Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/nnSYLRU9hKxo3UTh-LEIyp0QB5A.roa
File: nnSYLRU9hKxo3UTh-LEIyp0QB5A.roa (raw, json)
Hash identifier: V3Ul2Q6lPbgEHnF1LxPYXzGlFtY7Ipl/LIDBFIja0cQ=
Subject key identifier: 9E:74:98:2D:15:3D:84:AC:68:DD:44:E1:F8:B1:08:CA:9D:10:07:90
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0194228DE7AF03371AC9F5311FA7B614B962
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/nnSYLRU9hKxo3UTh-LEIyp0QB5A.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43395
IP address blocks: 185.145.184.0/22 maxlen: 22
185.186.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e7:af:03:37:1a:c9:f5:31:1f:a7:b6:14:b9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e74982d153d84ac68dd44e1f8b108ca9d100790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:32:2c:a9:3e:0c:5a:65:39:30:e8:7e:bc:
7e:f5:eb:af:19:62:4f:00:0d:f6:0c:d3:77:d0:49:
ef:c1:e8:e5:62:25:a3:b8:eb:d1:0e:f5:cd:22:e1:
f4:2d:e1:bd:21:85:2b:d6:e7:ce:9b:dc:58:35:4b:
d1:c5:ac:5e:a6:4e:39:6e:bc:df:6b:42:e6:b2:67:
39:a6:58:42:8f:56:4e:6c:40:d4:f2:4c:17:96:d2:
64:1a:cd:1a:64:d5:8e:41:cd:41:28:b4:91:77:e7:
d2:fe:72:99:76:ad:02:fa:35:57:de:5f:65:84:15:
5f:67:7a:55:9c:d4:bc:33:5c:c0:52:a2:3e:28:a8:
2e:f6:30:3f:23:3d:37:48:0b:d9:37:38:86:ee:53:
bc:ab:44:8d:8b:68:4d:ba:66:a0:7f:d6:89:e3:1f:
23:ca:ca:56:b1:b9:04:56:b8:b0:f2:cd:8b:05:c5:
75:43:1c:5f:7b:5c:ac:fc:0e:a7:5a:7f:95:9d:85:
37:19:83:79:39:87:90:8b:be:f6:f9:22:98:d3:47:
04:fd:20:cf:37:07:e7:27:47:e3:be:21:07:55:a0:
df:f1:a7:9e:66:cd:fe:ce:c3:de:fc:20:7e:17:b1:
06:8f:2a:ba:71:d5:24:81:14:f6:7c:11:a6:8b:bb:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:98:2D:15:3D:84:AC:68:DD:44:E1:F8:B1:08:CA:9D:10:07:90
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/nnSYLRU9hKxo3UTh-LEIyp0QB5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.184.0/22
185.186.50.0/24
Signature Algorithm: sha256WithRSAEncryption
16:41:0e:25:15:25:d7:38:da:38:f8:f8:b7:6e:bc:c7:57:f5:
3e:0e:90:45:ef:18:a5:97:05:8c:d4:ea:fb:3a:19:96:53:fc:
af:a7:4f:bc:f2:1c:11:70:75:54:36:35:bf:14:f8:1e:51:e2:
17:ae:63:c8:73:15:a6:4f:8e:44:6b:fc:15:9b:94:0f:1b:63:
7c:2a:44:46:c9:43:3a:cd:9e:70:a2:3b:58:bd:2c:cc:d4:8a:
9e:37:1f:36:ac:0f:dc:07:34:71:3c:a4:e3:9e:fc:85:89:03:
5f:6a:7c:d5:d2:da:9e:aa:f7:e1:c9:75:b4:99:7a:98:6f:ed:
11:ef:4e:e8:66:af:b4:84:b6:4b:24:1f:8b:5b:26:6f:1d:07:
c3:2e:62:4d:dc:7e:09:a3:b4:f8:d6:f6:81:70:1f:e6:e0:cf:
d6:3b:65:3d:e0:6b:7b:d7:95:a5:72:64:ef:7a:12:62:bd:13:
fc:35:b3:29:6e:f0:3a:32:01:9b:c7:f7:e1:88:b7:ab:1d:2c:
24:84:61:ce:18:18:6f:15:95:fb:35:6f:79:e0:59:49:5e:45:
a0:bd:c3:1b:ed:a3:0b:c8:b2:f6:2f:42:7d:b0:a4:fc:7c:20:
a1:37:76:0e:05:52:a7:d9:3f:63:02:87:fc:90:44:69:57:e8:
79:4e:b2:19
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijeevAzcayfUxH6e2FLliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky
MmQyNWQwHhcNMjUwMTAxMTU0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTc0OTgyZDE1M2Q4NGFjNjhkZDQ0ZTFmOGIxMDhjYTlkMTAwNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iQyLKk+DFplOTDofrx+9euvGWJP
AA32DNN30EnvwejlYiWjuOvRDvXNIuH0LeG9IYUr1ufOm9xYNUvRxaxepk45brzf
a0Lmsmc5plhCj1ZObEDU8kwXltJkGs0aZNWOQc1BKLSRd+fS/nKZdq0C+jVX3l9l
hBVfZ3pVnNS8M1zAUqI+KKgu9jA/Iz03SAvZNziG7lO8q0SNi2hNumagf9aJ4x8j
yspWsbkEVriw8s2LBcV1Qxxfe1ys/A6nWn+VnYU3GYN5OYeQi772+SKY00cE/SDP
NwfnJ0fjviEHVaDf8aeeZs3+zsPe/CB+F7EGjyq6cdUkgRT2fBGmi7uTuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ50mC0VPYSsaN1E4fixCMqdEAeQMB8GA1UdIwQY
MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt
NGYwMjFjNzNlZjc0LzEvbm5TWUxSVTloS3hvM1VUaC1MRUl5cDBRQjVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0
LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZG4AwQA
uboyMA0GCSqGSIb3DQEBCwUAA4IBAQAWQQ4lFSXXONo4+Pi3brzHV/U+DpBF7xil
lwWM1Or7OhmWU/yvp0+88hwRcHVUNjW/FPgeUeIXrmPIcxWmT45Ea/wVm5QPG2N8
KkRGyUM6zZ5wojtYvSzM1IqeNx82rA/cBzRxPKTjnvyFiQNfanzV0tqeqvfhyXW0
mXqYb+0R707oZq+0hLZLJB+LWyZvHQfDLmJN3H4Jo7T41vaBcB/m4M/WO2U94Gt7
15WlcmTvehJivRP8NbMpbvA6MgGbx/fhiLerHSwkhGHOGBhvFZX7NW954FlJXkWg
vcMb7aMLyLL2L0J9sKT8fCChN3YOBVKn2T9jAof8kERpV+h5TrIZ
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:40 2025 by rpki-client on console.sobornost.net