Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/Npd-hacRQ57Kduiqr1RWMbXhGmA.roa
File: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (raw, json)
Hash identifier: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=
Subject key identifier: 36:97:7E:85:A7:11:43:9E:CA:76:E8:AA:AF:54:56:31:B5:E1:1A:60
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 019423D77264423DAD48E036752E3A51C7CC
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/Npd-hacRQ57Kduiqr1RWMbXhGmA.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208531
IP address blocks: 46.172.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:72:64:42:3d:ad:48:e0:36:75:2e:3a:51:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36977e85a711439eca76e8aaaf545631b5e11a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:46:ee:e1:a7:16:4b:17:2a:a5:f3:6b:ef:
b1:80:a3:4c:50:e5:ff:88:dd:ea:74:11:dd:4d:f2:
ae:21:b4:9e:0b:5a:03:6e:f9:65:c3:99:f5:55:c2:
fe:cd:5c:9d:7f:8a:8b:6f:c5:dd:70:d3:3f:23:49:
69:39:25:88:73:c1:b0:3a:50:55:90:34:bc:f1:b9:
04:6b:a5:a4:31:39:37:af:f2:c4:2f:10:1f:31:a8:
e9:ce:e4:23:fb:ca:54:3a:24:d9:58:28:20:bc:dc:
e1:71:6e:d9:2a:f7:47:40:3c:a3:e2:3d:8d:eb:93:
29:d0:e5:87:42:da:69:d5:17:10:db:4a:88:3f:70:
31:41:bd:d2:15:da:1c:17:a7:0f:9e:12:47:3f:2e:
f3:0c:59:86:c8:95:90:46:83:c3:88:87:da:9f:11:
fd:10:e0:99:c7:09:a3:1a:f5:39:eb:20:5f:30:d6:
a4:00:b7:d0:1a:1c:81:f3:b6:dc:02:25:de:94:2e:
9f:b5:51:49:24:00:d5:73:30:00:97:17:80:37:ed:
32:e2:b9:13:a8:28:bf:81:29:47:86:b0:67:20:42:
0a:0a:94:cd:3a:1a:bd:d4:6e:e2:2c:46:03:e9:95:
ef:f4:a2:78:65:0b:d7:e1:be:ce:c6:55:28:07:3b:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:97:7E:85:A7:11:43:9E:CA:76:E8:AA:AF:54:56:31:B5:E1:1A:60
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/Npd-hacRQ57Kduiqr1RWMbXhGmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.74.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b6:cc:76:26:d4:19:2d:e3:77:d1:7b:54:f2:9d:09:71:c9:
56:01:25:8e:c4:39:e9:a7:7d:de:d9:4c:b2:b7:f6:d9:76:e6:
35:bb:b9:e8:fd:73:c7:5a:71:43:21:cc:00:4b:9e:46:45:1a:
ce:27:07:26:a9:68:78:bf:c0:dd:29:5f:27:26:0d:a4:1a:da:
90:c4:c4:3d:b5:d0:83:a4:a0:22:6c:b6:c3:a8:e1:b0:03:db:
64:18:65:83:cc:b7:2b:79:a8:ff:e8:7c:a9:50:71:51:28:4b:
ae:0a:27:4c:6e:fb:be:3a:95:74:14:33:01:58:7a:4f:61:b7:
e3:ce:43:5c:ed:1e:38:cf:42:46:d6:e8:a9:fe:6a:fe:a9:90:
6d:e2:02:bb:64:d4:07:8d:fc:19:f1:fa:59:12:c4:79:6f:88:
5a:59:5c:fa:6a:01:05:02:cf:66:03:3b:e0:34:a2:25:05:fa:
75:b6:72:db:7d:78:30:3f:27:17:ed:f1:06:71:6b:19:6d:c3:
34:d5:11:08:eb:5b:3d:29:b2:1d:71:bc:4c:a8:d0:28:4a:7d:
7e:39:08:a5:97:5c:05:9b:fb:0b:d2:7c:69:d5:fb:d4:63:b2:
b3:d6:75:b6:15:a2:03:03:98:23:c7:2f:6a:ae:7d:e0:88:6a:
e9:51:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net