Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/NGhz2KPtH1XgDrQSH35t51anVMI.roa
File: NGhz2KPtH1XgDrQSH35t51anVMI.roa (raw, json)
Hash identifier: nC0NdJlNwG/ddRGeH5iQMDTlndhbcEnIoav1TkfO+xc=
Subject key identifier: 34:68:73:D8:A3:ED:1F:55:E0:0E:B4:12:1F:7E:6D:E7:56:A7:54:C2
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 0193BB5C350AD38B27259588D35A704105EC
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/NGhz2KPtH1XgDrQSH35t51anVMI.roa
Signing time: Thu 12 Dec 2024 14:53:22 +0000
ROA not before: Thu 12 Dec 2024 14:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.245.74.0/24 maxlen: 24
109.245.96.0/24 maxlen: 24
109.245.97.0/24 maxlen: 24
109.245.98.0/24 maxlen: 24
109.245.99.0/24 maxlen: 24
109.245.100.0/24 maxlen: 24
109.245.101.0/24 maxlen: 24
109.245.102.0/24 maxlen: 24
109.245.103.0/24 maxlen: 24
109.245.112.0/24 maxlen: 24
109.245.113.0/24 maxlen: 24
109.245.114.0/24 maxlen: 24
109.245.115.0/24 maxlen: 24
109.245.116.0/24 maxlen: 24
109.245.117.0/24 maxlen: 24
109.245.118.0/24 maxlen: 24
109.245.119.0/24 maxlen: 24
109.245.192.0/24 maxlen: 24
109.245.193.0/24 maxlen: 24
109.245.194.0/24 maxlen: 24
109.245.195.0/24 maxlen: 24
109.245.196.0/24 maxlen: 24
109.245.197.0/24 maxlen: 24
109.245.198.0/24 maxlen: 24
109.245.199.0/24 maxlen: 24
109.245.200.0/24 maxlen: 24
109.245.201.0/24 maxlen: 24
109.245.202.0/24 maxlen: 24
109.245.203.0/24 maxlen: 24
109.245.204.0/24 maxlen: 24
109.245.205.0/24 maxlen: 24
109.245.206.0/24 maxlen: 24
109.245.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:5c:35:0a:d3:8b:27:25:95:88:d3:5a:70:41:05:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Dec 12 14:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346873d8a3ed1f55e00eb4121f7e6de756a754c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:fa:62:e7:e7:0b:60:d8:bc:01:20:4d:76:
e3:ac:57:98:7d:9e:41:01:55:12:c5:5f:d4:e4:99:
b3:36:d7:c1:f6:e9:e9:3a:10:49:da:da:0f:80:29:
53:2f:eb:07:c0:70:66:ab:81:ec:e0:f1:7b:31:d1:
76:60:57:39:7f:78:48:81:f9:e4:78:90:72:af:02:
49:b3:3d:40:19:de:75:e2:84:96:bc:95:1a:ff:5a:
2d:de:6b:f7:ac:c0:c0:a3:57:ed:32:8e:11:47:b7:
f2:d0:19:da:25:50:fc:c8:a1:a0:35:46:47:94:d0:
eb:72:d7:4a:55:02:3c:8c:90:be:08:5a:d1:b8:9a:
33:bb:90:2a:a1:c5:5f:fd:c5:0e:5f:1f:e6:b0:76:
ce:c9:c6:2a:fd:39:94:64:97:7c:b4:71:32:38:8b:
4f:28:a4:d2:76:b2:9a:5c:c4:06:1c:ce:74:75:e9:
50:a2:4c:17:aa:bb:9a:f4:ff:c2:76:45:f4:61:b4:
28:35:5c:94:94:c0:75:c9:c9:e7:f8:38:a8:35:ea:
37:fb:20:62:c4:ca:7d:57:9e:86:e9:48:22:a5:5b:
dc:59:46:9e:aa:23:ec:df:96:11:77:9c:68:b9:ad:
37:96:ef:18:ee:8b:20:a1:ce:47:42:ca:60:3f:d5:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:73:D8:A3:ED:1F:55:E0:0E:B4:12:1F:7E:6D:E7:56:A7:54:C2
