Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa
File: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (raw, json)
Hash identifier: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=
Subject key identifier: 36:B2:62:4E:79:30:63:98:03:65:1C:E3:6F:55:4A:15:A1:C0:8A:A7
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 019423694A401FF3BB374DE8E8648788B732
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa
Signing time: Wed 01 Jan 2025 19:48:10 +0000
ROA not before: Wed 01 Jan 2025 19:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197190
IP address blocks: 195.226.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:4a:40:1f:f3:bb:37:4d:e8:e8:64:87:88:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Jan 1 19:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36b2624e7930639803651ce36f554a15a1c08aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:56:14:a0:e4:7f:0c:37:bf:bf:94:60:a1:
bb:bf:9e:fc:07:4a:38:51:1f:a1:3e:8b:b8:e0:ed:
62:79:f4:2a:b9:4f:d0:fd:b6:64:b1:95:4d:b1:c6:
d5:54:d9:9e:5b:98:95:27:6e:6d:20:c5:4c:94:c1:
0d:52:b6:4e:c6:8a:1c:d1:63:26:74:dc:5c:ac:d6:
a4:d5:d7:26:fd:62:b7:51:9e:2b:19:51:86:ea:bb:
6c:23:bb:ad:2c:f7:f8:49:e0:98:2b:50:2f:8b:76:
9d:1b:6d:02:0c:36:bd:57:7e:e0:35:58:4a:a2:99:
f2:e4:32:df:f3:12:4a:f1:53:7d:0b:46:a0:fa:79:
9f:9c:8c:53:5a:82:ec:d5:93:c8:15:7f:3e:42:e2:
7e:26:ba:a3:d8:cc:52:ee:60:b0:8c:42:0e:9b:8f:
98:b8:24:77:ac:7c:e4:77:59:12:4a:3b:1f:9a:48:
36:a8:ab:e2:52:01:f5:55:61:34:e1:ce:c5:68:d2:
b6:ba:f2:40:71:23:33:e9:2a:43:2d:29:a3:bf:99:
72:0a:2e:df:13:d4:76:e0:96:7f:d5:b8:df:84:ad:
b3:ad:fa:26:63:1a:d5:90:3c:7f:59:74:6e:aa:ea:
17:9a:ac:f7:a1:4c:1d:a0:8a:00:67:67:dc:f3:ab:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B2:62:4E:79:30:63:98:03:65:1C:E3:6F:55:4A:15:A1:C0:8A:A7
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.199.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:95:ef:fa:2b:4b:ab:de:f8:5a:c8:20:14:5b:d3:07:04:7c:
0d:f1:05:8c:66:42:d1:02:26:c5:0e:56:0d:e6:70:be:dc:17:
16:e0:eb:64:f0:40:17:21:8d:ee:2f:e7:4a:07:69:be:22:c8:
dd:8d:cb:31:ed:f0:f9:d7:ea:f9:4c:c3:53:33:33:ad:ef:af:
20:73:4b:07:fd:2d:5f:d0:07:77:a8:5b:f6:02:bc:74:64:52:
0e:ea:9e:9c:2f:0b:61:80:7c:89:fc:7e:d9:5b:f4:9a:90:04:
3f:92:62:5b:73:58:84:bc:54:1d:27:c3:9a:fe:14:85:7e:c4:
23:eb:f4:2b:39:d3:85:1b:51:97:f0:dd:9f:15:c4:9d:19:50:
86:5b:de:26:7d:3a:ed:f3:ec:fe:d1:eb:8e:8a:0f:ad:b2:ab:
b4:8d:23:37:0c:32:c0:d0:be:f8:86:d7:33:7f:13:11:bb:42:
e7:61:49:57:7d:a9:9c:db:c3:0d:83:44:0e:39:65:96:2e:6a:
87:5e:81:d7:5d:d7:a1:2c:0b:57:d4:0e:76:37:69:5c:46:cb:
3e:29:93:49:d1:2c:1b:7c:a3:db:f9:d2:e0:72:31:97:0b:18:
b1:24:c6:6f:07:75:fc:b2:ee:46:69:ff:23:af:d0:fb:b0:40:
1b:0b:ce:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaUpAH/O7N03o6GSHiLcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmM2YzNkMjJjZjZiMTAxZDcxNDgwMDZkYTdhNzI4NGRj
YmIzMjAwHhcNMjUwMTAxMTk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmIyNjI0ZTc5MzA2Mzk4MDM2NTFjZTM2ZjU1NGExNWExYzA4YWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvANWFKDkfww3v7+UYKG7v578B0o4
UR+hPou44O1iefQquU/Q/bZksZVNscbVVNmeW5iVJ25tIMVMlMENUrZOxooc0WMm
dNxcrNak1dcm/WK3UZ4rGVGG6rtsI7utLPf4SeCYK1Avi3adG20CDDa9V37gNVhK
opny5DLf8xJK8VN9C0ag+nmfnIxTWoLs1ZPIFX8+QuJ+Jrqj2MxS7mCwjEIOm4+Y
uCR3rHzkd1kSSjsfmkg2qKviUgH1VWE04c7FaNK2uvJAcSMz6SpDLSmjv5lyCi7f
E9R24JZ/1bjfhK2zrfomYxrVkDx/WXRuquoXmqz3oUwdoIoAZ2fc86spawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDayYk55MGOYA2Uc429VShWhwIqnMB8GA1UdIwQY
MBaAFGYsbD0iz2sQHXFIAG2npyhNy7MgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQt
ZjIxYjZhZTNiZTZjLzEvTnJKaVRua3dZNWdEWlJ6amIxVktGYUhBaXFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQtZjIxYjZhZTNiZTZj
LzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LHMA0G
CSqGSIb3DQEBCwUAA4IBAQCrle/6K0ur3vhayCAUW9MHBHwN8QWMZkLRAibFDlYN
5nC+3BcW4Otk8EAXIY3uL+dKB2m+Isjdjcsx7fD51+r5TMNTMzOt768gc0sH/S1f
0Ad3qFv2Arx0ZFIO6p6cLwthgHyJ/H7ZW/SakAQ/kmJbc1iEvFQdJ8Oa/hSFfsQj
6/QrOdOFG1GX8N2fFcSdGVCGW94mfTrt8+z+0euOig+tsqu0jSM3DDLA0L74htcz
fxMRu0LnYUlXfamc28MNg0QOOWWWLmqHXoHXXdehLAtX1A52N2lcRss+KZNJ0Swb
fKPb+dLgcjGXCxixJMZvB3X8su5Gaf8jr9D7sEAbC87u
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:08 2025 by rpki-client