d4:86:a7:4f:42:47:aa:3e:54:94:03:63:fa:d8:b5:14:ae:
c7:3b:e7:c4:05:7b:58:dd:80:2f:e5:b1:24:19:b9:65:17:82:
4f:ac:a3:91:16:66:e0:42:9b:d3:9c:1e:0d:00:cf:e2:51:26:
64:60:c6:41:ed:a2:ce:93:70:44:ca:88:64:7f:b4:10:70:e3:
59:2f:35:fc:2d:f2:79:cf:52:fc:7d:43:63:9c:0a:30:37:43:
f3:24:f4:b3:78:33:3a:85:4d:25:4a:55:2b:f3:25:5c:bc:5c:
eb:cb:35:32:67:80:e6:7e:44:42:b9:d5:73:cf:3a:da:dd:57:
c8:39:6d:29:02:88:e3:ba:1f:28:e9:64:43:a8:91:2a:e8:69:
16:77:53:02:61:41:ce:e5:a6:9e:44:34:95:39:ce:7a:6c:85:
0b:3f:67:92:3f:75:4e:61:e6:1c:d1:ef:43:82:3e:5a:e8:83:
c9:77:5f:2b:8f:9b:01:c1:b3:78:ee:e7:2e:b0:84:bb:80:7d:
39:cb:9c:74:94:ed:13:3b:34:39:29:51:ef:05:68:23:0e:9e:
6b:6f:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:02:39 2025 by rpki-client