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/NGhz2KPtH1XgDrQSH35t51anVMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.74.0/24
109.245.96.0/21
109.245.112.0/21
109.245.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:31:bb:b4:9d:88:08:4c:9d:13:86:ec:4e:62:03:1a:bc:0b:
c2:2a:99:5a:f2:ff:ff:43:bd:30:70:36:3c:12:ce:2c:89:14:
c6:f5:6a:72:09:f0:cd:22:1b:d8:41:80:98:f8:7b:ec:0e:81:
5f:f5:66:86:c0:72:7f:4c:0d:8d:0f:b1:36:73:98:38:a5:f9:
e2:f1:df:04:8b:e2:85:48:91:e4:34:25:e8:4f:45:5a:97:14:
f0:76:e4:0d:81:fa:0b:08:4c:72:1b:9d:fa:b1:91:93:6b:5b:
5d:6e:4d:3e:72:56:1c:e1:d8:bf:78:ab:c3:b3:f8:71:3b:15:
89:76:35:93:8c:46:e5:c9:60:eb:19:da:4f:1f:34:13:d1:f8:
61:9c:21:de:e2:4e:03:7c:1d:d1:9e:ee:3d:71:3a:c7:07:1f:
57:a4:03:61:5d:4e:03:97:72:2f:18:61:99:e5:96:c1:a9:62:
0c:a4:51:3a:b5:67:eb:0c:91:26:0d:33:07:a3:12:45:e6:72:
88:19:9a:7a:8a:d2:c9:7d:7f:66:1d:cc:56:29:f4:54:82:db:
56:ee:ff:7b:a4:09:bd:2b:81:5e:86:b8:80:c0:a3:fc:ea:6a:
d2:ab:20:84:fd:6f:19:63:75:3a:fe:11:36:0f:a9:70:51:b0:
d4:43:82:fe
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZO7XDUK04snJZWI01pwQQXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzJmZTJjODA1ZWQ2M2FmYzljODllOTMyNGFjOTRkMzA5
MzlhYWIwHhcNMjQxMjEyMTQ1MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDY4NzNkOGEzZWQxZjU1ZTAwZWI0MTIxZjdlNmRlNzU2YTc1NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE76YufnC2DYvAEgTXbjrFeYfZ5B
AVUSxV/U5JmzNtfB9unpOhBJ2toPgClTL+sHwHBmq4Hs4PF7MdF2YFc5f3hIgfnk
eJByrwJJsz1AGd514oSWvJUa/1ot3mv3rMDAo1ftMo4RR7fy0BnaJVD8yKGgNUZH
lNDrctdKVQI8jJC+CFrRuJozu5AqocVf/cUOXx/msHbOycYq/TmUZJd8tHEyOItP
KKTSdrKaXMQGHM50delQokwXqrua9P/CdkX0YbQoNVyUlMB1ycnn+DioNeo3+yBi
xMp9V56G6UgipVvcWUaeqiPs35YRd5xoua03lu8Y7osgoc5HQspgP9V1UwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDRoc9ij7R9V4A60Eh9+bedWp1TCMB8GA1UdIwQY
MBaAFA1y/iyAXtY6/JyJ6TJKyU0wk5qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgt
Y2Y4MThjN2M0NTFhLzEvTkdoejJLUHRIMVhnRHJRU0gzNXQ1MWFuVk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgtY2Y4MThjN2M0NTFh
LzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbfVKAwQD
bfVgAwQDbfVwAwQEbfXAMA0GCSqGSIb3DQEBCwUAA4IBAQCjMbu0nYgITJ0ThuxO
YgMavAvCKpla8v//Q70wcDY8Es4siRTG9WpyCfDNIhvYQYCY+HvsDoFf9WaGwHJ/
TA2ND7E2c5g4pfni8d8Ei+KFSJHkNCXoT0ValxTwduQNgfoLCExyG536sZGTa1td
bk0+clYc4di/eKvDs/hxOxWJdjWTjEblyWDrGdpPHzQT0fhhnCHe4k4DfB3Rnu49
cTrHBx9XpANhXU4Dl3IvGGGZ5ZbBqWIMpFE6tWfrDJEmDTMHoxJF5nKIGZp6itLJ
fX9mHcxWKfRUgttW7v97pAm9K4FehriAwKP86mrSqyCE/W8ZY3U6/hE2D6lwUbDU
Q4L+
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net