Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/NNXpk59D8TzuvrFY-C-H2t3-Azg.roa
File: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (raw, json)
Hash identifier: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=
Subject key identifier: 34:D5:E9:93:9F:43:F1:3C:EE:BE:B1:58:F8:2F:87:DA:DD:FE:03:38
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019423D73AED3C469DA28BCC76F5A79DD360
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/NNXpk59D8TzuvrFY-C-H2t3-Azg.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207552
IP address blocks: 185.170.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3a:ed:3c:46:9d:a2:8b:cc:76:f5:a7:9d:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34d5e9939f43f13ceebeb158f82f87daddfe0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:d4:a0:42:ae:7a:1a:5b:57:02:38:f5:a4:
f8:95:ef:05:b1:63:c7:92:39:a9:7d:92:17:fa:6a:
a2:cd:af:fd:61:2b:39:34:76:63:d5:e8:3a:97:ca:
f1:16:70:80:b7:ea:66:f7:d4:9a:d6:b3:62:c1:04:
42:e7:db:cf:96:d3:7c:88:b3:76:4b:08:4e:a3:5a:
b2:eb:74:b5:dc:f3:bb:7d:58:cd:a0:0e:4c:8f:1f:
8b:12:dc:ca:21:38:37:14:3d:ac:74:4c:03:0a:de:
5a:76:71:b1:25:96:f4:a6:1a:5f:96:6f:e2:c0:73:
f1:2a:09:88:7f:5d:35:31:6c:e6:6d:c1:e7:e3:07:
00:94:b9:7c:ce:98:a0:4c:e2:0b:2e:4a:d6:b1:4f:
d4:c0:35:20:83:c1:fa:90:fd:3a:f2:f8:1a:3b:66:
37:b9:af:e7:25:42:65:be:5c:15:b0:16:f4:ed:d4:
1e:25:cb:34:6d:5e:b2:84:d0:8a:91:ba:3f:f2:94:
a7:51:83:ee:6b:b5:3c:23:45:01:93:51:d4:f0:83:
60:bb:5b:ca:c2:a6:2b:e8:76:7d:cd:a4:64:15:02:
01:03:56:bd:c4:fa:9e:74:35:1d:0d:be:e6:07:85:
bc:0b:00:51:df:24:13:d8:b7:01:fa:f2:a5:75:6c:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:E9:93:9F:43:F1:3C:EE:BE:B1:58:F8:2F:87:DA:DD:FE:03:38
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/NNXpk59D8TzuvrFY-C-H2t3-Azg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e2:d4:0d:ee:df:3c:eb:17:ea:63:8e:b9:4b:fc:e3:e5:1b:
ca:30:62:e0:f0:22:b1:61:30:8f:b6:4f:54:80:41:6b:e6:80:
68:5a:3f:0e:7a:6e:37:04:83:75:f8:25:58:e7:d1:48:9b:f1:
cd:2e:1e:0f:05:4a:b1:4e:42:5c:f5:df:0f:4b:58:6e:2f:b4:
0f:d2:e5:00:4a:75:6e:b8:b8:82:16:69:55:f6:4e:60:1b:46:
19:75:da:d5:4c:f6:53:39:91:04:a0:11:f0:f8:1c:2b:54:6f:
e9:22:be:50:03:f4:f7:f6:2a:d0:9b:2b:11:40:46:4e:3c:77:
80:d9:99:6a:da:92:6c:3a:7b:6d:48:2d:4d:4a:62:26:28:30:
d3:1a:65:d7:0b:dd:e0:85:d0:0b:9a:b5:7e:05:1f:02:56:5d:
89:bb:9c:ae:76:8b:7b:a0:ae:b7:23:f8:1e:4a:f0:23:ff:3f:
5e:83:2c:98:51:26:ca:15:fe:38:7b:79:5a:14:56:85:03:52:
3a:1c:98:58:9b:e5:46:86:b6:7f:1b:53:8e:0c:fc:9b:e7:d2:
7c:9c:43:80:f0:c2:d5:27:8e:f5:8e:3a:0e:e8:14:9c:84:11:
14:b2:cb:1d:46:f3:d3:7f:65:fc:45:c3:df:e2:3a:c2:ea:61:
16:20:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net