Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ncbdt8uypgGRvGrqQEEtgIIfUFs.roa
File: ncbdt8uypgGRvGrqQEEtgIIfUFs.roa (raw, json)
Hash identifier: 5FLt4rzaqXAQX2YDh39kymCNwMpsL7wgFktVcAJWp0k=
Subject key identifier: 9D:C6:DD:B7:CB:B2:A6:01:91:BC:6A:EA:40:41:2D:80:82:1F:50:5B
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0195B0F4D4D47512B7C7F744B7317E1741E2
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ncbdt8uypgGRvGrqQEEtgIIfUFs.roa
Signing time: Thu 20 Mar 2025 00:29:50 +0000
ROA not before: Thu 20 Mar 2025 00:29:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 148.222.240.0/22 maxlen: 24
185.81.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b0:f4:d4:d4:75:12:b7:c7:f7:44:b7:31:7e:17:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Mar 20 00:29:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc6ddb7cbb2a60191bc6aea40412d80821f505b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:b3:01:18:4b:17:04:6e:a6:66:7d:bb:eb:
00:85:a5:6c:a8:68:ac:b8:df:27:e7:09:c9:a5:aa:
8a:c4:60:13:01:10:35:1c:9d:3f:ac:c0:f5:ff:c7:
f9:04:f3:3c:30:dc:0a:c7:97:44:b2:35:8e:b6:f2:
2d:31:ac:1e:76:93:44:88:be:13:c8:db:1a:b9:2c:
29:58:f5:4d:19:f3:41:63:ed:83:2b:01:0a:37:1b:
de:86:1e:36:43:dd:d0:2d:5f:db:a2:9d:25:1a:9f:
6d:9b:88:ef:82:93:e6:2b:69:df:80:a2:c8:81:5b:
62:ce:28:21:e7:e7:15:e5:e2:d2:8c:4e:51:b7:63:
51:e6:e5:55:9f:44:07:21:71:ea:58:cf:24:78:df:
69:38:33:09:e5:df:c6:ee:75:0f:e3:1e:10:ed:dc:
76:e3:8f:2d:e9:74:4e:f7:9e:9d:96:5f:1d:46:98:
d9:59:44:f4:a8:61:e1:f5:48:d8:e4:bf:c9:45:a0:
19:49:81:c1:0f:a1:a7:86:c8:0c:61:2c:2a:f3:94:
30:46:54:8a:8d:01:e0:a6:48:a9:9a:3d:da:61:d4:
bc:33:b6:54:87:05:1f:61:36:73:36:99:97:41:bd:
1a:6f:d6:78:64:1c:f6:53:91:b3:ac:71:d6:28:bb:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:DD:B7:CB:B2:A6:01:91:BC:6A:EA:40:41:2D:80:82:1F:50:5B
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ncbdt8uypgGRvGrqQEEtgIIfUFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.240.0/22
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
35:1b:f1:ed:7d:dc:16:e2:79:ed:85:c2:05:98:8d:91:bb:b7:
a3:0a:36:b6:3c:52:a7:30:db:26:47:c1:e9:a2:44:c0:9f:9d:
c8:6f:b4:3b:ac:60:7b:9e:d2:b1:f1:b0:d1:ca:65:08:45:4e:
f0:bc:5b:df:28:58:4f:ad:a5:a4:74:39:1e:d4:ca:48:5d:24:
c3:76:c7:d8:cc:9c:42:67:15:9a:d3:95:7a:17:c6:17:2d:7d:
65:c4:cd:e2:8d:2b:ba:92:30:f0:bc:79:fb:39:e3:fb:3a:53:
8a:88:e4:9d:60:5f:43:27:83:46:8c:ad:29:03:61:03:eb:a0:
cb:42:7c:0a:b3:c6:f7:50:1a:9f:a9:65:fe:f4:66:3e:63:1e:
cb:93:5f:d4:94:00:6d:87:3e:8d:ff:45:12:a0:5c:c8:b6:ca:
31:5d:ab:5d:01:87:a2:29:40:07:3a:57:5f:90:3a:8e:dc:b7:
f9:34:93:48:ba:44:a2:29:21:dd:16:7d:f2:26:6f:a4:76:71:
1f:3d:0d:6b:92:be:5f:5a:d8:d9:c3:0e:3b:82:55:58:3a:dd:
d8:55:dc:64:86:bd:2e:bb:51:a4:7c:99:c4:2f:46:d7:63:b7:
e9:ff:56:98:23:78:c1:b4:aa:88:01:27:b7:93:64:37:38:e5:
f3:a2:e8:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWw9NTUdRK3x/dEtzF+F0HiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjUwMzIwMDAyOTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGM2ZGRiN2NiYjJhNjAxOTFiYzZhZWE0MDQxMmQ4MDgyMWY1MDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL6zARhLFwRupmZ9u+sAhaVsqGis
uN8n5wnJpaqKxGATARA1HJ0/rMD1/8f5BPM8MNwKx5dEsjWOtvItMawedpNEiL4T
yNsauSwpWPVNGfNBY+2DKwEKNxvehh42Q93QLV/bop0lGp9tm4jvgpPmK2nfgKLI
gVtizigh5+cV5eLSjE5Rt2NR5uVVn0QHIXHqWM8keN9pODMJ5d/G7nUP4x4Q7dx2
448t6XRO956dll8dRpjZWUT0qGHh9UjY5L/JRaAZSYHBD6GnhsgMYSwq85QwRlSK
jQHgpkipmj3aYdS8M7ZUhwUfYTZzNpmXQb0ab9Z4ZBz2U5GzrHHWKLs2ZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ3G3bfLsqYBkbxq6kBBLYCCH1BbMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvbmNiZHQ4dXlwZ0dSdkdycVFFRXRnSUlmVUZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQClN7wAwQC
uVEcMA0GCSqGSIb3DQEBCwUAA4IBAQA1G/HtfdwW4nnthcIFmI2Ru7ejCja2PFKn
MNsmR8HpokTAn53Ib7Q7rGB7ntKx8bDRymUIRU7wvFvfKFhPraWkdDke1MpIXSTD
dsfYzJxCZxWa05V6F8YXLX1lxM3ijSu6kjDwvHn7OeP7OlOKiOSdYF9DJ4NGjK0p
A2ED66DLQnwKs8b3UBqfqWX+9GY+Yx7Lk1/UlABthz6N/0USoFzItsoxXatdAYei
KUAHOldfkDqO3Lf5NJNIukSiKSHdFn3yJm+kdnEfPQ1rkr5fWtjZww47glVYOt3Y
Vdxkhr0uu1GkfJnEL0bXY7fp/1aYI3jBtKqIASe3k2Q3OOXzouhc
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:55:14 2025 by rpki-client on console.sobornost.net