Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NV-I2foKzHLj-RMxKytozaQe67g.roa
File: NV-I2foKzHLj-RMxKytozaQe67g.roa (raw, json)
Hash identifier: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=
Subject key identifier: 35:5F:88:D9:FA:0A:CC:72:E3:F9:13:31:2B:2B:68:CD:A4:1E:EB:B8
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 0194228D8C6224F9B8483A23FA3ED0390ACC
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NV-I2foKzHLj-RMxKytozaQe67g.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206952
IP address blocks: 185.168.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:62:24:f9:b8:48:3a:23:fa:3e:d0:39:0a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=355f88d9fa0acc72e3f913312b2b68cda41eebb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:88:26:66:36:af:7d:03:09:fe:db:40:6a:
8b:69:41:a7:20:c4:56:ae:c9:45:db:a6:48:ef:22:
c2:3c:66:0c:1a:3e:25:16:d0:cd:67:74:c9:ae:48:
cd:bd:ac:f9:ef:71:c0:22:82:c2:98:71:99:89:1d:
4b:eb:73:a3:0b:7c:e2:34:72:e9:a2:9a:5f:d1:f6:
f4:c7:d2:e6:14:a2:69:1f:eb:2c:ce:24:80:aa:df:
78:79:96:cc:a9:63:0d:41:c0:0e:1a:e3:03:9e:76:
cb:2c:b6:b6:97:74:be:b1:22:e8:c4:a4:5f:09:27:
83:7c:b3:c2:bd:56:b6:79:44:3c:91:c6:d6:59:67:
c8:fa:13:29:81:a8:37:c6:76:d3:51:e1:38:33:0e:
4a:47:7e:41:cf:17:37:02:71:8b:15:0f:c3:90:ef:
84:5d:a0:d9:7d:43:29:ef:68:ab:10:ad:3f:0e:d9:
ad:4a:1a:4d:58:e8:28:3e:b7:ca:8f:ce:81:fc:28:
a9:99:49:a7:c1:7a:b9:29:62:24:6d:36:36:b3:81:
8f:c9:c7:42:da:f4:39:f5:3b:83:d2:e2:80:f5:66:
d1:29:83:f7:07:ff:a6:6c:4b:ae:98:63:80:fe:42:
96:28:21:62:da:44:a3:42:a9:7f:78:e5:eb:26:5c:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:88:D9:FA:0A:CC:72:E3:F9:13:31:2B:2B:68:CD:A4:1E:EB:B8
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NV-I2foKzHLj-RMxKytozaQe67g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.76.0/22
Signature Algorithm: sha256WithRSAEncryption
93:81:e7:0c:4d:9b:47:73:d6:a6:5e:f7:14:ed:10:f4:70:bb:
b1:53:f7:13:06:80:74:06:f0:a8:08:a5:de:5a:78:df:2b:fb:
89:92:f2:d9:19:b9:cc:c1:15:63:af:54:04:ae:3b:17:72:8e:
89:7d:1d:fa:ee:f7:5c:99:bf:9f:2d:3e:ab:e3:0a:64:39:b6:
ad:e4:5a:a0:19:51:ec:d4:5d:f1:89:11:a2:9f:bf:a8:0c:84:
0c:fc:cb:59:44:4f:6c:6b:3d:f3:73:89:cb:39:0a:74:f0:b1:
a5:59:56:06:e1:58:6d:22:08:a6:10:76:16:6d:18:f0:0a:7e:
04:1f:61:a8:1a:fa:b7:05:14:da:75:a5:fc:67:36:02:70:ba:
1d:54:57:44:95:fd:74:30:93:29:af:3e:1b:a1:16:86:8c:5e:
ca:e2:8b:f8:3e:b8:73:10:03:b6:6c:0b:87:00:63:10:c3:fb:
44:17:88:f3:6c:c4:7f:ec:06:b3:83:9d:a9:41:4a:45:90:93:
0f:bb:e1:61:5d:85:ab:1f:13:fc:5e:cb:95:71:67:89:6b:60:
2b:f1:9f:54:dd:dd:e6:26:dd:96:5e:cd:f8:85:f2:fe:49:5d:
75:6b:cb:2d:21:0b:b9:47:ce:2a:9b:f7:99:24:9f:1e:22:f8:
8d:72:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net