Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/NqXCTZLTQXiSirfU-JwehZTKoUo.roa
File: NqXCTZLTQXiSirfU-JwehZTKoUo.roa (raw, json)
Hash identifier: Kn4cS2F4vXs96yjsH3h7V2HudZgt+xsxLImjfAfogvQ=
Subject key identifier: 36:A5:C2:4D:92:D3:41:78:92:8A:B7:D4:F8:9C:1E:85:94:CA:A1:4A
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B244601BCA18299D286E412C2BFC48
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/NqXCTZLTQXiSirfU-JwehZTKoUo.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213776
IP address blocks: 92.119.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:44:60:1b:ca:18:29:9d:28:6e:41:2c:2b:fc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36a5c24d92d34178928ab7d4f89c1e8594caa14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:95:21:5d:fe:1d:85:da:b3:86:43:fd:3e:
08:37:4e:d8:92:be:ed:24:36:85:77:03:42:fd:a6:
42:02:08:82:6b:bf:5b:f5:82:ed:c6:e2:75:30:83:
7c:ea:75:35:33:5a:3d:ef:c4:19:c9:91:00:62:fa:
58:46:aa:4d:55:5f:bd:11:3d:e7:34:30:54:bd:2f:
3e:27:ec:fb:0f:28:68:e0:61:57:5c:e2:0a:76:85:
57:31:33:47:39:87:28:0f:e7:f6:2c:41:a1:00:77:
29:e9:50:b1:09:ff:35:f7:e6:42:a0:42:17:89:5c:
fd:80:06:74:69:aa:bd:e8:0b:71:d2:e0:02:4f:02:
b7:29:f3:07:1a:4b:05:e1:90:b2:9f:72:10:32:c5:
3f:97:49:9e:9a:a3:14:4c:23:0e:65:41:cc:17:88:
e3:5d:59:bb:e6:b9:ed:53:bb:31:53:f2:8f:6a:08:
ea:ac:30:50:8f:39:ec:ad:de:a8:b8:80:f3:5f:70:
8a:a7:ba:d1:39:43:82:2b:34:3f:32:f4:cd:76:1b:
99:4b:1b:90:16:1f:8f:eb:cc:aa:3d:70:e5:03:9d:
0d:df:3b:24:fd:81:28:71:d0:51:e7:1e:3a:a0:44:
3f:6f:fc:94:5b:f8:bd:d3:4c:38:84:41:c8:e9:ee:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:C2:4D:92:D3:41:78:92:8A:B7:D4:F8:9C:1E:85:94:CA:A1:4A
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/NqXCTZLTQXiSirfU-JwehZTKoUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ae:13:15:ae:69:ad:a3:f4:ea:bc:02:b9:59:4e:9c:8e:73:
a0:53:fc:d6:e7:db:9b:f9:97:15:4c:83:69:19:84:82:f5:a3:
07:12:76:0f:c2:5a:38:04:69:f0:9e:e9:f1:97:ac:a5:36:87:
e9:2b:05:c9:1e:33:a0:ce:93:1b:0e:c4:68:96:48:cb:72:3e:
63:04:2f:a3:f4:b9:7a:0e:20:fc:56:be:fd:47:d0:8b:48:b1:
fc:fd:b8:05:f8:a4:f2:cc:9e:aa:d9:79:47:14:6e:f6:83:0e:
29:cf:a8:f6:2a:be:82:fc:da:9f:c1:f3:67:3e:a8:26:82:03:
fe:7a:4a:4e:82:1e:68:34:df:9c:bd:a4:ce:8a:db:2d:59:bd:
c3:d4:cc:a6:9d:95:8a:5e:c9:80:1a:bc:76:16:82:8e:60:92:
6f:3e:54:d8:a5:d2:e5:6d:f4:38:6a:b6:08:be:f8:26:12:4f:
9b:08:86:8b:98:97:14:8b:9f:67:cd:f2:79:7e:e0:6e:39:20:
13:27:f7:9b:46:8e:96:cc:7e:b4:bb:fc:16:74:b4:07:96:44:
71:45:3a:08:eb:8e:b6:ce:4c:a7:ce:8e:ca:ff:55:7e:6b:30:
03:d0:79:df:b1:0d:2e:27:b7:08:d7:77:7e:1c:fd:4b:9f:7f:
ac:62:8b:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhskRgG8oYKZ0obkEsK/xIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwMTAxMTE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmE1YzI0ZDkyZDM0MTc4OTI4YWI3ZDRmODljMWU4NTk0Y2FhMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB+VIV3+HYXas4ZD/T4IN07Ykr7t
JDaFdwNC/aZCAgiCa79b9YLtxuJ1MIN86nU1M1o978QZyZEAYvpYRqpNVV+9ET3n
NDBUvS8+J+z7Dyho4GFXXOIKdoVXMTNHOYcoD+f2LEGhAHcp6VCxCf819+ZCoEIX
iVz9gAZ0aaq96Atx0uACTwK3KfMHGksF4ZCyn3IQMsU/l0memqMUTCMOZUHMF4jj
XVm75rntU7sxU/KPagjqrDBQjznsrd6ouIDzX3CKp7rROUOCKzQ/MvTNdhuZSxuQ
Fh+P68yqPXDlA50N3zsk/YEocdBR5x46oEQ/b/yUW/i900w4hEHI6e7UawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDalwk2S00F4koq31PicHoWUyqFKMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvTnFYQ1RaTFRRWGlTaXJmVS1Kd2VoWlRLb1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHe5MA0G
CSqGSIb3DQEBCwUAA4IBAQB9rhMVrmmto/TqvAK5WU6cjnOgU/zW59ub+ZcVTINp
GYSC9aMHEnYPwlo4BGnwnunxl6ylNofpKwXJHjOgzpMbDsRolkjLcj5jBC+j9Ll6
DiD8Vr79R9CLSLH8/bgF+KTyzJ6q2XlHFG72gw4pz6j2Kr6C/NqfwfNnPqgmggP+
ekpOgh5oNN+cvaTOitstWb3D1MymnZWKXsmAGrx2FoKOYJJvPlTYpdLlbfQ4arYI
vvgmEk+bCIaLmJcUi59nzfJ5fuBuOSATJ/ebRo6WzH60u/wWdLQHlkRxRToI6462
zkynzo7K/1V+azAD0HnfsQ0uJ7cI13d+HP1Ln3+sYosU
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:30 2025 by rpki-client