Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/NAF6Z4_T0_TYlccHHv8I27pnsls.roa
File: NAF6Z4_T0_TYlccHHv8I27pnsls.roa (raw, json)
Hash identifier: BanlPClOty3fv3FRrxc6WAC0XspY3oKsshA2789RZD0=
Subject key identifier: 34:01:7A:67:8F:D3:D3:F4:D8:95:C7:07:1E:FF:08:DB:BA:67:B2:5B
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B575C53CEE05B69F55668755F51578
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/NAF6Z4_T0_TYlccHHv8I27pnsls.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35156
IP address blocks: 82.98.248.0/24 maxlen: 24
94.31.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:75:c5:3c:ee:05:b6:9f:55:66:87:55:f5:15:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34017a678fd3d3f4d895c7071eff08dbba67b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:92:14:f7:6c:1f:ed:5a:41:cf:78:1f:5e:
c6:4a:c7:04:8a:8a:c0:ff:a0:49:fe:43:e5:53:72:
bb:22:d5:5c:fe:3e:84:01:47:2b:8e:b1:b2:6f:0e:
6e:6a:b6:61:50:10:b1:64:9c:b8:85:95:a8:f6:b5:
a1:8e:84:4f:ac:83:b1:b7:4a:8f:a5:43:ab:ab:e2:
00:84:fb:11:b8:b6:d6:7e:2d:4d:4e:41:bd:20:b1:
c4:1e:73:ff:1d:5f:70:c0:e5:18:55:97:fe:e4:23:
c7:71:65:6c:2c:d6:6d:67:1e:a4:2b:fa:fe:f9:03:
80:46:3a:9e:8b:34:10:56:3c:ab:da:c4:ce:be:1d:
44:86:97:72:07:13:95:be:eb:c9:a3:87:d1:18:41:
1c:ee:1b:31:b0:90:c4:46:4c:79:b4:79:c9:e0:40:
00:40:eb:58:fc:dc:5e:4c:59:fd:6a:8f:8b:ed:43:
65:c3:64:19:96:8b:15:43:d1:03:36:26:fe:ad:93:
98:72:23:b9:6c:ce:3b:4b:77:5c:ab:f7:1f:1a:a4:
f5:90:63:70:dd:25:68:ac:61:ea:b4:7c:d7:d9:0c:
52:d3:82:e5:af:c5:03:4b:b9:d3:d8:a2:17:ee:df:
d7:b7:04:ad:9a:05:57:93:d2:54:d7:a8:2c:41:6a:
47:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:01:7A:67:8F:D3:D3:F4:D8:95:C7:07:1E:FF:08:DB:BA:67:B2:5B
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/NAF6Z4_T0_TYlccHHv8I27pnsls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.248.0/24
94.31.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a2:f6:2c:ce:b2:7c:ba:e5:e5:9d:eb:bd:52:9b:83:9b:87:
5a:d8:7b:11:f3:45:91:15:2b:a2:4c:ea:4f:fd:cd:b0:15:29:
14:2e:c2:54:0f:0c:58:69:b5:83:2a:d7:91:12:4f:3f:fa:ef:
f0:2f:cf:cf:a3:58:0c:32:22:fe:33:07:b7:69:ac:ae:dd:be:
04:45:ac:10:ab:c3:57:69:58:34:f6:5e:c0:70:b9:40:0f:42:
ab:81:4f:80:3e:42:a7:2d:c4:0c:f7:5b:81:9c:07:0c:4c:d9:
55:9c:c9:d7:26:09:bb:d0:e7:2e:ec:2f:e8:40:41:01:64:bc:
a9:6e:01:6e:87:ef:8f:43:10:be:85:ab:e8:ef:3e:e6:ed:91:
74:a5:e8:73:35:6a:3a:90:2b:ad:78:7f:a4:d3:c5:ae:e3:1b:
fd:90:3d:08:0e:02:ad:a2:d1:33:48:21:49:c8:36:8c:d9:79:
1e:ff:a8:21:fe:bd:10:45:a8:aa:ac:07:9a:25:06:0a:e1:df:
92:74:a5:0a:83:ce:ac:ad:2f:11:28:07:ed:9c:21:45:61:bd:
01:6a:ac:2b:47:a4:df:8a:13:da:8a:56:64:65:14:f9:4f:6d:
dd:59:1c:7a:47:95:25:53:16:9b:b7:6f:5f:28:58:08:45:c0:
42:3a:31:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntXXFPO4Ftp9VZodV9RV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjUwMTAyMTU0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDAxN2E2NzhmZDNkM2Y0ZDg5NWM3MDcxZWZmMDhkYmJhNjdiMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4KSFPdsH+1aQc94H17GSscEiorA
/6BJ/kPlU3K7ItVc/j6EAUcrjrGybw5uarZhUBCxZJy4hZWo9rWhjoRPrIOxt0qP
pUOrq+IAhPsRuLbWfi1NTkG9ILHEHnP/HV9wwOUYVZf+5CPHcWVsLNZtZx6kK/r+
+QOARjqeizQQVjyr2sTOvh1EhpdyBxOVvuvJo4fRGEEc7hsxsJDERkx5tHnJ4EAA
QOtY/NxeTFn9ao+L7UNlw2QZlosVQ9EDNib+rZOYciO5bM47S3dcq/cfGqT1kGNw
3SVorGHqtHzX2QxS04Llr8UDS7nT2KIX7t/XtwStmgVXk9JU16gsQWpHQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDQBemeP09P02JXHBx7/CNu6Z7JbMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvTkFGNlo0X1QwX1RZbGNjSEh2OEkyN3Buc2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUmL4AwQA
Xh8PMA0GCSqGSIb3DQEBCwUAA4IBAQBNovYszrJ8uuXlneu9UpuDm4da2HsR80WR
FSuiTOpP/c2wFSkULsJUDwxYabWDKteREk8/+u/wL8/Po1gMMiL+Mwe3aayu3b4E
RawQq8NXaVg09l7AcLlAD0KrgU+APkKnLcQM91uBnAcMTNlVnMnXJgm70Ocu7C/o
QEEBZLypbgFuh++PQxC+havo7z7m7ZF0pehzNWo6kCuteH+k08Wu4xv9kD0IDgKt
otEzSCFJyDaM2Xke/6gh/r0QRaiqrAeaJQYK4d+SdKUKg86srS8RKAftnCFFYb0B
aqwrR6TfihPailZkZRT5T23dWRx6R5UlUxabt29fKFgIRcBCOjHC
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:56 2025 by rpki-client