Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa
File: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (raw, json)
Hash identifier: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=
Subject key identifier: 9F:1F:66:A2:A9:47:81:23:2C:7F:D1:E0:B4:E1:50:D0:A9:84:AA:51
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0194266AB7BDDAAAC7A011130E4CD3363017
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa
Signing time: Thu 02 Jan 2025 09:48:35 +0000
ROA not before: Thu 02 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 178.236.35.0/24 maxlen: 24
185.118.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b7:bd:da:aa:c7:a0:11:13:0e:4c:d3:36:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jan 2 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f1f66a2a94781232c7fd1e0b4e150d0a984aa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:cb:38:1b:67:91:7f:6d:5e:97:ca:5b:d6:
70:f4:23:6e:41:88:1b:b9:e9:59:ec:7c:b7:df:74:
1b:56:fe:5d:77:91:c7:b4:97:35:5b:59:56:8b:1e:
a3:2c:30:da:b6:2d:37:5b:67:07:21:5a:c2:0c:56:
5e:c3:46:ad:a8:43:12:95:02:2e:b8:bd:c4:43:f4:
cb:3d:ce:48:7a:52:34:76:e9:b7:47:88:ec:aa:81:
6c:02:1e:ac:37:dd:1f:26:a1:48:a8:be:86:86:f0:
dc:1c:f8:b9:28:cf:6d:0b:f0:01:c0:ef:36:97:c5:
3d:56:6a:b0:9d:e6:02:86:5b:32:d5:0d:7d:e4:a5:
3e:23:49:35:fa:83:95:72:5c:a1:df:2b:4c:a4:e9:
97:db:b6:7e:a5:1d:84:d3:f6:43:d3:3b:a3:83:cb:
52:67:4c:1b:1a:b3:61:5e:ab:8c:d0:66:a0:52:ca:
3d:ee:09:99:ce:7d:f4:c4:db:0b:85:d4:24:cc:1e:
47:d8:f3:aa:33:fa:1e:34:ce:53:1d:1d:8c:96:bb:
85:96:0a:12:bc:56:5e:56:98:18:56:e5:aa:c3:28:
f3:70:28:2b:5b:f4:03:1b:ca:69:bb:34:ed:c8:04:
cb:fe:cf:46:c1:eb:6d:2a:e3:5d:12:a1:a1:6a:85:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1F:66:A2:A9:47:81:23:2C:7F:D1:E0:B4:E1:50:D0:A9:84:AA:51
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.35.0/24
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5b:4a:af:1f:7f:2e:1b:fc:61:5d:87:e4:09:06:82:37:ce:
16:b5:26:9b:2a:a3:3f:bb:53:ba:0d:7d:08:6d:40:ac:5e:6c:
27:42:de:8f:fb:f6:92:a1:18:b4:b3:b8:9f:d9:8e:17:44:5f:
48:e0:18:95:c8:62:93:5b:10:a4:59:d5:f2:e0:19:cd:78:9b:
26:a1:6b:18:71:84:36:30:be:fb:b4:59:65:e2:0b:a7:b9:6e:
c3:5e:19:2d:a5:aa:00:57:a1:dc:db:1d:52:6f:31:4e:7e:3d:
75:41:7a:01:30:9c:62:9b:94:eb:d2:ad:78:d4:20:e8:f7:ac:
d5:c4:f6:37:2e:99:74:4d:0e:3a:d7:83:7a:d7:02:32:c8:f2:
bc:b2:6d:ff:d2:40:73:57:f7:ed:22:0f:fb:ed:40:2b:3d:f7:
6c:dd:cd:87:11:af:b7:01:38:59:19:b5:93:70:d0:0b:2c:36:
a0:41:0b:be:2c:97:a0:98:fd:1b:e0:11:57:cb:27:64:e1:49:
e5:75:db:fa:f5:5f:07:10:2b:e0:5d:e5:67:8c:81:31:b6:a1:
3d:9a:fa:11:52:20:d1:a7:06:f5:fb:d5:a2:33:89:31:8a:c5:
33:b4:11:8a:36:a9:9f:35:b7:39:af:e8:c9:32:6e:bb:bb:4f:
26:d6:db:5c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQmare92qrHoBETDkzTNjAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjUwMTAyMDk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjFmNjZhMmE5NDc4MTIzMmM3ZmQxZTBiNGUxNTBkMGE5ODRhYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXTLOBtnkX9tXpfKW9Zw9CNuQYgb
uelZ7Hy333QbVv5dd5HHtJc1W1lWix6jLDDati03W2cHIVrCDFZew0atqEMSlQIu
uL3EQ/TLPc5IelI0dum3R4jsqoFsAh6sN90fJqFIqL6GhvDcHPi5KM9tC/ABwO82
l8U9VmqwneYChlsy1Q195KU+I0k1+oOVclyh3ytMpOmX27Z+pR2E0/ZD0zujg8tS
Z0wbGrNhXquM0GagUso97gmZzn30xNsLhdQkzB5H2POqM/oeNM5THR2MlruFlgoS
vFZeVpgYVuWqwyjzcCgrW/QDG8ppuzTtyATL/s9GwettKuNdEqGhaoUfrQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJ8fZqKpR4EjLH/R4LThUNCphKpRMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL254OW1vcWxIZ1NNc2Y5SGd0T0ZRMEttRXFsRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACy7CMD
BAC5dg8wDQYJKoZIhvcNAQELBQADggEBAI5bSq8ffy4b/GFdh+QJBoI3zha1Jpsq
oz+7U7oNfQhtQKxebCdC3o/79pKhGLSzuJ/ZjhdEX0jgGJXIYpNbEKRZ1fLgGc14
myahaxhxhDYwvvu0WWXiC6e5bsNeGS2lqgBXodzbHVJvMU5+PXVBegEwnGKblOvS
rXjUIOj3rNXE9jcumXRNDjrXg3rXAjLI8ryybf/SQHNX9+0iD/vtQCs992zdzYcR
r7cBOFkZtZNw0AssNqBBC74sl6CY/RvgEVfLJ2ThSeV12/r1XwcQK+Bd5WeMgTG2
oT2a+hFSINGnBvX71aIziTGKxTO0EYo2qZ81tzmv6Mkybru7TybW21w=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net