Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/ngDDmkyYAF9itPtooLnD-4aIxnc.roa
File: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (raw, json)
Hash identifier: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=
Subject key identifier: 9E:00:C3:9A:4C:98:00:5F:62:B4:FB:68:A0:B9:C3:FB:86:88:C6:77
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 019427482FB187A75A1B412AF3F8D341ABD6
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/ngDDmkyYAF9itPtooLnD-4aIxnc.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43853
IP address blocks: 193.151.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2f:b1:87:a7:5a:1b:41:2a:f3:f8:d3:41:ab:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e00c39a4c98005f62b4fb68a0b9c3fb8688c677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:45:08:7e:33:b7:89:df:7c:26:99:14:eb:
92:a1:fb:a7:6e:1f:72:33:d6:79:2f:e7:a5:2c:8a:
4f:d0:e8:97:fd:1a:6b:34:d0:33:cf:5d:87:d6:88:
b8:45:e7:37:c2:66:20:c3:38:29:41:d4:44:97:6f:
c8:e5:5d:5e:57:1c:99:1f:2f:ae:0c:d2:af:76:c4:
27:85:68:9f:2b:64:31:39:a6:06:d6:9b:7e:14:93:
af:e5:26:8b:fd:a5:70:53:eb:e2:14:bb:ce:59:56:
ed:dc:e2:22:e3:50:15:04:51:59:c5:9a:6e:a4:92:
5f:e8:fd:99:62:a3:45:ce:c5:41:f4:be:7a:11:f5:
24:db:a5:d4:98:9c:44:db:4a:c1:36:56:6b:b1:0b:
36:9f:97:b0:90:d6:ef:92:c1:b3:f6:20:0a:1b:0c:
7b:e8:dc:cc:eb:fd:01:ea:b5:fc:97:04:da:74:4b:
2c:d9:8f:75:b9:a5:43:33:69:ea:78:42:e2:0e:d7:
17:6c:da:6d:fa:7d:ac:97:ad:a7:97:56:80:00:47:
d3:cb:fb:27:9e:47:c1:8b:fd:fa:cd:6c:d8:f8:2c:
83:0f:b1:a5:ff:d2:08:28:69:18:3e:b3:aa:13:cb:
9a:d8:77:7c:7d:6a:d1:8b:01:f7:91:e2:26:34:22:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:00:C3:9A:4C:98:00:5F:62:B4:FB:68:A0:B9:C3:FB:86:88:C6:77
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/ngDDmkyYAF9itPtooLnD-4aIxnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.93.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a0:e3:be:76:7f:24:b5:5c:61:d0:f6:27:0a:9f:32:d9:e6:
e7:64:ad:3b:38:b8:2b:a6:d7:3f:d0:f9:dd:59:f8:dc:5f:91:
af:31:43:95:2f:77:86:ff:85:38:77:ef:f7:44:45:3a:69:a6:
04:d5:b3:7e:da:a7:f6:c6:22:87:9d:cd:03:9f:79:36:53:92:
77:43:c4:c3:c3:f7:11:fb:72:c6:82:e2:9e:6b:be:34:13:13:
34:1f:52:20:d9:92:93:45:51:d4:d3:1e:29:16:86:a7:e9:dc:
12:44:01:39:10:77:cc:2c:42:da:31:ba:35:25:c0:7d:ba:32:
fa:13:7f:76:87:f8:c8:eb:41:eb:71:33:f4:cb:ce:c9:75:53:
5c:30:a1:22:6a:31:fb:00:de:36:bc:e3:0f:5e:32:5f:cd:7b:
1f:2d:e0:4e:f8:97:bf:7a:24:b1:e1:97:00:db:c2:31:a1:98:
2d:e4:95:49:d8:26:92:dd:23:a0:29:c2:ca:ef:fb:05:a3:b4:
3b:ef:75:b4:51:62:61:c9:0c:c3:54:fa:a4:ca:b6:ac:52:ab:
82:31:33:36:8b:e2:a8:69:05:b5:2f:1d:4e:e8:ca:99:68:e2:
4c:4b:64:69:3b:a2:94:6f:a5:18:db:b6:4e:5a:b8:e4:a9:05:
6c:e0:f8:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSC+xh6daG0Eq8/jTQavWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NGQ0YjkwODYxNThiYzI5NmIyMDBhNjBmYzM3NTBlOTUx
ZDIyZjgwHhcNMjUwMTAyMTM1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTAwYzM5YTRjOTgwMDVmNjJiNGZiNjhhMGI5YzNmYjg2ODhjNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNJFCH4zt4nffCaZFOuSofunbh9y
M9Z5L+elLIpP0OiX/RprNNAzz12H1oi4Rec3wmYgwzgpQdREl2/I5V1eVxyZHy+u
DNKvdsQnhWifK2QxOaYG1pt+FJOv5SaL/aVwU+viFLvOWVbt3OIi41AVBFFZxZpu
pJJf6P2ZYqNFzsVB9L56EfUk26XUmJxE20rBNlZrsQs2n5ewkNbvksGz9iAKGwx7
6NzM6/0B6rX8lwTadEss2Y91uaVDM2nqeELiDtcXbNpt+n2sl62nl1aAAEfTy/sn
nkfBi/36zWzY+CyDD7Gl/9IIKGkYPrOqE8ua2Hd8fWrRiwH3keImNCIRuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4Aw5pMmABfYrT7aKC5w/uGiMZ3MB8GA1UdIwQY
MBaAFNZNS5CGFYvClrIApg/DdQ6VHSL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjct
YTViZmM1NDQwMDVjLzEvbmdERG1reVlBRjlpdFB0b29MbkQtNGFJeG5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjctYTViZmM1NDQwMDVj
LzEvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZddMA0G
CSqGSIb3DQEBCwUAA4IBAQA0oOO+dn8ktVxh0PYnCp8y2ebnZK07OLgrptc/0Pnd
WfjcX5GvMUOVL3eG/4U4d+/3REU6aaYE1bN+2qf2xiKHnc0Dn3k2U5J3Q8TDw/cR
+3LGguKea740ExM0H1Ig2ZKTRVHU0x4pFoan6dwSRAE5EHfMLELaMbo1JcB9ujL6
E392h/jI60HrcTP0y87JdVNcMKEiajH7AN42vOMPXjJfzXsfLeBO+Je/eiSx4ZcA
28IxoZgt5JVJ2CaS3SOgKcLK7/sFo7Q773W0UWJhyQzDVPqkyrasUquCMTM2i+Ko
aQW1Lx1O6MqZaOJMS2RpO6KUb6UY27ZOWrjkqQVs4PjD
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net