Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NpBOsskNk2RL167mIs_m6FaqmP0.roa
File: NpBOsskNk2RL167mIs_m6FaqmP0.roa (raw, json)
Hash identifier: eMgH9z54RC8SitNdsKkhPWr2cNk1sdCoIKYnMnRVmxE=
Subject key identifier: 36:90:4E:B2:C9:0D:93:64:4B:D7:AE:E6:22:CF:E6:E8:56:AA:98:FD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAF36A23BCB4BA0E94FDF4B19D90E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NpBOsskNk2RL167mIs_m6FaqmP0.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63902
IP address blocks: 45.150.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:af:36:a2:3b:cb:4b:a0:e9:4f:df:4b:19:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36904eb2c90d93644bd7aee622cfe6e856aa98fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:4e:e8:02:a0:7f:d8:3b:38:86:e7:06:90:
b3:9c:7f:d1:1a:8f:76:58:dd:35:8a:d6:22:dc:f5:
ae:86:8d:4b:97:a1:aa:b5:9a:55:17:9b:e3:4b:54:
32:e3:02:bc:53:d4:41:6c:bb:4f:e7:6f:a7:48:ad:
c6:82:c8:4c:67:a4:af:23:15:de:81:e2:fd:80:f1:
f1:4b:8b:39:fe:9d:4e:86:ea:91:bc:44:d4:45:37:
9e:00:b2:84:ff:8f:f9:7a:cf:d3:83:b0:14:20:38:
0c:d0:0b:8c:ca:61:bd:26:c7:7f:36:34:ce:0a:49:
de:ee:b3:71:6c:39:97:5d:58:26:64:34:0f:c0:2f:
4a:9a:3a:24:f7:c2:7e:24:f5:2a:ab:ec:a5:71:b4:
d0:ec:b6:7d:54:2f:e3:df:42:9a:e4:af:e0:97:fa:
5a:8b:70:d7:5e:d3:35:17:d3:f3:7d:65:2d:67:e7:
44:0c:1a:d1:c7:8d:d9:4f:36:77:fb:33:bc:ab:4e:
0b:a5:5a:19:32:45:82:02:80:c6:26:d5:4e:9e:32:
46:f1:d0:ff:85:10:cf:60:c1:d0:52:77:80:6c:c0:
ea:0d:17:a6:55:4a:66:a7:0a:53:af:b3:89:6c:ce:
f1:26:e8:49:97:2f:ef:e8:bc:7a:12:0e:9a:bd:39:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:90:4E:B2:C9:0D:93:64:4B:D7:AE:E6:22:CF:E6:E8:56:AA:98:FD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NpBOsskNk2RL167mIs_m6FaqmP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:26:b4:96:04:9a:a0:ea:55:03:12:ca:e8:59:07:5a:f6:30:
e3:13:68:07:19:38:8f:af:c9:ec:7d:2f:60:50:1a:32:81:77:
70:7b:bf:4a:ca:3d:4a:c9:4b:01:dc:bf:ea:1a:af:a1:68:78:
bd:69:9c:a0:4a:69:ba:88:54:c3:10:01:99:ff:04:1f:f0:96:
c4:96:a0:61:71:2d:40:7e:d9:83:c6:37:f6:c1:e2:b8:c4:06:
ff:fa:d4:30:70:90:75:a8:7b:86:e8:9c:25:c2:cc:b4:88:81:
62:51:0b:95:1c:68:40:dd:3a:57:1c:b6:7f:01:e4:82:47:54:
56:64:40:1a:a2:36:9a:ce:5d:4b:95:f6:92:d7:b1:3c:e3:f1:
27:b8:b6:84:a3:9e:cc:86:d1:65:b2:ac:36:c6:b8:0d:ba:75:
f6:9b:a6:9f:51:05:06:32:32:2d:be:1a:61:ab:5d:ef:18:8e:
0d:43:1f:54:40:37:6f:04:a7:39:3a:83:f0:49:86:e0:27:2c:
dc:ca:32:0e:81:58:1f:cb:1c:eb:d2:a6:48:7a:8e:58:25:f0:
5b:b4:3c:ba:6f:18:16:91:e7:98:df:ca:43:8f:19:2b:4e:14:
cd:7b:22:d1:6e:15:ee:00:4d:0d:4d:d5:e4:97:04:04:38:72:
9a:c1:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net