Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa
File: Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa (raw, json)
Hash identifier: uRWV+NR8DLzCaelMu4ig9EBtvA2PkzEXB7bjRzj91IU=
Subject key identifier: 36:4D:61:8E:AA:E9:CF:07:0A:C4:CB:3F:7A:35:89:DF:DE:6A:5D:7A
Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial: 019424B3F3D2FF89FFFE0D63D7D6B35795B7
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44030
IP address blocks: 176.99.64.0/19 maxlen: 19
195.2.232.0/23 maxlen: 23
2001:67c:2084::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f3:d2:ff:89:ff:fe:0d:63:d7:d6:b3:57:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=364d618eaae9cf070ac4cb3f7a3589dfde6a5d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:73:70:e3:8e:30:83:36:cb:42:a0:4b:d6:
06:cf:33:14:2a:1e:b4:f7:b8:55:15:bb:b4:fd:e3:
a1:99:62:4b:b0:ee:93:ab:5d:20:7b:b0:14:c3:34:
6d:7e:ae:5b:61:0e:f3:74:75:c6:98:1b:7c:9d:4c:
fa:08:3d:b1:c9:96:18:58:4f:bd:b7:2d:03:54:93:
e3:54:68:38:e5:c6:1a:6f:f7:66:3b:b2:27:84:2c:
b5:9d:87:a4:2e:35:bd:d8:02:f0:92:43:6d:8c:af:
b2:cf:83:c7:16:e5:9a:9d:63:bd:a0:91:59:c0:fb:
c7:bb:15:9a:c9:2a:6c:7f:57:b1:5c:80:26:38:db:
2b:b4:8e:23:6b:cc:14:b4:73:14:c4:f7:3c:5c:98:
db:28:19:17:b9:dd:ab:8f:f8:2f:5f:2b:02:34:9b:
55:f1:db:4b:34:d7:42:f5:dd:34:a7:fb:56:56:5d:
b9:1f:ca:f1:38:25:dc:a4:b4:6b:b2:56:8e:5c:18:
b5:cd:92:c0:99:29:ff:91:fd:f3:5a:ce:63:b8:f3:
6d:b9:82:86:fa:93:eb:92:9d:23:92:1c:60:b5:12:
60:34:d5:cf:33:0d:9f:0e:e3:6b:d9:cf:05:27:40:
c0:2a:93:f7:59:f5:fc:5a:6a:bc:eb:e8:5c:09:02:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:61:8E:AA:E9:CF:07:0A:C4:CB:3F:7A:35:89:DF:DE:6A:5D:7A
X509v3 Authority Key Identifier:
keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.99.64.0/19
195.2.232.0/23
IPv6:
2001:67c:2084::/48
Signature Algorithm: sha256WithRSAEncryption
d9:5b:4a:a6:8c:57:2d:26:98:f3:01:df:4f:38:10:da:0a:61:
62:39:8d:af:a4:07:3b:a5:af:f7:be:62:9d:20:94:f1:7d:c9:
20:f7:4f:7d:6f:58:e6:7e:44:a9:e6:84:16:7e:c3:72:f7:89:
95:e3:4c:dd:4d:34:46:24:af:96:08:d5:da:a8:08:9e:eb:98:
5a:f2:f6:8c:e3:fb:0e:fb:8b:11:92:6f:78:57:ff:68:9c:33:
52:dc:ea:86:57:4c:b4:32:cf:4a:51:ac:44:17:f6:b0:2b:b9:
fa:23:7d:b3:51:e0:1a:c3:59:88:47:b6:18:ee:18:41:62:2b:
68:00:e6:2d:cc:22:94:23:5a:a0:d9:78:a3:ce:d6:8d:fe:24:
8c:29:5b:31:30:06:76:45:62:f0:41:b9:7d:35:27:1d:b7:fb:
d2:4c:c9:ff:98:75:2c:bc:81:66:72:56:7d:fa:c4:2c:43:12:
39:2e:33:36:31:75:ad:77:01:2a:4f:aa:4e:33:9f:8e:c9:0b:
5f:ad:c9:20:fc:2b:b8:01:9e:03:41:61:c7:8d:dc:da:df:39:
7d:d9:40:85:9e:94:a3:77:43:4a:35:66:ad:e7:fa:9d:04:91:
7e:d8:28:91:fb:69:c6:69:53:cd:8a:ce:8d:03:ca:77:6c:3d:
64:d0:f5:bb
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQks/PS/4n//g1j19azV5W3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTliNTlkYzJlOWYzNGIyNTUyMzBlNTYyYTNjY2E2MWRh
ZWIxNTUwHhcNMjUwMTAyMDE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjRkNjE4ZWFhZTljZjA3MGFjNGNiM2Y3YTM1ODlkZmRlNmE1ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3pzcOOOMIM2y0KgS9YGzzMUKh60
97hVFbu0/eOhmWJLsO6Tq10ge7AUwzRtfq5bYQ7zdHXGmBt8nUz6CD2xyZYYWE+9
ty0DVJPjVGg45cYab/dmO7InhCy1nYekLjW92ALwkkNtjK+yz4PHFuWanWO9oJFZ
wPvHuxWaySpsf1exXIAmONsrtI4ja8wUtHMUxPc8XJjbKBkXud2rj/gvXysCNJtV
8dtLNNdC9d00p/tWVl25H8rxOCXcpLRrslaOXBi1zZLAmSn/kf3zWs5juPNtuYKG
+pPrkp0jkhxgtRJgNNXPMw2fDuNr2c8FJ0DAKpP3WfX8Wmq86+hcCQKdLwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDZNYY6q6c8HCsTLP3o1id/eal16MB8GA1UdIwQY
MBaAFCIZtZ3C6fNLJVIw5WKjzKYdrrFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTkt
MDA2ZGUwZmE1MzQyLzEvTmsxaGpxcnB6d2NLeE1zX2VqV0ozOTVxWFhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTktMDA2ZGUwZmE1MzQy
LzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQFsGNAAwQB
wwLoMA8EAgACMAkDBwAgAQZ8IIQwDQYJKoZIhvcNAQELBQADggEBANlbSqaMVy0m
mPMB3084ENoKYWI5ja+kBzulr/e+Yp0glPF9ySD3T31vWOZ+RKnmhBZ+w3L3iZXj
TN1NNEYkr5YI1dqoCJ7rmFry9ozj+w77ixGSb3hX/2icM1Lc6oZXTLQyz0pRrEQX
9rArufojfbNR4BrDWYhHthjuGEFiK2gA5i3MIpQjWqDZeKPO1o3+JIwpWzEwBnZF
YvBBuX01Jx23+9JMyf+YdSy8gWZyVn36xCxDEjkuMzYxda13ASpPqk4zn47JC1+t
ySD8K7gBngNBYceN3NrfOX3ZQIWelKN3Q0o1Zq3n+p0EkX7YKJH7acZpU82Kzo0D
yndsPWTQ9bs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net