Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/NxoEIQ2YVafxL2j55w8lOvwqPoA.roa
File: NxoEIQ2YVafxL2j55w8lOvwqPoA.roa (raw, json)
Hash identifier: zWwJ2gpYs2QkfscAUHJn4EONxrlzIfSsglEL8F6Z4EM=
Subject key identifier: 37:1A:04:21:0D:98:55:A7:F1:2F:68:F9:E7:0F:25:3A:FC:2A:3E:80
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01942826A2FFF99C8B73E59FC364FCC836F2
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/NxoEIQ2YVafxL2j55w8lOvwqPoA.roa
Signing time: Thu 02 Jan 2025 17:53:28 +0000
ROA not before: Thu 02 Jan 2025 17:53:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215415
IP address blocks: 45.8.178.0/24 maxlen: 24
45.8.179.0/24 maxlen: 24
45.148.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a2:ff:f9:9c:8b:73:e5:9f:c3:64:fc:c8:36:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 2 17:53:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=371a04210d9855a7f12f68f9e70f253afc2a3e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:2d:8c:80:5f:74:27:ce:e7:77:46:74:3f:
87:2a:fe:e5:e9:9c:d6:70:c2:af:09:61:76:5a:46:
f9:75:a8:df:5e:8a:0c:df:7f:bf:bc:50:4e:aa:f8:
23:df:9c:20:67:fa:e7:96:06:1d:ff:0b:14:c1:7b:
b7:44:a9:5b:e3:75:c6:aa:82:39:92:12:c4:2d:0b:
f9:c0:85:e8:c4:24:ae:d1:74:cf:ba:3b:eb:cf:f3:
d6:7c:92:67:75:85:33:c6:ea:03:48:ab:1d:13:8b:
a4:3a:49:97:57:95:4d:6b:81:78:17:83:a7:a0:31:
03:b0:0f:4c:60:7c:b4:f7:27:ac:b7:3d:e7:b6:48:
f6:88:70:c8:c1:35:29:6a:1a:a3:00:a9:3e:54:7c:
b0:f7:09:b8:3c:b5:6e:49:ff:da:c4:6c:a4:95:4e:
35:82:ba:be:39:73:12:54:a7:6c:0a:4f:e5:12:be:
b2:34:c1:12:e1:62:b8:a4:27:18:b3:64:f5:4c:ee:
df:1d:10:c2:25:f4:12:30:05:1f:fb:02:cd:6e:35:
c1:5c:bf:8b:0c:03:02:21:b8:9d:01:a4:77:a2:ff:
1d:82:40:c3:a6:a4:6e:96:63:e8:98:8a:24:dd:d0:
bc:e5:dd:20:31:89:b3:a8:6b:e7:0b:f8:73:09:d4:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1A:04:21:0D:98:55:A7:F1:2F:68:F9:E7:0F:25:3A:FC:2A:3E:80
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/NxoEIQ2YVafxL2j55w8lOvwqPoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.178.0/23
45.148.147.0/24
Signature Algorithm: sha256WithRSAEncryption
73:61:82:36:5f:66:3c:79:dd:30:ae:a5:9e:ce:e4:c8:14:0e:
61:03:cd:22:14:df:ac:de:c8:58:c7:5b:21:c6:4e:98:75:79:
9b:9a:e4:3c:53:47:04:06:2d:76:ae:90:fb:87:aa:63:ff:80:
de:5c:a7:fe:7a:12:91:73:13:9e:6d:d6:8f:60:1b:8f:ab:8e:
78:60:c9:77:bf:03:e0:a0:4c:0a:88:dc:5d:b4:59:19:2f:0b:
dc:74:0f:3f:67:46:89:07:42:3b:b5:58:fa:df:cb:cb:6d:66:
b3:fe:eb:5e:12:f1:f8:e2:7d:55:c0:07:e5:21:00:6b:82:be:
ac:4f:e2:e1:5a:de:e6:ac:e2:bc:8f:ac:52:5f:31:79:38:e2:
01:2d:1e:a0:d0:de:99:36:6f:6c:e7:65:3c:4d:c6:92:3b:ff:
b1:0c:db:60:4e:2d:23:f4:a1:c6:f1:2b:74:6b:36:5c:0a:d5:
eb:d1:e6:a9:f5:eb:e4:fb:83:fb:f5:1c:a0:11:96:45:67:9d:
ad:63:41:98:60:91:c7:82:84:d7:59:35:b2:20:66:14:c1:4c:
5e:50:93:e8:82:30:59:f0:6b:8d:6c:c7:20:0f:50:0f:66:1c:
88:ee:8a:c2:bf:5c:4f:92:87:d2:1b:6f:53:c5:f3:92:7e:4c:
a7:5e:64:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJqL/+ZyLc+Wfw2T8yDbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy
ODVkZTcwHhcNMjUwMTAyMTc1MzI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzFhMDQyMTBkOTg1NWE3ZjEyZjY4ZjllNzBmMjUzYWZjMmEzZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f4tjIBfdCfO53dGdD+HKv7l6ZzW
cMKvCWF2Wkb5dajfXooM33+/vFBOqvgj35wgZ/rnlgYd/wsUwXu3RKlb43XGqoI5
khLELQv5wIXoxCSu0XTPujvrz/PWfJJndYUzxuoDSKsdE4ukOkmXV5VNa4F4F4On
oDEDsA9MYHy09yestz3ntkj2iHDIwTUpahqjAKk+VHyw9wm4PLVuSf/axGyklU41
grq+OXMSVKdsCk/lEr6yNMES4WK4pCcYs2T1TO7fHRDCJfQSMAUf+wLNbjXBXL+L
DAMCIbidAaR3ov8dgkDDpqRulmPomIok3dC85d0gMYmzqGvnC/hzCdTRYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDcaBCENmFWn8S9o+ecPJTr8Kj6AMB8GA1UdIwQY
MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt
NDc3MjMxMTkxYTM1LzEvTnhvRUlRMllWYWZ4TDJqNTV3OGxPdndxUG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1
LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLQiyAwQA
LZSTMA0GCSqGSIb3DQEBCwUAA4IBAQBzYYI2X2Y8ed0wrqWezuTIFA5hA80iFN+s
3shYx1shxk6YdXmbmuQ8U0cEBi12rpD7h6pj/4DeXKf+ehKRcxOebdaPYBuPq454
YMl3vwPgoEwKiNxdtFkZLwvcdA8/Z0aJB0I7tVj638vLbWaz/uteEvH44n1VwAfl
IQBrgr6sT+LhWt7mrOK8j6xSXzF5OOIBLR6g0N6ZNm9s52U8TcaSO/+xDNtgTi0j
9KHG8St0azZcCtXr0eap9evk+4P79RygEZZFZ52tY0GYYJHHgoTXWTWyIGYUwUxe
UJPogjBZ8GuNbMcgD1APZhyI7orCv1xPkofSG29TxfOSfkynXmQ1
-----END CERTIFICATE-----
Generated at Thu Jan 23 15:44:45 2025 by rpki-client on console.sobornost.net