Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/NwelQmGBAMZcThRWzbBtK5nMQuA.roa
File: NwelQmGBAMZcThRWzbBtK5nMQuA.roa (raw, json)
Hash identifier: sx0OIReb0wEF2fhVsKRVp7OMN2FzE8pyeu/7ECiPdmk=
Subject key identifier: 37:07:A5:42:61:81:00:C6:5C:4E:14:56:CD:B0:6D:2B:99:CC:42:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 018CC86EF5761A184FBE31D1507817BCC23D
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/NwelQmGBAMZcThRWzbBtK5nMQuA.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212307
IP address blocks: 147.234.104.0/24 maxlen: 24
147.234.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f5:76:1a:18:4f:be:31:d1:50:78:17:bc:c2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3707a542618100c65c4e1456cdb06d2b99cc42e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:52:4d:ef:e4:8b:93:f9:0f:75:10:4a:bd:
fe:5b:56:fb:c0:9b:ba:b2:a2:5d:f9:1f:cf:c4:33:
d8:e1:2d:1b:ee:99:25:30:c4:c0:dd:33:9c:4c:eb:
f3:68:f2:fb:67:48:6c:84:80:5d:e1:91:68:af:62:
f7:bc:93:73:5e:22:6a:dc:f0:af:71:b3:86:5e:41:
ea:70:73:72:ab:45:4c:40:c6:6d:4f:4f:9b:db:06:
3f:76:90:3e:dc:18:df:0a:05:b0:5c:f2:b5:f0:cc:
a8:3e:e8:16:bd:84:ae:bf:54:3b:13:a3:1c:f8:78:
19:5d:80:b4:e1:41:92:23:f3:5f:6e:b1:be:50:65:
18:fa:0a:10:c7:08:61:4a:e2:2d:4f:bc:96:b1:0f:
72:c6:d3:fe:c4:34:d8:d2:bf:64:4e:6e:dc:ca:f4:
a1:74:91:cc:4f:cb:61:d4:45:aa:da:f8:5e:22:df:
c4:1c:8c:9e:38:52:01:c8:4c:27:8d:53:59:11:f6:
63:9b:47:d4:94:72:58:c7:67:06:66:d6:a1:f9:04:
98:4c:83:9c:6e:4f:16:72:5d:e4:82:8b:b1:fd:89:
da:a9:4b:06:1a:bd:e7:48:e5:d5:24:f4:0f:95:63:
cd:ec:fa:d4:be:24:df:50:e1:70:90:c6:f9:54:31:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:A5:42:61:81:00:C6:5C:4E:14:56:CD:B0:6D:2B:99:CC:42:E0
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/NwelQmGBAMZcThRWzbBtK5nMQuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.104.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:1f:d0:93:8e:34:79:7a:83:78:73:9e:a8:64:e8:65:b6:db:
c8:17:f1:0b:7f:35:80:b5:bd:e7:de:fc:5f:57:e9:05:3d:e3:
d5:22:53:d2:0f:b6:99:ca:76:35:50:93:d0:e8:2b:b8:3c:de:
de:ce:5a:0b:73:38:15:e6:8c:7f:b2:29:36:05:c3:65:39:26:
f9:a7:82:32:4f:9c:b1:67:9b:ae:44:4b:ca:f2:f1:c7:b0:67:
b4:9c:bc:1d:9c:20:b3:9c:20:6b:8d:60:8b:84:df:c5:28:f0:
db:88:88:0b:00:ce:6a:06:4d:47:53:4e:da:01:11:19:71:f4:
3b:e6:53:32:ec:5f:ae:ef:6c:a6:82:0e:34:1b:db:64:f8:16:
9c:de:9a:85:72:d1:18:d2:15:68:63:02:4e:61:58:b3:3b:7e:
82:97:76:71:e4:ff:4f:bc:2c:16:2c:c7:49:e7:d2:a6:8a:63:
b9:6f:8e:e1:f2:66:55:8a:22:81:1e:78:f7:4b:d7:50:34:8d:
c3:d0:e1:20:46:a5:4a:96:59:a2:1a:ac:83:35:1c:57:70:c0:
9c:34:b9:42:89:ce:14:50:b5:b0:c4:2b:dd:96:cb:17:c5:bd:
5b:14:54:c0:17:cd:24:d6:bc:cc:7e:8d:22:93:bb:c3:c9:ba:
86:76:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net