Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/nfGSbOJalGhqP8byPsCkjMCHfQQ.roa
File: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (raw, json)
Hash identifier: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=
Subject key identifier: 9D:F1:92:6C:E2:5A:94:68:6A:3F:C6:F2:3E:C0:A4:8C:C0:87:7D:04
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 019425218FC082788F733CE3426E82E3F738
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/nfGSbOJalGhqP8byPsCkjMCHfQQ.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39406
IP address blocks: 91.212.68.0/24 maxlen: 24
188.68.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8f:c0:82:78:8f:73:3c:e3:42:6e:82:e3:f7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9df1926ce25a94686a3fc6f23ec0a48cc0877d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:de:7d:dd:32:03:e1:60:aa:3c:42:43:a3:
92:75:c7:95:42:e3:1e:92:d4:e2:d4:92:7a:1d:13:
93:a1:b8:63:52:3c:2b:e7:01:e2:93:1c:24:e2:fd:
77:af:ec:ea:1b:4d:cb:20:35:ab:7b:78:c4:ec:8b:
fe:bb:7a:c3:a6:aa:e7:c9:9c:32:c4:c4:96:9c:38:
15:f0:7b:0e:f5:9a:da:00:11:fd:80:7a:e2:55:3e:
69:79:54:4f:12:4b:b4:94:3d:b2:87:ea:e7:da:cf:
e0:4d:08:29:2e:9c:ea:fc:ff:12:be:24:03:c5:2e:
79:d8:26:5d:fa:49:56:fb:2d:d8:16:f4:67:5b:d8:
e7:6a:9c:5b:85:f1:fd:38:c3:0a:11:87:2c:2b:30:
28:10:59:5e:18:31:68:33:22:b7:05:16:f0:a1:78:
ee:5a:2d:da:b8:8e:21:da:12:e0:c0:d8:8b:09:e2:
6c:8f:8d:8e:93:c3:17:0b:9a:c2:1a:80:4c:08:74:
4c:84:d4:93:df:0f:52:2b:88:8f:c1:94:7f:4b:a9:
8d:da:08:49:33:9f:2b:3c:3f:b7:3a:d1:63:e4:8e:
76:79:b3:8b:1c:3d:32:ee:90:da:52:b4:e6:cb:de:
b4:59:d7:cd:66:7f:50:d0:85:ef:01:24:d6:55:f8:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F1:92:6C:E2:5A:94:68:6A:3F:C6:F2:3E:C0:A4:8C:C0:87:7D:04
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/nfGSbOJalGhqP8byPsCkjMCHfQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.68.0/24
188.68.82.0/23
Signature Algorithm: sha256WithRSAEncryption
54:47:18:b4:a0:cc:4c:6b:a6:82:24:3e:f5:e3:fe:1a:1f:0a:
37:f5:5a:f9:a7:b4:78:a9:cb:3a:bd:0e:e4:88:e5:ee:4a:7b:
9f:06:18:7b:93:73:ab:40:ef:93:6b:19:6b:ec:81:1f:12:e0:
64:7d:de:58:21:6f:71:4c:54:76:24:01:75:b4:66:35:5a:05:
b3:ce:f3:b7:df:16:1f:b2:86:34:bc:a9:39:6e:5d:2a:2a:1d:
e9:1c:4b:8f:20:b3:65:bb:5b:81:d1:b1:11:fb:8a:83:4d:f8:
61:51:c4:b7:6f:e5:70:dc:e5:1e:b5:cf:58:a1:c2:92:8b:a2:
81:2e:e9:20:8a:9c:a1:00:c4:8a:d0:f9:4e:50:78:b0:f3:fd:
c6:d5:a4:13:84:d5:9f:da:17:e8:69:18:85:83:10:83:8c:83:
99:df:a3:d3:8d:11:43:bd:8c:fc:b8:f8:3e:9b:85:f3:21:1c:
84:9b:78:ad:14:20:2c:bd:8b:0b:3c:66:7f:a5:cb:7a:ea:f5:
d1:78:cd:c8:54:93:c8:97:6b:0e:42:90:a0:63:bf:5f:8c:d0:
68:a4:eb:50:c9:eb:ee:37:ca:0b:a6:b0:4e:3c:f7:df:c4:de:
07:5b:90:07:89:19:dc:d1:cd:89:b7:91:06:ad:8d:45:95:a2:
44:cc:9d:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIY/AgniPczzjQm6C4/c4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1
NDg4OTQwHhcNMjUwMTAyMDM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGYxOTI2Y2UyNWE5NDY4NmEzZmM2ZjIzZWMwYTQ4Y2MwODc3ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL3efd0yA+FgqjxCQ6OSdceVQuMe
ktTi1JJ6HROTobhjUjwr5wHikxwk4v13r+zqG03LIDWre3jE7Iv+u3rDpqrnyZwy
xMSWnDgV8HsO9ZraABH9gHriVT5peVRPEku0lD2yh+rn2s/gTQgpLpzq/P8SviQD
xS552CZd+klW+y3YFvRnW9jnapxbhfH9OMMKEYcsKzAoEFleGDFoMyK3BRbwoXju
Wi3auI4h2hLgwNiLCeJsj42Ok8MXC5rCGoBMCHRMhNST3w9SK4iPwZR/S6mN2ghJ
M58rPD+3OtFj5I52ebOLHD0y7pDaUrTmy960WdfNZn9Q0IXvASTWVfjOjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ3xkmziWpRoaj/G8j7ApIzAh30EMB8GA1UdIwQY
MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt
MWVmN2VmMTdmYTQzLzEvbmZHU2JPSmFsR2hxUDhieVBzQ2tqTUNIZlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz
LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9REAwQB
vERSMA0GCSqGSIb3DQEBCwUAA4IBAQBURxi0oMxMa6aCJD714/4aHwo39Vr5p7R4
qcs6vQ7kiOXuSnufBhh7k3OrQO+Taxlr7IEfEuBkfd5YIW9xTFR2JAF1tGY1WgWz
zvO33xYfsoY0vKk5bl0qKh3pHEuPILNlu1uB0bER+4qDTfhhUcS3b+Vw3OUetc9Y
ocKSi6KBLukgipyhAMSK0PlOUHiw8/3G1aQThNWf2hfoaRiFgxCDjIOZ36PTjRFD
vYz8uPg+m4XzIRyEm3itFCAsvYsLPGZ/pct66vXReM3IVJPIl2sOQpCgY79fjNBo
pOtQyevuN8oLprBOPPffxN4HW5AHiRnc0c2Jt5EGrY1FlaJEzJ00
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:56 2025 by rpki-client