Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa
File: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (raw, json)
Hash identifier: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=
Subject key identifier: 35:5C:4D:DA:95:09:E6:15:3B:AB:A5:88:9E:A4:60:83:65:42:5D:D3
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266BA43A03011206306D57D74167D0F3
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214080
IP address blocks: 84.232.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a4:3a:03:01:12:06:30:6d:57:d7:41:67:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=355c4dda9509e6153baba5889ea4608365425dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:4d:d8:ab:45:12:aa:01:84:3e:35:e1:30:
5d:09:21:e7:93:35:f5:a9:00:25:51:45:ed:ab:45:
4e:7e:4d:bc:29:9d:89:a0:38:76:02:a0:f1:7e:d3:
89:69:5f:7a:2c:f6:63:02:e9:d3:6b:55:80:af:f2:
8f:6d:48:8f:b7:ca:00:3e:c3:e5:ee:45:8a:c3:3a:
a7:eb:7b:0d:35:05:a7:1f:57:7c:3f:c2:1a:10:46:
f6:11:9d:67:94:77:b0:90:df:54:75:b6:fb:1d:2c:
f6:80:9d:08:43:5a:e2:3e:05:35:02:6b:a2:3c:69:
49:ad:ff:b0:f1:6c:af:e6:1b:0d:85:4a:f5:c5:49:
98:49:91:a8:8d:58:ea:5e:1c:37:c8:11:bc:1c:fa:
ee:d7:2b:c4:7b:a2:45:c5:ce:ec:c5:ff:db:f9:c4:
2f:3c:b1:3b:d1:7a:27:dd:69:da:f5:40:8c:e5:a7:
7a:25:5e:a1:88:31:4a:09:68:2e:0b:79:5e:1c:b5:
b4:d7:45:18:04:5d:78:83:5a:c8:c7:34:72:72:e2:
78:bc:2c:f0:85:04:e2:b2:98:3e:b0:4f:e6:f0:ab:
92:c4:5d:0a:dd:13:15:ef:47:8f:b6:38:d1:df:86:
c5:cd:ba:1e:a1:bb:b5:e3:0e:42:bf:99:36:b4:3a:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5C:4D:DA:95:09:E6:15:3B:AB:A5:88:9E:A4:60:83:65:42:5D:D3
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.71.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4f:fe:1a:5d:87:c0:e9:10:2d:83:80:23:46:54:9d:84:e0:
ff:e4:30:eb:c5:68:8f:65:2c:7e:b9:e4:f6:35:1f:d3:de:e8:
33:92:89:12:7c:7d:0b:a8:52:cf:a5:45:79:d9:83:07:e6:6d:
e3:93:f5:bc:d1:5c:79:c3:fe:4d:74:ea:42:6d:ab:fe:45:85:
cb:06:3f:e5:48:00:68:63:7c:13:35:cb:a2:55:17:ca:d3:63:
b5:59:5f:72:71:69:14:12:85:43:bf:a4:d5:a6:e5:ad:f4:1b:
97:62:7b:3f:17:0f:66:85:00:fa:35:78:cd:27:53:96:c1:8a:
66:3b:d5:c0:fa:48:bc:f7:36:c9:64:12:6e:7a:a2:4a:7b:12:
92:23:e3:f3:ba:08:85:21:0c:a8:cc:49:c3:bc:00:0f:d4:fd:
0e:36:3b:af:0b:18:6b:5c:8e:27:4f:c2:16:e6:a8:50:24:5d:
82:7e:04:b7:28:29:ff:6e:42:03:fc:9e:70:78:b1:38:17:a8:
9e:97:1c:b7:5b:4e:15:b5:50:aa:60:5a:fc:14:47:50:88:62:
f9:1e:71:1f:25:28:2d:36:7c:f0:25:82:a0:8e:94:7c:b3:aa:
e2:d3:3b:0e:c7:1a:86:13:d4:30:e7:27:ee:92:10:c3:03:89:
17:de:2f:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma6Q6AwESBjBtV9dBZ9DzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTVjNGRkYTk1MDllNjE1M2JhYmE1ODg5ZWE0NjA4MzY1NDI1ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEBN2KtFEqoBhD414TBdCSHnkzX1
qQAlUUXtq0VOfk28KZ2JoDh2AqDxftOJaV96LPZjAunTa1WAr/KPbUiPt8oAPsPl
7kWKwzqn63sNNQWnH1d8P8IaEEb2EZ1nlHewkN9Udbb7HSz2gJ0IQ1riPgU1Amui
PGlJrf+w8Wyv5hsNhUr1xUmYSZGojVjqXhw3yBG8HPru1yvEe6JFxc7sxf/b+cQv
PLE70Xon3Wna9UCM5ad6JV6hiDFKCWguC3leHLW010UYBF14g1rIxzRycuJ4vCzw
hQTispg+sE/m8KuSxF0K3RMV70ePtjjR34bFzboeobu14w5Cv5k2tDpCaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVcTdqVCeYVO6uliJ6kYINlQl3TMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvTlZ4TjJwVUo1aFU3cTZXSW5xUmdnMlZDWGRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOhHMA0G
CSqGSIb3DQEBCwUAA4IBAQBYT/4aXYfA6RAtg4AjRlSdhOD/5DDrxWiPZSx+ueT2
NR/T3ugzkokSfH0LqFLPpUV52YMH5m3jk/W80Vx5w/5NdOpCbav+RYXLBj/lSABo
Y3wTNcuiVRfK02O1WV9ycWkUEoVDv6TVpuWt9BuXYns/Fw9mhQD6NXjNJ1OWwYpm
O9XA+ki89zbJZBJueqJKexKSI+PzugiFIQyozEnDvAAP1P0ONjuvCxhrXI4nT8IW
5qhQJF2CfgS3KCn/bkID/J5weLE4F6ielxy3W04VtVCqYFr8FEdQiGL5HnEfJSgt
NnzwJYKgjpR8s6ri0zsOxxqGE9Qw5yfukhDDA4kX3i9T
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:46 2025 by rpki-client