Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/nzjNgL9vfqj7FcJjaEJmWt_jQiM.roa
File: nzjNgL9vfqj7FcJjaEJmWt_jQiM.roa (raw, json)
Hash identifier: llP4NmFewcglSMw9utQmyfOk+VDA5Rn/G2jBkGERWjY=
Subject key identifier: 9F:38:CD:80:BF:6F:7E:A8:FB:15:C2:63:68:42:66:5A:DF:E3:42:23
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 019425222D927666B623A41057D6A2F3665F
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/nzjNgL9vfqj7FcJjaEJmWt_jQiM.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35007
IP address blocks: 83.168.118.0/24 maxlen: 24
83.168.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2d:92:76:66:b6:23:a4:10:57:d6:a2:f3:66:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f38cd80bf6f7ea8fb15c2636842665adfe34223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:49:b1:28:ed:15:71:f9:16:79:bc:8e:30:
34:0d:35:26:d1:c9:57:42:d0:d1:3b:f9:cd:d1:76:
89:12:59:36:37:e9:31:5d:a2:53:68:2e:13:70:c4:
ad:10:6d:08:42:7a:77:c2:0d:3e:44:01:84:44:9e:
ac:d4:52:5d:9e:f5:9b:9d:bd:6b:aa:86:d9:1a:e4:
09:0e:34:5b:53:a3:9b:bb:57:91:fa:4f:6f:15:77:
be:ac:25:86:da:23:af:41:8a:bc:fb:0c:4b:96:32:
95:6e:51:9f:e4:19:d8:31:a1:73:8a:33:53:9c:33:
23:f4:cc:fc:36:ce:f7:05:ff:f7:6e:4e:ec:c5:47:
59:99:e0:5d:79:ab:77:99:e3:44:89:c9:cb:68:1f:
60:1b:79:39:94:95:48:40:c5:6b:40:1e:7a:10:8f:
b1:f1:3c:93:db:8b:b8:b0:40:8e:0b:a0:f8:38:37:
66:d9:87:06:db:48:c6:a3:96:58:2b:51:d7:40:a5:
7c:6e:cd:77:91:6a:1c:f9:e9:ec:aa:3a:eb:c7:ed:
22:5d:07:7d:69:4d:38:7f:44:41:e2:a6:b0:df:d4:
4f:08:06:43:8a:1e:88:1b:d3:27:98:74:dc:f2:73:
50:d6:85:3e:ef:6f:63:28:05:dc:97:1d:2a:94:3a:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:CD:80:BF:6F:7E:A8:FB:15:C2:63:68:42:66:5A:DF:E3:42:23
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/nzjNgL9vfqj7FcJjaEJmWt_jQiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.118.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:45:28:cd:af:33:c9:b7:59:aa:ba:c5:06:6e:4f:1e:54:2a:
b6:59:c9:63:5e:ca:40:7c:4c:83:78:1e:78:ae:19:e2:a3:a9:
da:b8:18:e2:d8:c5:88:a6:d5:bd:11:14:6f:d5:10:61:bd:6e:
f3:81:d0:63:75:f1:34:b3:47:7e:5d:ae:7d:2d:ad:3e:fa:f6:
a0:67:8e:7d:2f:6b:d0:5a:1c:91:62:75:a9:0c:80:e5:39:d2:
f0:34:04:b4:96:ec:28:73:02:78:39:03:00:ad:6e:fa:84:2c:
f0:6d:70:d9:a7:5a:3f:65:7d:14:20:64:ae:2e:08:fd:4c:6f:
d8:e0:1c:d5:44:39:d7:73:9f:1f:ad:32:60:47:2c:b5:df:ae:
34:c8:6f:69:f3:24:ef:21:67:f3:a6:72:54:fc:7a:30:0b:8c:
a7:75:e9:06:d5:bd:30:10:9c:9f:49:b4:b8:10:99:7e:43:63:
cc:95:78:e8:19:f9:37:bd:f9:9a:64:5d:a3:d4:88:21:92:6a:
67:92:d5:ec:b5:b4:3f:c2:32:e4:f1:9b:a3:af:e7:c6:ff:61:
39:7a:2d:a6:5e:8c:fb:4e:04:99:83:da:5a:7e:e8:2b:51:c0:
4f:6a:5a:a8:e0:ef:cd:84:d0:05:87:5b:af:fc:72:46:94:2d:
54:f8:46:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIi2Sdma2I6QQV9ai82ZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi
M2Q5MjQwHhcNMjUwMTAyMDM0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjM4Y2Q4MGJmNmY3ZWE4ZmIxNWMyNjM2ODQyNjY1YWRmZTM0MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArblJsSjtFXH5Fnm8jjA0DTUm0clX
QtDRO/nN0XaJElk2N+kxXaJTaC4TcMStEG0IQnp3wg0+RAGERJ6s1FJdnvWbnb1r
qobZGuQJDjRbU6Obu1eR+k9vFXe+rCWG2iOvQYq8+wxLljKVblGf5BnYMaFzijNT
nDMj9Mz8Ns73Bf/3bk7sxUdZmeBdeat3meNEicnLaB9gG3k5lJVIQMVrQB56EI+x
8TyT24u4sECOC6D4ODdm2YcG20jGo5ZYK1HXQKV8bs13kWoc+ensqjrrx+0iXQd9
aU04f0RB4qaw39RPCAZDih6IG9MnmHTc8nNQ1oU+729jKAXclx0qlDrhxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ84zYC/b36o+xXCY2hCZlrf40IjMB8GA1UdIwQY
MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt
ODI0NTFmMzNmNGNhLzEvbnpqTmdMOXZmcWo3RmNKamFFSm1XdF9qUWlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh
LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU6h2MA0G
CSqGSIb3DQEBCwUAA4IBAQCrRSjNrzPJt1mqusUGbk8eVCq2WcljXspAfEyDeB54
rhnio6nauBji2MWIptW9ERRv1RBhvW7zgdBjdfE0s0d+Xa59La0++vagZ459L2vQ
WhyRYnWpDIDlOdLwNAS0luwocwJ4OQMArW76hCzwbXDZp1o/ZX0UIGSuLgj9TG/Y
4BzVRDnXc58frTJgRyy13640yG9p8yTvIWfzpnJU/HowC4yndekG1b0wEJyfSbS4
EJl+Q2PMlXjoGfk3vfmaZF2j1IghkmpnktXstbQ/wjLk8Zujr+fG/2E5ei2mXoz7
TgSZg9pafugrUcBPalqo4O/NhNAFh1uv/HJGlC1U+EbF
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:36:22 2025 by rpki-client