Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/NLIZhOjqAbfgLnUetYAVaZmZMEM.roa
File: NLIZhOjqAbfgLnUetYAVaZmZMEM.roa (raw, json)
Hash identifier: 1rjYfhPnZQi0/JqNm+7CJ8cFsNp3+IHZ0l+adUid1l8=
Subject key identifier: 34:B2:19:84:E8:EA:01:B7:E0:2E:75:1E:B5:80:15:69:99:99:30:43
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 01936C9FC44A3CAC3519F90CA68F755EE705
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/NLIZhOjqAbfgLnUetYAVaZmZMEM.roa
Signing time: Wed 27 Nov 2024 07:57:09 +0000
ROA not before: Wed 27 Nov 2024 07:57:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202087
IP address blocks: 45.89.212.0/22 maxlen: 22
45.94.8.0/22 maxlen: 24
45.94.10.0/24 maxlen: 24
94.26.93.0/24 maxlen: 24
94.26.95.0/24 maxlen: 24
94.26.97.0/24 maxlen: 24
94.26.98.0/23 maxlen: 23
94.26.101.0/24 maxlen: 24
94.26.103.0/24 maxlen: 24
94.26.109.0/24 maxlen: 24
94.190.196.0/22 maxlen: 22
94.190.196.0/24 maxlen: 24
94.190.197.0/24 maxlen: 24
94.190.198.0/24 maxlen: 24
94.190.199.0/24 maxlen: 24
104.255.128.0/21 maxlen: 21
153.94.56.0/21 maxlen: 21
185.9.212.0/22 maxlen: 22
185.49.216.0/22 maxlen: 22
185.75.80.0/22 maxlen: 22
185.83.148.0/23 maxlen: 23
185.83.150.0/23 maxlen: 23
185.94.76.0/23 maxlen: 23
185.94.78.0/23 maxlen: 23
192.190.168.0/22 maxlen: 22
2a03:50c0::/32 maxlen: 32
2a03:50c0:1000::/36 maxlen: 36
2a03:50c0:3300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:9f:c4:4a:3c:ac:35:19:f9:0c:a6:8f:75:5e:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Nov 27 07:57:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b21984e8ea01b7e02e751eb580156999993043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:94:20:dc:85:a9:27:68:dd:f1:05:91:46:
25:6f:5a:73:b0:12:2c:fd:89:f7:e7:19:71:88:5d:
57:d0:69:ba:8a:e7:2d:b9:40:5b:06:3d:5d:14:95:
23:1a:22:9e:41:44:30:04:28:a0:0e:81:39:d5:37:
db:d4:cc:6b:6e:af:3d:e0:49:b0:d9:e0:50:0b:9b:
e9:89:df:33:84:27:14:c6:1d:15:2a:bc:5b:21:13:
7f:5c:91:b4:5f:22:13:af:34:7a:e0:51:df:9d:7e:
d9:ea:89:97:17:12:18:82:a0:f9:2e:e7:6e:43:de:
78:59:7a:a3:c4:de:06:17:22:13:18:10:f1:27:fa:
f1:2b:14:c5:43:5d:dd:95:7c:5f:e2:1a:0f:09:59:
22:45:88:c0:63:d4:38:b2:33:22:1c:f5:03:93:b5:
de:68:34:f4:2e:75:b3:45:8b:71:ef:78:f6:93:b5:
b0:e9:dd:a2:d9:06:c1:b5:0b:d4:c6:81:1b:68:ce:
d8:33:10:9f:4b:c8:8a:30:17:6e:36:15:f6:6b:d4:
e9:d1:d5:2a:32:3b:73:1c:7f:a1:68:fb:43:2b:65:
32:74:f3:64:fd:bb:b0:f6:c0:c7:c2:63:81:70:ef:
bb:3a:bf:1d:50:e4:a1:6f:81:e2:d5:24:3f:d4:b2:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B2:19:84:E8:EA:01:B7:E0:2E:75:1E:B5:80:15:69:99:99:30:43
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/NLIZhOjqAbfgLnUetYAVaZmZMEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.212.0/22
45.94.8.0/22
94.26.93.0/24
94.26.95.0/24
94.26.97.0-94.26.99.255
94.26.101.0/24
94.26.103.0/24
94.26.109.0/24
94.190.196.0/22
104.255.128.0/21
153.94.56.0/21
185.9.212.0/22
185.49.216.0/22
185.75.80.0/22
185.83.148.0/22
185.94.76.0/22
192.190.168.0/22
IPv6:
2a03:50c0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:3f:cf:e9:a7:8b:1e:fb:93:58:29:94:ed:28:1f:b8:20:c5:
e9:5d:be:d7:03:e9:ca:25:ce:12:6a:e0:2d:e2:1a:1a:a7:75:
41:39:cc:a3:68:16:a6:01:30:18:12:8a:8e:04:7d:f8:86:43:
08:9f:e2:b1:99:9f:dd:df:ed:01:22:23:07:de:64:4d:d2:43:
1e:81:ec:8c:28:a7:6d:b8:5b:1a:25:8d:9e:84:c7:1b:f9:24:
a7:fa:34:63:dc:c9:17:57:63:ea:c6:e0:c4:93:07:ab:a3:3a:
47:49:d7:75:1b:55:38:cc:a3:13:4e:64:ef:92:c9:70:09:94:
f0:3d:f7:fc:a0:cf:cd:24:32:81:23:4f:bb:00:b1:e1:2f:45:
a6:a5:7a:87:71:40:f8:ad:67:19:9c:a6:63:7f:68:60:78:42:
50:94:56:e6:9e:70:2e:31:32:fd:f1:6d:36:b2:cd:28:a0:3d:
66:32:10:97:a6:73:47:f6:7c:a2:4a:c4:fc:9f:1b:03:73:af:
b5:f3:ce:b1:02:8e:db:e9:e1:7d:77:24:07:d3:e7:d7:cb:ba:
79:e5:60:14:f9:86:82:15:e1:4b:0c:8b:03:28:09:5b:b0:d1:
51:69:56:5f:8a:c4:bf:27:72:e7:ee:bd:0f:cd:bc:af:96:20:
73:cd:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:09 2024 by rpki-client on console.sobornost.net