Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/NT721vdDTZnxgWmRGJzwBYHYDA8.roa
File: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (raw, json)
Hash identifier: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=
Subject key identifier: 35:3E:F6:D6:F7:43:4D:99:F1:81:69:91:18:9C:F0:05:81:D8:0C:0F
Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial: 0194214442289B6EA35A2099512343031BA5
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/NT721vdDTZnxgWmRGJzwBYHYDA8.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15623
IP address blocks: 45.94.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:28:9b:6e:a3:5a:20:99:51:23:43:03:1b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353ef6d6f7434d99f1816991189cf00581d80c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:f3:49:96:a2:85:56:ea:68:7c:18:e1:09:
0d:00:65:57:61:ad:7a:a4:bb:63:31:c2:a5:3e:c5:
de:0a:5d:bd:02:d9:fb:be:81:84:f7:ae:5e:e3:ca:
d7:f2:d9:7d:2f:e0:5b:25:97:1a:1b:a2:7c:c3:80:
13:ba:63:aa:87:98:3a:8a:43:4f:2c:e0:18:34:4b:
45:7f:d0:96:32:6a:60:b3:f6:c8:f9:61:71:0a:0f:
12:c2:39:da:79:3e:f8:1d:fa:71:59:13:61:b1:ce:
31:a4:0e:9e:da:05:1d:ce:e6:bf:f2:3c:f7:14:2d:
45:fc:16:20:4e:59:93:07:16:11:5b:8e:b0:fa:dc:
62:77:12:1e:fc:cb:b6:26:5e:05:a7:89:b9:ae:75:
b4:9a:c2:d4:36:a3:e3:50:26:f5:c8:e9:d0:69:ef:
54:2b:37:b0:9c:33:ad:de:05:36:55:86:e0:29:2a:
23:f3:a7:90:46:f8:d8:35:05:41:46:84:d4:fd:70:
ab:91:f6:af:8c:32:6b:9f:9c:02:f7:3a:65:b1:1b:
b4:69:6a:ef:95:e5:3f:f9:d2:5e:21:d8:05:01:44:
6b:fc:c2:a6:a4:be:ed:1e:cc:5c:5c:6a:1b:94:79:
11:8a:c5:54:b4:28:9f:1f:f4:2a:5c:4e:9c:56:b9:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:F6:D6:F7:43:4D:99:F1:81:69:91:18:9C:F0:05:81:D8:0C:0F
X509v3 Authority Key Identifier:
keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/NT721vdDTZnxgWmRGJzwBYHYDA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.88.0/22
Signature Algorithm: sha256WithRSAEncryption
91:bd:30:d2:38:74:07:41:57:7c:53:d4:19:e1:61:ad:47:10:
b1:48:c7:fa:b4:ae:8b:37:b2:eb:ee:5d:09:44:a4:86:0f:ad:
4b:cd:22:a2:ae:4d:ba:b4:2b:38:78:b1:fd:66:53:82:ba:05:
b0:41:9f:5e:6e:24:ad:6f:c9:0b:01:28:d5:f0:64:43:3d:47:
ab:df:11:dd:5a:11:35:51:4e:e1:d1:64:dc:96:c3:df:58:2b:
6b:22:33:b7:38:cf:ee:c9:52:4f:4e:e2:8b:aa:2c:7d:16:7a:
1a:45:f8:9c:e5:da:44:37:45:b9:aa:07:c7:67:ce:c4:0c:61:
22:b4:ce:c4:7f:cf:e3:32:90:a6:08:2b:3e:32:27:ea:b6:2f:
9f:bc:33:fe:0d:1c:41:fd:4b:9f:ef:44:9d:30:38:7b:54:1b:
f4:f6:eb:4a:8f:d6:ea:12:a6:c4:67:50:e8:b5:89:7c:8d:2e:
4c:8b:57:88:fc:d9:d0:d1:21:c0:c1:03:f6:34:1b:b6:ff:f4:
23:89:a6:21:04:2e:42:6a:bf:95:cb:e2:59:2e:a6:f6:f2:de:
62:f5:26:a0:10:15:c8:c8:13:6c:2b:4c:47:f4:97:78:a3:c5:
6a:6c:3d:1e:e0:1d:6f:8d:a6:7d:95:81:03:32:fb:0f:75:a1:
77:4f:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:53 2025 by rpki-client