Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/nigLCn7wWT0ueFZoLpA3hlPaWgA.roa
File: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (raw, json)
Hash identifier: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=
Subject key identifier: 9E:28:0B:0A:7E:F0:59:3D:2E:78:56:68:2E:90:37:86:53:DA:5A:00
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019425FD85E127BC89BB216F3C1A2934EEFE
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/nigLCn7wWT0ueFZoLpA3hlPaWgA.roa
Signing time: Thu 02 Jan 2025 07:49:19 +0000
ROA not before: Thu 02 Jan 2025 07:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21385
IP address blocks: 81.92.160.0/20 maxlen: 24
86.110.64.0/19 maxlen: 24
185.55.120.0/22 maxlen: 24
193.110.24.0/22 maxlen: 24
212.82.160.0/19 maxlen: 24
217.151.80.0/20 maxlen: 24
2001:1b18::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:85:e1:27:bc:89:bb:21:6f:3c:1a:29:34:ee:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e280b0a7ef0593d2e7856682e90378653da5a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:91:e0:73:a3:55:ba:43:bc:22:fa:74:57:
b1:6e:5f:bf:ab:b0:98:5a:44:39:14:8e:85:31:3a:
1e:30:a6:03:65:3d:46:7a:b9:a8:f2:ff:a9:3b:d4:
0e:af:b1:13:7f:7f:70:43:e9:ce:30:99:f4:51:21:
ec:35:85:80:08:7b:76:b0:43:1a:f3:a8:30:26:3d:
91:57:fc:56:01:64:10:6d:6b:bf:cd:b2:a3:ce:b8:
2b:0d:f2:87:ca:91:50:26:43:80:13:8c:6f:89:ba:
51:d8:83:bf:4a:cd:78:63:95:b5:b6:48:ed:bd:3c:
83:07:e1:da:db:c1:25:7d:e8:68:0e:ab:cb:2a:de:
b7:82:29:f5:26:e3:ca:c3:ab:b5:8d:d4:6b:5e:47:
06:0c:db:25:ff:5d:e2:8d:4b:2e:25:a0:d6:f4:40:
3b:e6:2f:59:b2:ce:5c:ef:6d:19:dd:c8:53:87:31:
27:37:ae:d7:c2:ec:f2:06:94:c6:0d:0a:e4:c7:f4:
1c:bb:87:4b:c1:6c:80:d0:a2:73:f5:c3:70:3d:5c:
21:56:4a:5d:99:4e:f3:29:ba:0e:6a:75:a3:3b:84:
ef:76:4b:84:40:87:31:9d:71:99:66:5d:fb:6b:d1:
51:55:3c:e5:5b:ed:d0:dd:7f:76:41:bc:4c:6c:7b:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:0B:0A:7E:F0:59:3D:2E:78:56:68:2E:90:37:86:53:DA:5A:00
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/nigLCn7wWT0ueFZoLpA3hlPaWgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.160.0/20
86.110.64.0/19
185.55.120.0/22
193.110.24.0/22
212.82.160.0/19
217.151.80.0/20
IPv6:
2001:1b18::/32
Signature Algorithm: sha256WithRSAEncryption
19:7b:2e:b2:d6:07:ae:1c:bc:25:15:ed:f0:e3:e7:c7:9e:1f:
7c:c5:47:43:d0:fd:8e:af:57:5a:a4:26:f4:a9:0c:56:ce:dc:
91:60:f3:22:8d:fe:3f:5c:82:6d:e1:4e:1e:f9:24:5b:e7:f0:
5b:21:b0:f5:c9:a7:8a:8d:e3:5f:e8:7a:42:d7:1f:b9:24:5a:
5f:75:23:86:61:cc:3e:0a:a3:41:66:aa:04:f8:83:cb:81:03:
36:7e:15:c4:96:56:b3:d5:ea:46:6f:61:7b:15:a5:eb:72:5b:
80:6c:48:d6:41:7b:be:3c:f6:d9:46:b5:05:7f:ab:58:60:48:
09:19:51:49:43:b9:fb:62:0b:10:9a:92:45:38:b3:1c:46:bb:
a7:b7:37:2a:55:ad:3c:f2:ad:5e:df:dc:af:72:cb:3c:78:3a:
86:96:2f:04:28:0b:4b:69:cf:95:dc:e2:d2:63:7d:d9:d2:df:
af:d5:3b:2e:cf:58:da:df:e9:e6:86:69:ed:6b:16:e1:19:67:
4b:3a:6c:5b:4c:40:24:2f:70:5e:6a:2b:04:b5:2f:63:cd:4f:
95:62:3b:73:5a:f5:53:52:1b:de:81:c3:03:b1:54:c7:30:af:
84:7a:5d:97:42:37:af:ea:da:0a:5d:96:61:44:de:3c:d7:35:
4c:44:69:3d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQl/YXhJ7yJuyFvPBopNO7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjUwMTAyMDc0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTI4MGIwYTdlZjA1OTNkMmU3ODU2NjgyZTkwMzc4NjUzZGE1YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ByR4HOjVbpDvCL6dFexbl+/q7CY
WkQ5FI6FMToeMKYDZT1Germo8v+pO9QOr7ETf39wQ+nOMJn0USHsNYWACHt2sEMa
86gwJj2RV/xWAWQQbWu/zbKjzrgrDfKHypFQJkOAE4xvibpR2IO/Ss14Y5W1tkjt
vTyDB+Ha28ElfehoDqvLKt63gin1JuPKw6u1jdRrXkcGDNsl/13ijUsuJaDW9EA7
5i9Zss5c720Z3chThzEnN67XwuzyBpTGDQrkx/Qcu4dLwWyA0KJz9cNwPVwhVkpd
mU7zKboOanWjO4TvdkuEQIcxnXGZZl37a9FRVTzlW+3Q3X92QbxMbHsAzQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFJ4oCwp+8Fk9LnhWaC6QN4ZT2loAMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvbmlnTENuN3dXVDB1ZUZab0xwQTNobFBhV2dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEUVygAwQF
Vm5AAwQCuTd4AwQCwW4YAwQF1FKgAwQE2ZdQMA0EAgACMAcDBQAgARsYMA0GCSqG
SIb3DQEBCwUAA4IBAQAZey6y1geuHLwlFe3w4+fHnh98xUdD0P2Or1dapCb0qQxW
ztyRYPMijf4/XIJt4U4e+SRb5/BbIbD1yaeKjeNf6HpC1x+5JFpfdSOGYcw+CqNB
ZqoE+IPLgQM2fhXEllaz1epGb2F7FaXrcluAbEjWQXu+PPbZRrUFf6tYYEgJGVFJ
Q7n7YgsQmpJFOLMcRruntzcqVa088q1e39yvcss8eDqGli8EKAtLac+V3OLSY33Z
0t+v1Tsuz1ja3+nmhmntaxbhGWdLOmxbTEAkL3BeaisEtS9jzU+VYjtzWvVTUhve
gcMDsVTHMK+Eel2XQjev6toKXZZhRN481zVMRGk9
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:48 2025 by rpki-client