Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/NYziV-NFGGqBIoJkJemWo5QRXPo.roa
File: NYziV-NFGGqBIoJkJemWo5QRXPo.roa (raw, json)
Hash identifier: NJwrl3v2N6LA2BTkuAAr9JlSloYvfxRMFpbHdjPuE8g=
Subject key identifier: 35:8C:E2:57:E3:45:18:6A:81:22:82:64:25:E9:96:A3:94:11:5C:FA
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 01951C5A1E10BA6436EDB67E063FF96B02E9
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/NYziV-NFGGqBIoJkJemWo5QRXPo.roa
Signing time: Wed 19 Feb 2025 03:57:02 +0000
ROA not before: Wed 19 Feb 2025 03:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48876
IP address blocks: 194.79.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:5a:1e:10:ba:64:36:ed:b6:7e:06:3f:f9:6b:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Feb 19 03:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=358ce257e345186a8122826425e996a394115cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:e2:06:33:6c:e5:a1:fe:87:c8:6c:31:c2:
9d:37:b4:69:5e:16:39:03:8d:9c:76:ac:c9:6b:b8:
77:db:6b:3e:08:59:29:e6:64:57:50:a0:f2:bf:20:
f9:59:98:52:47:8c:15:08:30:2d:20:9b:40:d1:6f:
bc:b4:f4:06:74:17:95:58:ac:19:09:23:42:13:1f:
a4:b8:c4:6e:b5:36:a2:66:4b:43:c2:c6:2c:38:d2:
72:51:f3:2f:1b:a2:c9:de:a5:b1:1a:f9:d5:bc:ae:
00:0d:8e:1c:9a:19:7f:86:9d:fc:fe:7f:98:ad:ed:
1c:7e:3d:ad:51:af:8b:09:b1:cd:8e:9c:5f:04:fb:
4d:7a:52:ae:b2:d4:f9:47:f6:3a:14:2c:89:b2:e7:
b5:13:55:31:c9:41:a8:18:9b:6d:3b:cc:97:13:61:
e4:ce:34:0a:fd:b8:a2:33:79:b0:81:6b:29:4c:2d:
3d:97:2a:3f:a9:b1:e7:f2:ee:60:11:fe:ea:5a:28:
a7:90:ce:d7:c9:33:32:08:21:a4:b2:c3:2f:51:7d:
47:77:46:0e:b6:bc:26:33:e6:ce:d9:9d:29:7e:f7:
7d:e0:63:bd:d3:53:00:bd:ad:83:d4:79:4a:d8:d5:
d7:27:7e:20:8e:24:ab:30:02:02:a8:3a:d3:ca:17:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:E2:57:E3:45:18:6A:81:22:82:64:25:E9:96:A3:94:11:5C:FA
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/NYziV-NFGGqBIoJkJemWo5QRXPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.250.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:19:a3:f9:0f:b5:ee:cb:8a:80:f6:c5:3e:60:00:6e:f6:cd:
e6:c6:b5:fe:a8:fa:48:5c:b0:65:f1:87:e0:44:02:d6:f1:32:
1b:de:0e:89:23:9c:97:cc:b4:2a:21:7e:88:cb:93:f8:6a:b1:
27:22:b6:0b:83:30:d1:4a:98:6f:b5:ec:50:45:9f:49:fb:e6:
e2:fd:39:25:c7:85:77:7f:2d:08:bb:db:f3:05:a9:82:b9:ec:
b7:63:6d:1e:8f:9a:db:05:65:63:3b:56:ed:d5:9a:a6:5d:f8:
47:b2:60:2a:4c:9a:ca:54:c6:f9:29:d3:03:ce:c5:96:31:93:
2a:54:cb:3c:ee:2a:eb:bb:61:51:4d:7d:bc:d6:44:86:6f:10:
39:ad:46:bb:ab:e5:0f:93:71:d6:40:c3:2d:3c:34:ee:f2:dc:
5b:b2:c5:c1:06:03:a4:90:cd:cc:71:03:b9:6f:99:8a:7d:d3:
9e:3a:b1:e8:d8:1f:68:e2:54:d0:1b:01:1c:8d:59:8b:92:e2:
79:6d:d0:11:87:d5:c5:a0:85:9c:84:fe:ae:d0:f0:50:4f:b1:
fe:59:2d:a7:76:06:17:a6:1d:02:09:6e:53:f9:23:65:6f:46:
b4:16:48:ba:4d:a2:40:83:f3:43:e5:52:15:00:40:a3:35:44:
7d:40:95:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUcWh4QumQ27bZ+Bj/5awLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjFiODVmYTVkZTU3YTVmZTEyM2RlM2E5MDVmM2NiMzZh
YjhhZmUwHhcNMjUwMjE5MDM1NzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNThjZTI1N2UzNDUxODZhODEyMjgyNjQyNWU5OTZhMzk0MTE1Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtjiBjNs5aH+h8hsMcKdN7RpXhY5
A42cdqzJa7h322s+CFkp5mRXUKDyvyD5WZhSR4wVCDAtIJtA0W+8tPQGdBeVWKwZ
CSNCEx+kuMRutTaiZktDwsYsONJyUfMvG6LJ3qWxGvnVvK4ADY4cmhl/hp38/n+Y
re0cfj2tUa+LCbHNjpxfBPtNelKustT5R/Y6FCyJsue1E1UxyUGoGJttO8yXE2Hk
zjQK/biiM3mwgWspTC09lyo/qbHn8u5gEf7qWiinkM7XyTMyCCGkssMvUX1Hd0YO
trwmM+bO2Z0pfvd94GO901MAva2D1HlK2NXXJ34gjiSrMAICqDrTyhdfewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWM4lfjRRhqgSKCZCXplqOUEVz6MB8GA1UdIwQY
MBaAFDLxuF+l3lel/hI946kF88s2q4r+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmIt
OWQyNzA5MTc4NGNjLzEvTll6aVYtTkZHR3FCSW9Ka0plbVdvNVFSWFBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmItOWQyNzA5MTc4NGNj
LzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwk/6MA0G
CSqGSIb3DQEBCwUAA4IBAQCgGaP5D7Xuy4qA9sU+YABu9s3mxrX+qPpIXLBl8Yfg
RALW8TIb3g6JI5yXzLQqIX6Iy5P4arEnIrYLgzDRSphvtexQRZ9J++bi/Tklx4V3
fy0Iu9vzBamCuey3Y20ej5rbBWVjO1bt1ZqmXfhHsmAqTJrKVMb5KdMDzsWWMZMq
VMs87irru2FRTX281kSGbxA5rUa7q+UPk3HWQMMtPDTu8txbssXBBgOkkM3McQO5
b5mKfdOeOrHo2B9o4lTQGwEcjVmLkuJ5bdARh9XFoIWchP6u0PBQT7H+WS2ndgYX
ph0CCW5T+SNlb0a0Fki6TaJAg/ND5VIVAECjNUR9QJUy
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net