Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/ngLzTXL9yL8qZxP4JODs6i0oJzI.roa
File: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (raw, json)
Hash identifier: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=
Subject key identifier: 9E:02:F3:4D:72:FD:C8:BF:2A:67:13:F8:24:E0:EC:EA:2D:28:27:32
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019425FDAB898CB1E0A0E22A696BE309D19A
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/ngLzTXL9yL8qZxP4JODs6i0oJzI.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205826
IP address blocks: 185.160.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ab:89:8c:b1:e0:a0:e2:2a:69:6b:e3:09:d1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e02f34d72fdc8bf2a6713f824e0ecea2d282732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:76:f4:4a:20:7a:bd:04:f4:80:35:be:92:
1a:45:7b:0d:2f:82:d9:88:85:1b:50:9d:4d:5f:63:
1d:2b:bb:53:ff:46:f3:3e:54:b5:e0:81:5d:ea:98:
2d:20:fd:cb:64:9d:15:71:fc:ca:89:d5:1c:69:df:
f9:59:3f:03:d0:fd:16:14:9a:76:be:21:4d:4e:7e:
fd:6a:70:eb:6c:2c:f7:15:9c:1e:f4:dd:a2:4d:da:
98:44:44:f1:46:7a:b8:75:b6:ec:b7:0c:07:11:43:
7c:ff:0d:63:77:e5:cb:a3:33:7e:78:1c:5e:b2:3f:
02:45:54:05:66:54:78:bd:0a:81:67:36:d3:5c:08:
aa:e3:87:0e:2e:36:4a:b2:ae:9f:82:00:7c:59:16:
06:f2:19:47:96:9c:8e:88:b4:4f:83:bd:ae:53:8d:
e5:f3:ea:e1:29:1f:48:0e:37:09:f2:2e:f2:05:18:
cb:a9:50:23:a5:aa:d4:1a:8d:c3:b8:45:a3:e5:f2:
73:c7:f0:fe:08:4f:68:87:6b:04:bb:08:98:50:a2:
83:4b:22:b5:e4:1c:11:32:a2:94:91:5b:c7:3d:69:
ac:6d:5a:a0:a4:b4:9c:f7:d8:43:29:75:de:e9:86:
7a:51:91:18:14:79:e1:55:64:5b:92:a8:3e:cd:8e:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:02:F3:4D:72:FD:C8:BF:2A:67:13:F8:24:E0:EC:EA:2D:28:27:32
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/ngLzTXL9yL8qZxP4JODs6i0oJzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f6:e4:cd:8e:b6:80:47:7a:46:c0:62:ae:e7:8d:8e:06:ac:
3f:d0:26:b5:47:20:c4:0c:9c:27:64:ba:1e:21:58:69:2d:da:
ff:23:51:0d:d2:a7:dc:9f:bd:d1:08:72:89:d2:26:d4:03:18:
88:38:d5:dc:fe:ac:7d:7d:53:82:e4:cd:24:63:c1:47:6c:92:
54:a5:be:0d:0e:75:1a:30:4c:b9:db:05:a9:2b:7d:22:19:9d:
dc:c2:07:58:ef:b9:67:d7:58:6e:6e:58:35:37:cc:43:c1:79:
05:73:46:81:02:d1:a2:17:ba:10:2e:3d:cd:bd:fa:04:cd:88:
73:75:57:d0:0c:4b:09:70:2f:2b:06:af:b1:ed:31:94:65:cc:
fa:1e:7a:9a:18:9a:b3:c4:29:52:44:20:fb:65:ee:52:9a:54:
95:3f:15:0d:ce:62:23:ba:39:0e:c8:05:db:ec:c5:77:2c:3e:
f6:0e:ae:00:91:00:2c:c0:0e:68:87:a5:6c:cd:db:a4:8c:e0:
cd:2e:7c:46:7d:40:2a:ed:d3:f3:05:98:b0:ca:e8:88:20:06:
ef:6c:38:27:b5:e3:3f:66:4d:96:6d:25:dc:08:3c:4c:f2:e5:
b8:57:a8:b3:de:8a:80:84:9f:74:0e:3c:a0:51:aa:20:51:69:
de:b5:fa:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/auJjLHgoOIqaWvjCdGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy
NDg3YmQwHhcNMjUwMTAyMDc0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTAyZjM0ZDcyZmRjOGJmMmE2NzEzZjgyNGUwZWNlYTJkMjgyNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MF29Eoger0E9IA1vpIaRXsNL4LZ
iIUbUJ1NX2MdK7tT/0bzPlS14IFd6pgtIP3LZJ0VcfzKidUcad/5WT8D0P0WFJp2
viFNTn79anDrbCz3FZwe9N2iTdqYRETxRnq4dbbstwwHEUN8/w1jd+XLozN+eBxe
sj8CRVQFZlR4vQqBZzbTXAiq44cOLjZKsq6fggB8WRYG8hlHlpyOiLRPg72uU43l
8+rhKR9IDjcJ8i7yBRjLqVAjparUGo3DuEWj5fJzx/D+CE9oh2sEuwiYUKKDSyK1
5BwRMqKUkVvHPWmsbVqgpLSc99hDKXXe6YZ6UZEYFHnhVWRbkqg+zY6tMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4C801y/ci/KmcT+CTg7OotKCcyMB8GA1UdIwQY
MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt
MjYwZGU2Y2JmNDU2LzEvbmdMelRYTDl5TDhxWnhQNEpPRHM2aTBvSnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2
LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaDOMA0G
CSqGSIb3DQEBCwUAA4IBAQA+9uTNjraAR3pGwGKu542OBqw/0Ca1RyDEDJwnZLoe
IVhpLdr/I1EN0qfcn73RCHKJ0ibUAxiIONXc/qx9fVOC5M0kY8FHbJJUpb4NDnUa
MEy52wWpK30iGZ3cwgdY77ln11hublg1N8xDwXkFc0aBAtGiF7oQLj3NvfoEzYhz
dVfQDEsJcC8rBq+x7TGUZcz6HnqaGJqzxClSRCD7Ze5SmlSVPxUNzmIjujkOyAXb
7MV3LD72Dq4AkQAswA5oh6VszdukjODNLnxGfUAq7dPzBZiwyuiIIAbvbDgnteM/
Zk2WbSXcCDxM8uW4V6iz3oqAhJ90DjygUaogUWnetfqX
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:14 2025 by rpki-client