Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa
File: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (raw, json)
Hash identifier: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=
Subject key identifier: 9E:FA:BE:4C:93:5B:2F:46:A3:33:64:C0:E5:C7:E0:27:E0:EA:5C:18
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 019427B5F41081393754AC40EDF9CC9BE06C
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200562
IP address blocks: 45.159.172.0/22 maxlen: 22
146.255.116.0/22 maxlen: 22
185.75.144.0/22 maxlen: 22
2a05:5300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f4:10:81:39:37:54:ac:40:ed:f9:cc:9b:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9efabe4c935b2f46a33364c0e5c7e027e0ea5c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:ec:cc:84:fa:0d:74:20:b1:3d:f7:a6:82:
f5:3f:a6:dd:cf:7e:9b:a2:38:fb:44:d7:d4:62:ad:
57:b8:6c:e0:f1:99:2b:e5:bf:db:b1:c3:24:7a:fc:
ed:86:aa:2e:0c:1f:4a:3f:10:c3:64:f7:ec:12:45:
c5:dd:2d:5f:23:0e:ff:fc:50:1c:ad:89:7a:62:5b:
f3:7d:05:01:43:e0:d4:ea:d6:90:69:5e:0a:07:29:
1a:40:9b:be:63:78:23:96:ed:e1:64:1e:cb:8a:29:
43:db:57:eb:a9:01:6a:2a:3f:f6:d9:54:db:95:c2:
b5:26:4e:23:c9:eb:d9:69:b9:62:20:d4:8f:f4:7f:
06:f3:35:8c:25:ac:d6:99:e1:2b:4a:6a:4e:6b:2f:
de:61:7c:ba:0d:5c:20:61:ab:58:cf:38:8e:5e:88:
13:0c:96:51:32:35:75:b9:19:14:f4:fc:fb:44:32:
96:dd:43:70:d8:0e:6f:f6:fe:b2:3f:0f:1a:52:ed:
89:c8:71:84:55:28:1c:2b:9b:70:de:29:41:0d:34:
ae:83:41:5c:79:ed:3d:47:cc:fc:27:e3:83:3e:65:
f3:e7:f4:e9:f2:64:21:a3:58:b1:11:d2:2b:85:f6:
8e:b1:69:04:0c:d2:ae:d7:0a:33:46:79:42:3c:e5:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FA:BE:4C:93:5B:2F:46:A3:33:64:C0:E5:C7:E0:27:E0:EA:5C:18
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.172.0/22
146.255.116.0/22
185.75.144.0/22
IPv6:
2a05:5300::/29
Signature Algorithm: sha256WithRSAEncryption
2b:6a:14:aa:6d:db:e6:3b:45:2c:83:e3:3a:72:d8:7e:81:08:
72:68:26:7e:c6:02:a5:1d:b5:99:38:02:a7:3b:6f:af:8e:bf:
2d:c8:18:d6:51:eb:31:26:c2:33:ed:1d:09:af:4f:40:72:9d:
f0:61:c1:1f:64:51:6f:e5:78:63:59:37:74:f3:12:06:88:52:
c0:9a:eb:bd:66:a2:b2:24:88:53:cb:d0:95:56:2d:af:5c:90:
7e:55:66:69:35:19:c2:67:04:c1:67:0b:57:55:7d:44:c8:e1:
0d:a8:b5:10:0b:ed:25:f7:51:82:2e:3b:8e:c7:6e:68:04:03:
94:5d:97:fe:e0:fc:13:4f:e3:29:d9:85:81:ee:5b:1e:90:23:
a6:54:e5:0b:e2:34:c1:f6:d9:7f:3b:12:53:be:16:b6:94:01:
5d:ef:62:8d:0e:b0:89:c6:9f:f8:f0:ed:4e:c7:ce:9f:9d:72:
e0:08:a5:2d:dd:b2:af:77:a3:1e:50:26:c9:87:ce:9a:ea:ab:
97:a8:87:3a:df:ee:f5:af:2a:bc:60:51:2b:cf:e4:88:41:e5:
ef:5d:8e:84:6d:f1:f7:d6:d2:cc:a4:7e:f0:4f:62:9e:53:07:
bd:63:88:9b:93:b2:e4:ed:3e:51:e3:ff:aa:a6:5d:33:a8:ec:
c6:94:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:31 2025 by rpki-client