Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/NqKYAhfxuZsWRFJ4WZEDUNLeoa4.roa
File: NqKYAhfxuZsWRFJ4WZEDUNLeoa4.roa (raw, json)
Hash identifier: OKsYTsI85B6jQo/jzENn0M4UbPq7iHkjbOBPgEAOoQk=
Subject key identifier: 36:A2:98:02:17:F1:B9:9B:16:44:52:78:59:91:03:50:D2:DE:A1:AE
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 0245F610
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/NqKYAhfxuZsWRFJ4WZEDUNLeoa4.roa
Signing time: Sun 26 Jun 2022 18:14:43 +0000
ROA not before: Sun 26 Jun 2022 18:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 45.15.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38139408 (0x245f610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jun 26 18:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36a2980217f1b99b1644527859910350d2dea1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:ac:97:d9:1f:f1:53:b6:1f:9d:ed:4c:36:
fc:ed:9f:32:01:36:93:9d:cc:ca:e4:6d:ff:0e:5e:
85:ec:b8:49:9e:ef:88:5e:6d:f8:df:df:b0:ed:d8:
2a:2e:17:68:d6:8d:67:65:38:f7:75:b4:b5:a9:06:
84:42:09:41:47:b0:4e:da:b5:14:d9:57:e8:69:fa:
3d:b3:f6:a6:ab:10:8e:dc:08:e0:d5:eb:52:e0:85:
7b:70:6b:ef:be:ea:6a:d6:dd:c7:dc:25:d6:a2:70:
e4:c6:e8:4b:5a:1f:af:b0:bb:13:7c:e6:d5:0d:c5:
6d:c8:f1:dc:55:7a:1b:61:46:ef:b3:4f:df:76:c3:
bd:85:a8:e1:52:f9:75:8c:d6:76:40:83:46:50:cd:
8c:9d:9f:70:0c:1b:8b:f4:b5:63:ff:a4:bf:5a:3c:
8a:bf:44:52:3a:13:af:cc:0b:ba:c4:46:b6:5e:f7:
b5:7d:fd:d5:15:4a:e6:e3:94:f5:0a:fe:06:d6:82:
07:4c:2e:5e:6d:98:5f:21:3d:9d:28:99:4f:46:4d:
54:86:c2:ba:e2:53:0e:27:0f:b0:78:a6:eb:b7:e0:
10:9c:28:90:33:fc:57:f9:05:5f:f9:ab:5e:05:d5:
e7:00:67:d8:e9:5e:63:46:84:cf:82:99:fe:ca:a5:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A2:98:02:17:F1:B9:9B:16:44:52:78:59:91:03:50:D2:DE:A1:AE
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/NqKYAhfxuZsWRFJ4WZEDUNLeoa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ae:cf:0d:66:3f:d0:67:48:cc:3c:43:e0:28:2e:a3:02:11:
c9:06:bb:23:90:57:96:74:6a:7a:9e:36:7e:8b:17:06:bd:55:
a8:55:bc:6f:97:42:e3:c7:1b:54:fb:68:99:a0:0f:53:58:c7:
7e:ae:e2:6a:eb:03:a8:7b:44:b1:7f:97:50:11:8d:e1:97:2d:
a7:a1:ed:08:37:38:8e:85:48:82:51:c8:94:c8:6d:3b:a4:fe:
8e:57:20:86:86:91:16:ee:0c:55:d1:0e:b9:ab:e7:96:c3:b0:
2e:3a:9d:c5:44:0f:c6:a5:0a:68:ac:fd:38:35:18:00:28:f6:
6c:1a:7f:1f:e1:c0:81:87:17:a4:f0:a4:6d:bc:94:ef:85:39:
8c:a3:61:9e:b9:2d:7d:76:a5:02:09:5c:26:10:4a:9d:f9:df:
61:5a:19:a1:af:74:e6:5b:aa:d9:48:61:ca:29:6f:b6:00:1d:
75:11:9f:06:00:98:a2:fb:fa:4e:ec:bf:cb:d9:7a:fd:f0:90:
e0:ea:8e:f2:86:21:0f:79:2a:e2:d0:93:d0:9c:98:80:ff:76:
9b:7f:9e:d2:13:ac:27:2d:51:fc:f0:bd:05:ff:56:c7:83:b5:
8a:a1:99:8c:e8:ea:a1:7f:21:d1:c4:e9:53:01:82:39:e2:fa:
e7:92:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:39:42 2025 by rpki-client