Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/noyu-6tYZVHLrDpPGxAJtnQSh_U.roa
File: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (raw, json)
Hash identifier: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=
Subject key identifier: 9E:8C:AE:FB:AB:58:65:51:CB:AC:3A:4F:1B:10:09:B6:74:12:87:F5
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 0194236A08757357D7BF06A97CA03F6CB206
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/noyu-6tYZVHLrDpPGxAJtnQSh_U.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49808
IP address blocks: 45.150.96.0/22 maxlen: 22
92.119.92.0/22 maxlen: 24
185.11.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:08:75:73:57:d7:bf:06:a9:7c:a0:3f:6c:b2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e8caefbab586551cbac3a4f1b1009b6741287f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:05:45:24:22:16:44:3d:91:53:06:19:cf:
b2:d4:a6:bc:66:03:0b:f5:bb:a1:45:15:90:a0:32:
4f:94:df:3e:8e:40:70:1e:4a:d5:8e:45:f0:98:f7:
ee:70:72:c8:df:ca:ed:1f:60:90:61:cc:82:97:ef:
f0:4c:5c:20:f1:f1:1d:4e:70:48:76:27:f7:32:96:
74:be:d1:4f:1a:79:9f:4d:68:21:d9:a2:ba:76:81:
95:38:09:c5:ab:5c:25:bc:90:2f:c3:c9:c7:e0:52:
0b:a3:09:8b:d8:4d:69:9c:98:c8:09:e0:64:5b:9e:
3b:56:a1:65:d9:22:a7:2c:4e:fb:52:4e:08:d2:16:
9b:2b:c0:6a:33:57:45:a9:51:17:a9:3c:53:cb:f3:
64:bb:d2:71:a0:a1:ca:c9:36:46:17:bb:f7:55:2f:
9d:ae:98:fe:bf:38:8a:08:52:af:2f:31:17:f0:c5:
aa:4b:a5:01:a3:1e:06:af:92:ab:7b:e0:37:05:6e:
c1:6e:61:77:13:99:00:1a:a3:e4:90:94:9c:ac:30:
f2:4e:80:10:6c:1c:34:b7:9c:63:ea:db:fe:a4:9d:
b9:d3:d5:12:a1:80:8b:6c:b5:03:f8:78:dc:6f:a8:
49:53:22:50:4c:f0:91:d1:19:52:aa:75:69:c4:d8:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8C:AE:FB:AB:58:65:51:CB:AC:3A:4F:1B:10:09:B6:74:12:87:F5
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/noyu-6tYZVHLrDpPGxAJtnQSh_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.96.0/22
92.119.92.0/22
185.11.84.0/22
Signature Algorithm: sha256WithRSAEncryption
21:b5:1e:c7:26:67:af:16:b0:24:e5:7f:c8:59:c4:b4:96:1f:
d9:54:a2:ed:3d:2a:f6:21:24:3a:5f:96:dc:2e:33:c2:27:b2:
89:fa:d7:2d:1a:6e:d1:aa:8a:91:e6:6c:d8:dc:ae:29:f9:9f:
26:cd:64:12:f7:89:42:9d:d6:f1:0f:e7:d6:40:9d:44:6e:48:
68:cb:35:34:f7:09:3c:7d:ca:e6:59:f1:b2:9e:23:c5:ed:19:
aa:e2:fe:29:bf:f2:67:f1:76:ef:5e:34:11:90:a2:99:5f:89:
4d:d3:50:aa:d2:ef:19:a5:c2:db:f7:50:7c:e0:1c:a8:f7:bf:
68:5c:41:47:83:92:6d:a7:8e:6e:b3:c6:c2:43:2a:55:74:4e:
80:6a:1c:69:b4:29:8c:d6:9c:2a:15:d2:0f:da:28:65:d0:61:
c1:42:05:41:4a:49:80:3e:9c:86:6d:f4:b8:5f:04:95:ef:97:
59:48:f7:d9:ca:c2:f5:36:54:3e:8c:74:01:91:20:89:0c:5f:
c7:47:49:b5:54:d3:12:c8:84:21:5b:6b:4a:ab:a1:a9:c4:69:
24:aa:46:3f:f8:74:84:6a:1f:b6:62:24:5c:cb:05:5a:25:46:
e7:58:4b:37:7d:df:76:59:a1:66:52:61:a8:82:17:ad:f8:bf:
a5:ad:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net