Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/NHhXoxxdMNakey6qmBeac9wJBd4.roa
File: NHhXoxxdMNakey6qmBeac9wJBd4.roa (raw, json)
Hash identifier: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=
Subject key identifier: 34:78:57:A3:1C:5D:30:D6:A4:7B:2E:AA:98:17:9A:73:DC:09:05:DE
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019420D5DBC6577B0335DA2CBA0A09F48C7A
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/NHhXoxxdMNakey6qmBeac9wJBd4.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48418
IP address blocks: 185.254.32.0/24 maxlen: 24
185.254.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:db:c6:57:7b:03:35:da:2c:ba:0a:09:f4:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347857a31c5d30d6a47b2eaa98179a73dc0905de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:73:d2:5b:05:60:84:be:54:cc:34:53:26:
b2:4a:4a:12:c6:72:0b:48:0c:bd:a2:c0:60:cc:e5:
90:47:f0:31:d8:11:35:a5:4b:87:d5:8c:15:cd:44:
4d:f0:8f:24:ff:ff:f5:6c:dc:20:f2:92:05:47:0a:
59:fa:f3:dd:89:85:ad:2c:5f:80:20:13:59:c2:4d:
78:dc:4b:f3:d5:a6:4c:60:fe:23:6f:a1:2e:8d:50:
ea:a8:3d:18:4a:0f:8f:22:f4:f5:3d:e2:fc:b9:7e:
81:e1:68:52:92:b9:a5:1a:d1:de:34:8b:19:ca:56:
f4:d8:78:a5:cf:28:4e:97:ff:13:a6:d6:d4:a7:6c:
0d:6f:48:e9:a7:57:a8:2c:f7:61:cd:cf:3c:ff:a7:
71:e0:ac:bc:3c:0c:5e:e7:63:e2:16:bc:cc:57:3a:
9d:de:13:c7:c1:ba:51:19:c9:85:0c:3a:85:54:fe:
b2:ce:67:da:cd:fb:4e:d8:fc:50:78:51:c4:40:20:
29:28:d2:17:f6:90:b2:e5:cb:29:ff:0f:7e:f0:29:
39:d4:c1:51:ed:80:46:c9:8b:50:cd:43:64:98:a0:
49:2d:97:dd:64:b9:c0:49:13:a8:45:6f:3a:4c:7d:
95:3f:38:e6:b8:a9:e5:cf:95:2a:3e:e4:50:91:67:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:57:A3:1C:5D:30:D6:A4:7B:2E:AA:98:17:9A:73:DC:09:05:DE
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/NHhXoxxdMNakey6qmBeac9wJBd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.32.0/23
Signature Algorithm: sha256WithRSAEncryption
13:89:46:ba:9d:9a:66:25:34:e2:d3:4b:33:89:bf:27:b7:f8:
35:88:f8:40:1f:da:78:db:c8:36:06:9b:56:60:14:c2:bc:53:
83:bb:ef:68:63:c2:74:e4:ff:30:e5:08:52:bb:54:a7:a7:86:
6f:5d:42:46:14:92:f6:0d:9b:29:5d:06:d8:1c:46:18:43:b5:
58:4f:9c:0b:1e:38:fb:28:65:21:18:ec:11:f2:53:a3:6d:20:
19:0e:6a:a5:b2:77:b5:bc:db:ac:60:ba:05:b3:94:63:cd:b6:
04:fe:cf:e2:8e:9b:b0:d2:d5:23:cb:4d:5f:9c:99:cb:7f:20:
dd:f8:d9:f9:25:2c:ec:bc:07:06:fa:72:c5:37:78:1e:7a:5c:
ba:dc:7b:71:89:16:e9:75:05:65:f9:2c:b7:ab:4b:55:68:be:
c2:6a:bf:a5:5c:0d:44:10:1e:a0:19:d1:99:bb:e6:d9:53:6a:
af:04:82:eb:db:53:d1:cd:df:7d:ad:ee:43:fa:ea:8b:40:54:
c4:90:b2:26:f4:3b:a5:02:b8:7e:34:b6:ac:87:87:1a:8d:f8:
a5:a1:90:7f:f0:f4:db:b9:c4:9a:d7:3d:9e:db:70:78:d6:7b:
c6:8e:c2:6d:04:f5:45:79:11:d3:4c:51:53:ed:72:9e:e0:d7:
83:a5:b4:9f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQg1dvGV3sDNdosugoJ9Ix6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjI5Nzc1MjgzNzMzYTQ1YzQ1NGI4ZDdiZTVhNjZkZjBk
YjFhMTcwHhcNMjUwMTAxMDc0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDc4NTdhMzFjNWQzMGQ2YTQ3YjJlYWE5ODE3OWE3M2RjMDkwNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ1z0lsFYIS+VMw0UyaySkoSxnIL
SAy9osBgzOWQR/Ax2BE1pUuH1YwVzURN8I8k///1bNwg8pIFRwpZ+vPdiYWtLF+A
IBNZwk143Evz1aZMYP4jb6EujVDqqD0YSg+PIvT1PeL8uX6B4WhSkrmlGtHeNIsZ
ylb02HilzyhOl/8TptbUp2wNb0jpp1eoLPdhzc88/6dx4Ky8PAxe52PiFrzMVzqd
3hPHwbpRGcmFDDqFVP6yzmfazftO2PxQeFHEQCApKNIX9pCy5csp/w9+8Ck51MFR
7YBGyYtQzUNkmKBJLZfdZLnASROoRW86TH2VPzjmuKnlz5UqPuRQkWec2wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDR4V6McXTDWpHsuqpgXmnPcCQXeMB8GA1UdIwQY
MBaAFPlil3UoNzOkXEVLjXvlpm3w2xoXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XS1hkU2czTTZSY1JVdU5lLVdtYmZEYkdoYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWJmY2U2LTI4NTctNDA0Yi05Yjc0
LWIzMjRlMDI1YjkyOS8xL05IaFhveHhkTU5ha2V5NnFtQmVhYzl3SkJkNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2QvZWJmY2U2LTI4NTctNDA0Yi05Yjc0LWIzMjRlMDI1Yjky
OS8xLzEtV0tYZFNnM002UmNSVXVOZS1XbWJmRGJHaGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5/iAw
DQYJKoZIhvcNAQELBQADggEBABOJRrqdmmYlNOLTSzOJvye3+DWI+EAf2njbyDYG
m1ZgFMK8U4O772hjwnTk/zDlCFK7VKenhm9dQkYUkvYNmyldBtgcRhhDtVhPnAse
OPsoZSEY7BHyU6NtIBkOaqWyd7W826xgugWzlGPNtgT+z+KOm7DS1SPLTV+cmct/
IN342fklLOy8Bwb6csU3eB56XLrce3GJFul1BWX5LLerS1VovsJqv6VcDUQQHqAZ
0Zm75tlTaq8EguvbU9HN332t7kP66otAVMSQsib0O6UCuH40tqyHhxqN+KWhkH/w
9Nu5xJrXPZ7bcHjWe8aOwm0E9UV5EdNMUVPtcp7g14OltJ8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net