Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa
File: nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa (raw, json)
Hash identifier: oWPee3Z5fruu6Qydv3LTw9u+9tD+meWbQsYByk2qusI=
Subject key identifier: 9F:0B:F1:87:82:AA:E9:01:A7:AD:21:BC:74:79:52:3D:62:B3:59:2F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019583A0F9FBD1922B5C2AFEEF5BD5F6F37F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa
Signing time: Tue 11 Mar 2025 05:15:19 +0000
ROA not before: Tue 11 Mar 2025 05:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 109.205.215.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:83:a0:f9:fb:d1:92:2b:5c:2a:fe:ef:5b:d5:f6:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 11 05:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f0bf18782aae901a7ad21bc7479523d62b3592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:85:09:9f:fc:f4:98:2a:1e:1a:ca:5f:74:
e1:d0:5d:05:4f:7b:b9:ad:4b:df:3f:ab:dd:cf:1f:
c7:53:dd:cd:89:19:a0:38:92:fe:4b:14:cd:a5:90:
6b:65:fd:30:19:10:7d:81:e3:ac:ac:12:6b:02:6f:
ba:8c:90:8d:31:fe:6d:3f:b6:e0:db:74:92:b9:91:
dc:43:b5:50:29:14:50:33:7d:29:6c:ee:c1:62:3e:
db:d3:5a:a8:97:42:72:52:8b:7c:6d:fd:84:43:91:
dd:69:e1:dd:99:05:42:ab:93:19:fd:73:7d:79:f3:
3f:fe:2c:5b:18:b3:d3:63:be:e3:71:ab:21:b2:a9:
59:f2:4d:51:14:01:29:d0:e1:e6:e9:70:ab:6f:57:
4f:03:21:5c:20:42:30:19:ba:8c:e6:26:c5:2f:03:
b1:63:95:6c:63:a5:ab:77:ab:76:2a:f1:f8:79:e5:
99:71:6b:d8:56:84:ef:c1:95:8c:a2:74:12:97:be:
fa:7d:c3:5d:1b:99:e6:64:ba:bb:dd:86:2f:3e:55:
05:ac:49:9d:ef:ee:68:7c:b1:98:01:11:01:d1:f3:
62:6a:52:52:0c:2d:ee:4a:53:15:26:fb:21:72:26:
de:04:1c:15:98:cf:a2:2b:29:2a:47:8c:c3:fb:4f:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:F1:87:82:AA:E9:01:A7:AD:21:BC:74:79:52:3D:62:B3:59:2F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.215.0/24
185.81.216.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ee:0e:a2:ac:37:d8:ed:e0:fc:7d:7a:8d:27:a3:a5:60:50:
1c:c4:e2:96:e8:22:dd:e1:5e:c2:9a:8e:8a:30:3e:14:1c:a9:
e3:58:05:78:b5:5d:05:13:b5:dd:dd:33:bd:cc:18:97:30:31:
86:18:52:7e:fc:10:7a:cc:9a:37:c3:a0:31:5f:6f:d6:6e:6d:
4b:67:26:a2:fd:3b:44:48:13:e2:43:97:a8:80:a4:22:58:3e:
a8:73:d4:ed:2b:84:3b:c0:78:1c:e5:b8:4b:23:14:39:1a:44:
40:73:09:d3:66:bf:dd:e1:05:3a:f6:11:0a:65:29:e2:69:0c:
70:1f:a8:18:35:bf:b3:42:e3:a4:20:97:91:f9:23:bf:29:d6:
78:ca:70:c8:bc:4e:a1:c7:a3:76:1c:58:f6:3f:b1:4b:5d:19:
ef:3d:c3:a0:45:8d:b9:1e:88:c6:00:19:c4:a7:be:00:0f:e5:
92:39:90:d4:43:ad:f9:07:a3:9e:7b:42:f5:25:88:7f:b7:d5:
70:ec:71:62:6d:b3:9f:59:24:1c:69:29:fa:d5:8c:8a:e5:90:
05:b6:d2:7f:45:c9:25:41:4d:df:e4:4d:f3:c7:91:fb:eb:8e:
d2:89:b5:dd:43:bb:b2:1f:ce:4d:27:1f:4a:fc:27:41:65:38:
dd:eb:97:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWDoPn70ZIrXCr+71vV9vN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjUwMzExMDUxNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjBiZjE4NzgyYWFlOTAxYTdhZDIxYmM3NDc5NTIzZDYyYjM1OTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxGFCZ/89JgqHhrKX3Th0F0FT3u5
rUvfP6vdzx/HU93NiRmgOJL+SxTNpZBrZf0wGRB9geOsrBJrAm+6jJCNMf5tP7bg
23SSuZHcQ7VQKRRQM30pbO7BYj7b01qol0JyUot8bf2EQ5HdaeHdmQVCq5MZ/XN9
efM//ixbGLPTY77jcashsqlZ8k1RFAEp0OHm6XCrb1dPAyFcIEIwGbqM5ibFLwOx
Y5VsY6Wrd6t2KvH4eeWZcWvYVoTvwZWMonQSl776fcNdG5nmZLq73YYvPlUFrEmd
7+5ofLGYAREB0fNialJSDC3uSlMVJvshcibeBBwVmM+iKykqR4zD+0/7/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ8L8YeCqukBp60hvHR5Uj1is1kvMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvbnd2eGg0S3E2UUduclNHOGRIbFNQV0t6V1M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbc3XAwQA
uVHYMA0GCSqGSIb3DQEBCwUAA4IBAQDG7g6irDfY7eD8fXqNJ6OlYFAcxOKW6CLd
4V7Cmo6KMD4UHKnjWAV4tV0FE7Xd3TO9zBiXMDGGGFJ+/BB6zJo3w6AxX2/Wbm1L
Zyai/TtESBPiQ5eogKQiWD6oc9TtK4Q7wHgc5bhLIxQ5GkRAcwnTZr/d4QU69hEK
ZSniaQxwH6gYNb+zQuOkIJeR+SO/KdZ4ynDIvE6hx6N2HFj2P7FLXRnvPcOgRY25
HojGABnEp74AD+WSOZDUQ635B6Oee0L1JYh/t9Vw7HFibbOfWSQcaSn61YyK5ZAF
ttJ/RcklQU3f5E3zx5H7647SibXdQ7uyH85NJx9K/CdBZTjd65fj
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net