Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa
File: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (raw, json)
Hash identifier: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=
Subject key identifier: 35:90:9C:99:63:2E:DD:22:F8:96:F2:D1:5C:69:8B:7E:E6:5E:42:6E
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019427B50784FD478F55BAF2EDE2E3F3ED09
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa
Signing time: Thu 02 Jan 2025 15:49:22 +0000
ROA not before: Thu 02 Jan 2025 15:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199520
IP address blocks: 91.224.246.0/23 maxlen: 24
91.226.40.0/23 maxlen: 24
2a0c:9e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:07:84:fd:47:8f:55:ba:f2:ed:e2:e3:f3:ed:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jan 2 15:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35909c99632edd22f896f2d15c698b7ee65e426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:9d:da:a7:92:06:88:11:00:c5:90:bc:64:
e6:92:a1:a7:25:9a:b1:cd:03:92:08:fd:33:be:41:
5e:5f:29:3e:64:af:67:28:31:83:07:55:42:a7:35:
6f:bc:27:ed:5c:38:1c:f0:32:90:57:72:71:f9:38:
58:33:09:34:42:9b:ae:89:d4:fc:ac:8f:60:33:84:
35:2a:14:b7:83:ba:e8:ec:49:6b:33:a2:58:05:13:
a7:9d:92:fd:96:b9:ce:f6:db:e8:7e:51:5d:a3:9b:
fc:fa:f4:15:3f:a5:4f:1b:eb:b0:d4:4f:c9:fb:33:
de:1a:0f:88:78:d1:10:7e:71:a5:4e:ea:ef:2c:dd:
8a:d7:3b:06:10:b6:b3:2b:11:1f:ba:03:03:68:51:
00:8e:6f:ce:63:d0:6d:4b:9f:86:58:ed:d6:fa:e9:
da:6c:2e:f4:18:f7:df:08:fc:51:76:50:60:c4:3b:
bf:a8:76:41:34:84:51:ab:44:1e:f3:47:e9:52:d0:
57:3d:9a:bc:9c:48:8a:1d:61:11:02:01:74:ef:81:
dd:09:e0:5b:1c:4a:25:8b:99:65:82:82:13:4d:47:
85:7c:cb:55:40:1c:63:24:b7:8c:c8:27:72:ec:92:
d4:3a:81:97:e1:dc:58:32:85:0d:9d:9f:5e:ab:4c:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:9C:99:63:2E:DD:22:F8:96:F2:D1:5C:69:8B:7E:E6:5E:42:6E
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.246.0/23
91.226.40.0/23
IPv6:
2a0c:9e80::/32
Signature Algorithm: sha256WithRSAEncryption
25:d3:e8:79:6b:59:0d:e8:c6:37:ae:ea:ce:20:75:1e:47:26:
ab:93:cf:a0:75:50:50:e2:c7:7c:30:f0:ca:c1:5d:f0:9f:46:
b5:ff:f5:0e:77:48:23:39:f6:72:92:a3:30:4d:d1:d7:db:ce:
74:2e:d7:04:4e:91:05:54:b4:1a:7f:85:94:6e:ab:50:71:ab:
41:98:5a:4c:53:27:93:16:fd:69:a6:a1:64:93:e4:b1:be:d5:
c2:54:68:f2:be:02:3e:fd:d9:17:b7:b1:96:27:c8:52:da:24:
e9:8f:5b:4b:1d:1e:8f:d5:07:33:47:a3:4d:cf:23:fd:03:59:
9c:3c:d8:55:6d:9b:4e:d2:7a:15:63:f1:7a:22:cf:41:50:d5:
9a:19:16:6d:00:d9:e2:76:c7:a4:ff:7d:42:b1:02:f4:e1:3f:
c8:9d:ba:cb:ca:8d:60:5c:be:db:cf:6c:d7:08:f7:79:50:7c:
b8:38:25:a2:a2:de:4c:92:1b:33:0c:48:97:e5:c4:52:3c:84:
77:be:5f:8b:20:f4:75:63:36:f2:d0:01:87:97:84:d2:87:8c:
86:2d:0a:95:51:3e:5d:a7:ba:f4:72:35:cc:51:d8:b3:b9:26:
3d:e5:12:0b:92:dc:f5:d8:59:cb:c1:94:e1:25:df:fe:3d:25:
c6:1b:6a:e8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQntQeE/UePVbry7eLj8+0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZWNlYWM4MTI1NTM0YTU3OTQ3OTYyZGIyODkwM2ZhZDdh
YzNhZjkwHhcNMjUwMTAyMTU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTkwOWM5OTYzMmVkZDIyZjg5NmYyZDE1YzY5OGI3ZWU2NWU0MjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx2d2qeSBogRAMWQvGTmkqGnJZqx
zQOSCP0zvkFeXyk+ZK9nKDGDB1VCpzVvvCftXDgc8DKQV3Jx+ThYMwk0QpuuidT8
rI9gM4Q1KhS3g7ro7ElrM6JYBROnnZL9lrnO9tvoflFdo5v8+vQVP6VPG+uw1E/J
+zPeGg+IeNEQfnGlTurvLN2K1zsGELazKxEfugMDaFEAjm/OY9BtS5+GWO3W+una
bC70GPffCPxRdlBgxDu/qHZBNIRRq0Qe80fpUtBXPZq8nEiKHWERAgF074HdCeBb
HEoli5llgoITTUeFfMtVQBxjJLeMyCdy7JLUOoGX4dxYMoUNnZ9eq0zs/wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDWQnJljLt0i+Jby0Vxpi37mXkJuMB8GA1UdIwQY
MBaAFKPs6sgSVTSleUeWLbKJA/rXrDr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQt
YTliZDVlNDEwYWVkLzEvTlpDY21XTXUzU0w0bHZMUlhHbUxmdVplUW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQtYTliZDVlNDEwYWVk
LzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+D2AwQB
W+IoMA0EAgACMAcDBQAqDJ6AMA0GCSqGSIb3DQEBCwUAA4IBAQAl0+h5a1kN6MY3
rurOIHUeRyark8+gdVBQ4sd8MPDKwV3wn0a1//UOd0gjOfZykqMwTdHX2850LtcE
TpEFVLQaf4WUbqtQcatBmFpMUyeTFv1ppqFkk+SxvtXCVGjyvgI+/dkXt7GWJ8hS
2iTpj1tLHR6P1QczR6NNzyP9A1mcPNhVbZtO0noVY/F6Is9BUNWaGRZtANnidsek
/31CsQL04T/InbrLyo1gXL7bz2zXCPd5UHy4OCWiot5MkhszDEiX5cRSPIR3vl+L
IPR1Yzby0AGHl4TSh4yGLQqVUT5dp7r0cjXMUdizuSY95RILktz12FnLwZThJd/+
PSXGG2ro
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:40 2025 by rpki-client