Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/Nbis52_bGmBIGC7k7OWz54ZVymo.roa
File: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (raw, json)
Hash identifier: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=
Subject key identifier: 35:B8:AC:E7:6F:DB:1A:60:48:18:2E:E4:EC:E5:B3:E7:86:55:CA:6A
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 0194206856A780BCF71B89D655B0FFBB4220
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/Nbis52_bGmBIGC7k7OWz54ZVymo.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50525
IP address blocks: 2001:4de0:49::/48 maxlen: 48
2001:4de0:1006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:56:a7:80:bc:f7:1b:89:d6:55:b0:ff:bb:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b8ace76fdb1a6048182ee4ece5b3e78655ca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:7c:04:ee:f8:36:8e:e2:85:b7:a9:fd:1f:
71:48:00:a4:da:ce:6e:27:d5:2e:61:4d:c1:54:f4:
23:18:78:3e:48:bd:db:45:b5:8f:9c:db:96:84:9a:
bb:ab:c8:bd:67:cb:cd:bd:b6:04:51:af:79:8a:11:
86:de:b9:8a:ff:e5:ff:c5:9c:7a:e2:eb:12:23:27:
0e:1b:c9:3f:52:cd:a5:be:27:01:fd:63:16:a1:af:
71:43:25:32:47:e4:cc:37:97:83:e8:eb:f0:c0:e9:
42:38:c6:84:e2:d3:ab:50:8e:98:72:bb:e1:25:6e:
3d:6f:64:18:e5:8d:b7:4c:ba:d3:91:a4:94:df:5f:
fc:f7:76:18:99:18:57:10:49:ac:b5:34:f9:91:e5:
02:75:50:1e:8f:a1:a2:3f:70:b3:12:1c:f2:d6:3e:
b7:d7:94:8a:23:e6:a0:d3:05:0f:f4:c0:7a:41:d9:
6f:dc:ba:72:03:49:83:41:db:39:63:43:54:4b:f9:
81:50:cc:0d:70:44:f1:64:c9:a4:69:06:a2:dd:e7:
32:72:87:51:79:bd:78:74:75:6d:d4:4b:0b:4a:08:
88:e3:a5:98:32:23:80:ed:b5:e8:a1:e6:eb:9e:ce:
87:e5:a8:42:50:49:81:e7:3e:3b:56:b4:be:c8:8f:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:AC:E7:6F:DB:1A:60:48:18:2E:E4:EC:E5:B3:E7:86:55:CA:6A
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/Nbis52_bGmBIGC7k7OWz54ZVymo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4de0:49::/48
2001:4de0:1006::/48
Signature Algorithm: sha256WithRSAEncryption
b7:ef:1c:64:df:8c:b3:d8:9e:ed:b6:78:cf:14:c9:37:b4:8d:
1e:de:b4:e1:e4:22:74:5f:ce:c1:e3:e5:a7:25:92:2a:ab:53:
06:8f:2a:e1:f3:e4:7a:ef:cd:9d:e2:9d:0a:a2:6c:32:a8:aa:
bf:8e:c8:f1:a0:9d:e1:b5:71:e6:04:4a:88:66:21:8d:26:2a:
0a:43:64:62:e6:46:be:71:b5:84:0f:48:be:54:e2:97:5c:b6:
d1:f9:7a:33:ca:e6:58:d8:c9:0f:04:2b:c3:cd:20:6f:55:d3:
44:6e:a3:5e:69:85:3b:3a:33:74:20:e0:47:e9:8f:11:3b:7a:
8c:39:d7:55:07:3a:f2:71:35:75:8b:6c:7a:4f:b1:b1:1e:23:
d3:08:eb:b7:fb:62:c2:e0:8b:1d:22:f9:14:58:80:4d:21:fa:
a8:87:09:41:d5:a2:b8:8b:8d:b1:f7:43:6b:a5:c6:a6:e3:f2:
d6:22:c1:2a:9d:61:e0:2f:09:f5:57:05:50:8f:07:3a:b6:2e:
09:fe:c8:2c:a8:e3:a1:1f:45:61:b8:ca:10:aa:e9:76:33:33:
85:e7:bf:17:86:0a:bb:03:97:fb:d8:45:31:03:ee:90:e1:47:
a6:fe:be:2c:a9:3b:63:fa:c2:27:76:15:5b:cf:2d:84:f2:c8:
d6:0b:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:20:35 2025 by rpki-client