Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/nT9Kl7qa4avyYi6PobndNFEx2JI.roa
File: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (raw, json)
Hash identifier: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=
Subject key identifier: 9D:3F:4A:97:BA:9A:E1:AB:F2:62:2E:8F:A1:B9:DD:34:51:31:D8:92
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019423D6F3E32AA77873E84B61513655D113
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/nT9Kl7qa4avyYi6PobndNFEx2JI.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 95.178.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f3:e3:2a:a7:78:73:e8:4b:61:51:36:55:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d3f4a97ba9ae1abf2622e8fa1b9dd345131d892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:22:ad:8e:c0:a6:0e:01:09:bc:f0:1f:93:
4a:dd:ed:f0:3f:d7:4c:52:49:da:0a:86:76:fe:7b:
0a:e8:73:4d:27:d3:75:60:c6:06:7a:61:9f:ac:38:
bd:b0:18:9f:7e:5a:d6:aa:1a:a1:ce:9a:94:ee:5b:
6c:f3:a9:63:8a:67:21:dc:b4:e5:00:4a:dd:71:7c:
56:2e:1b:9c:6c:09:d2:6a:bf:bb:9f:4e:9d:e3:43:
58:5a:cc:21:e4:16:7f:61:fc:d4:49:fd:67:3c:0e:
b0:bc:cf:71:1e:3a:e5:d1:98:6c:fb:87:76:c4:0b:
70:95:f7:a1:00:48:3b:bf:bb:72:96:53:bf:b2:59:
ad:64:e9:42:1c:10:32:50:48:ea:47:25:b9:48:f8:
45:10:c1:19:3c:68:01:8f:37:1f:54:53:cf:97:28:
b2:92:a2:23:60:d2:b2:24:5e:dd:01:7b:db:95:bb:
de:b1:fc:a0:97:74:7b:88:06:c3:cc:7c:91:54:a1:
52:c9:c9:5d:f5:5c:14:06:65:c5:4b:c8:de:a1:03:
67:18:00:a9:04:0e:75:6a:e0:07:12:07:02:50:77:
0e:a5:f2:4f:02:45:fe:fc:31:a2:d4:e9:a3:81:9f:
ef:1f:60:78:d5:9f:48:8c:28:9f:01:20:a1:ad:a0:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:4A:97:BA:9A:E1:AB:F2:62:2E:8F:A1:B9:DD:34:51:31:D8:92
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/nT9Kl7qa4avyYi6PobndNFEx2JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.106.0/24
Signature Algorithm: sha256WithRSAEncryption
79:da:3f:00:1b:c0:2c:55:91:8d:2f:2a:2a:f9:ea:a2:81:e7:
23:05:f6:8e:9a:c3:61:30:d1:56:d0:21:92:cf:76:c9:c9:db:
80:f2:27:66:8c:07:e1:4f:cd:5e:b8:85:4c:d4:24:69:b4:b0:
60:89:c4:8f:e3:b1:f4:5f:ed:3a:9c:b7:04:29:68:f5:de:26:
40:eb:b4:71:6c:b0:e0:b8:1b:32:63:18:52:4f:38:06:19:c7:
c7:fd:ea:cd:f8:f1:99:15:e9:aa:76:4f:a2:be:15:1a:43:92:
f6:cf:0e:f7:fe:00:7c:77:49:7b:99:3b:69:a1:58:29:d4:e8:
55:14:57:fc:8d:34:86:cf:d8:ae:6e:8d:8b:bd:92:57:b0:d1:
9e:71:08:dd:2f:00:3e:ec:0a:dc:7f:38:a0:7f:d4:4a:92:96:
66:c7:45:b0:4e:61:f4:f5:d1:71:11:5b:db:09:22:82:ef:af:
a1:19:57:b6:19:d7:a5:0d:ff:b4:6c:c9:90:1b:1b:f1:50:5d:
4e:43:e8:0e:bf:b3:fc:91:1c:6f:10:4d:28:aa:ed:53:23:01:
f4:85:2b:4c:3b:60:f5:7d:98:90:52:c3:e1:47:a5:ae:27:06:
42:9c:f4:a3:ed:86:3c:75:ec:db:f5:d9:dc:0c:0a:59:e0:87:
af:2f:cc:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1vPjKqd4c+hLYVE2VdETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjUwMTAxMjE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDNmNGE5N2JhOWFlMWFiZjI2MjJlOGZhMWI5ZGQzNDUxMzFkODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLwirY7Apg4BCbzwH5NK3e3wP9dM
UknaCoZ2/nsK6HNNJ9N1YMYGemGfrDi9sBifflrWqhqhzpqU7lts86ljimch3LTl
AErdcXxWLhucbAnSar+7n06d40NYWswh5BZ/YfzUSf1nPA6wvM9xHjrl0Zhs+4d2
xAtwlfehAEg7v7tyllO/slmtZOlCHBAyUEjqRyW5SPhFEMEZPGgBjzcfVFPPlyiy
kqIjYNKyJF7dAXvblbvesfygl3R7iAbDzHyRVKFSycld9VwUBmXFS8jeoQNnGACp
BA51auAHEgcCUHcOpfJPAkX+/DGi1OmjgZ/vH2B41Z9IjCifASChraB5/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ0/Spe6muGr8mIuj6G53TRRMdiSMB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvblQ5S2w3cWE0YXZ5WWk2UG9ibmRORkV4MkpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7JqMA0G
CSqGSIb3DQEBCwUAA4IBAQB52j8AG8AsVZGNLyoq+eqigecjBfaOmsNhMNFW0CGS
z3bJyduA8idmjAfhT81euIVM1CRptLBgicSP47H0X+06nLcEKWj13iZA67RxbLDg
uBsyYxhSTzgGGcfH/erN+PGZFemqdk+ivhUaQ5L2zw73/gB8d0l7mTtpoVgp1OhV
FFf8jTSGz9iubo2LvZJXsNGecQjdLwA+7Arcfzigf9RKkpZmx0WwTmH09dFxEVvb
CSKC76+hGVe2GdelDf+0bMmQGxvxUF1OQ+gOv7P8kRxvEE0oqu1TIwH0hStMO2D1
fZiQUsPhR6WuJwZCnPSj7YY8dezb9dncDApZ4IevL8xA
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:42 2025 by rpki-client