Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/NQxbcqRE2sNSvHy7XVyCuw1XAnQ.roa
File: NQxbcqRE2sNSvHy7XVyCuw1XAnQ.roa (raw, json)
Hash identifier: MGzWWHplkDXG7D7+FooNLM82DyBUVFREYbaGbqGESUU=
Subject key identifier: 35:0C:5B:72:A4:44:DA:C3:52:BC:7C:BB:5D:5C:82:BB:0D:57:02:74
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B576193EA749CD076ED2108090AAEB
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/NQxbcqRE2sNSvHy7XVyCuw1XAnQ.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35831
IP address blocks: 94.31.54.0/24 maxlen: 24
213.152.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:76:19:3e:a7:49:cd:07:6e:d2:10:80:90:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=350c5b72a444dac352bc7cbb5d5c82bb0d570274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:fd:95:70:bf:8b:ad:ad:26:9a:9b:cc:bb:
01:b7:9a:8d:1a:16:0c:5b:71:24:e3:b8:7c:92:11:
64:5e:97:ee:f3:13:c2:0b:cd:df:27:1f:67:3e:e8:
8f:d9:1f:fe:06:a8:0b:aa:e5:b5:2b:35:d3:5b:0f:
ac:71:af:95:ac:b6:fe:00:e2:ee:3b:a6:f4:93:f6:
9d:02:19:47:60:cd:ac:07:ea:25:d5:12:ae:14:95:
8d:ab:0a:9a:c4:9c:c5:f9:c1:2e:35:79:3b:5f:e1:
46:dc:0c:7f:5c:7c:7c:27:52:59:7f:1a:72:a6:dc:
a1:41:d2:84:0c:68:74:76:6a:de:e2:98:15:22:70:
72:79:88:c6:fe:02:89:e4:b9:9c:e3:1b:ae:fc:bd:
92:8c:aa:a7:a8:ab:4a:db:a2:2f:d4:cd:8c:e4:07:
b3:40:cd:c2:5c:db:17:a4:89:79:d1:d0:d8:b8:8d:
ac:c9:91:41:31:86:76:ed:15:9a:38:9c:7b:6a:69:
b9:af:38:29:a5:01:29:ed:3b:3a:d2:2f:54:99:af:
61:41:c2:e4:bd:ae:c7:b9:ca:f5:13:68:8e:0d:60:
3f:a5:73:98:cf:de:45:c8:97:3a:a6:a6:22:4f:57:
36:73:ec:aa:48:24:87:29:70:71:e5:ec:fc:8e:94:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:5B:72:A4:44:DA:C3:52:BC:7C:BB:5D:5C:82:BB:0D:57:02:74
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/NQxbcqRE2sNSvHy7XVyCuw1XAnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.54.0/24
213.152.251.0/24
Signature Algorithm: sha256WithRSAEncryption
84:10:98:d6:0e:1c:9e:a8:00:22:d4:15:cd:c8:e1:40:83:b5:
0d:e4:97:72:13:9a:02:49:f4:bb:91:65:5d:06:c7:49:ed:82:
06:70:ec:72:9c:c4:90:b6:b3:e5:22:c5:99:f9:55:09:c6:33:
f2:6b:ec:af:9d:7e:0a:dd:45:ae:96:de:70:74:95:6a:5b:84:
bd:85:38:ac:f1:af:65:a8:a9:61:22:f3:c4:0b:51:b7:21:b0:
25:18:65:6b:69:c3:a3:ce:31:13:a0:67:dc:82:e8:0b:33:7c:
cb:cb:6e:31:2e:71:37:91:21:6b:6e:c7:a2:9e:c0:1c:2c:f3:
6d:36:16:0d:d2:76:fb:f9:7f:a6:e2:98:ad:ed:a5:f2:11:81:
df:a7:1e:fe:de:10:5e:67:aa:8d:3e:b9:d8:ca:de:a7:10:b2:
0d:72:b5:71:a2:ec:bb:6d:69:99:34:9c:44:32:c8:ac:74:cd:
32:25:0c:fd:d0:e1:ad:1d:1b:a0:c8:bd:be:f4:a1:55:60:74:
4c:df:fd:30:19:6c:bf:e3:b9:5a:cc:5d:33:5b:3c:e9:cd:c4:
0a:f5:a5:73:72:2a:03:70:fb:0e:1d:17:8a:6c:d4:79:80:62:
58:24:1b:09:b0:b3:99:60:31:5b:a9:30:dc:ee:81:57:76:90:
88:62:f1:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntXYZPqdJzQdu0hCAkKrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjUwMTAyMTU0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTBjNWI3MmE0NDRkYWMzNTJiYzdjYmI1ZDVjODJiYjBkNTcwMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+L9lXC/i62tJpqbzLsBt5qNGhYM
W3Ek47h8khFkXpfu8xPCC83fJx9nPuiP2R/+BqgLquW1KzXTWw+sca+VrLb+AOLu
O6b0k/adAhlHYM2sB+ol1RKuFJWNqwqaxJzF+cEuNXk7X+FG3Ax/XHx8J1JZfxpy
ptyhQdKEDGh0dmre4pgVInByeYjG/gKJ5Lmc4xuu/L2SjKqnqKtK26Iv1M2M5Aez
QM3CXNsXpIl50dDYuI2syZFBMYZ27RWaOJx7amm5rzgppQEp7Ts60i9Uma9hQcLk
va7Hucr1E2iODWA/pXOYz95FyJc6pqYiT1c2c+yqSCSHKXBx5ez8jpTgsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDUMW3KkRNrDUrx8u11cgrsNVwJ0MB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvTlF4YmNxUkUyc05Tdkh5N1hWeUN1dzFYQW5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXh82AwQA
1Zj7MA0GCSqGSIb3DQEBCwUAA4IBAQCEEJjWDhyeqAAi1BXNyOFAg7UN5JdyE5oC
SfS7kWVdBsdJ7YIGcOxynMSQtrPlIsWZ+VUJxjPya+yvnX4K3UWult5wdJVqW4S9
hTis8a9lqKlhIvPEC1G3IbAlGGVracOjzjEToGfcgugLM3zLy24xLnE3kSFrbsei
nsAcLPNtNhYN0nb7+X+m4pit7aXyEYHfpx7+3hBeZ6qNPrnYyt6nELINcrVxouy7
bWmZNJxEMsisdM0yJQz90OGtHRugyL2+9KFVYHRM3/0wGWy/47lazF0zWzzpzcQK
9aVzcioDcPsOHReKbNR5gGJYJBsJsLOZYDFbqTDc7oFXdpCIYvFn
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:04 2025 by rpki-client