Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/Ntn0KC9hNBdEOU4APTAFvwKoJWM.roa
File: Ntn0KC9hNBdEOU4APTAFvwKoJWM.roa (raw, json)
Hash identifier: Nm8YrLspYKdECPfNk4gMXsfWH7pa2i2J/txkaQvcJKs=
Subject key identifier: 36:D9:F4:28:2F:61:34:17:44:39:4E:00:3D:30:05:BF:02:A8:25:63
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019423D71E86971A5780D085EF2ACA40196F
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/Ntn0KC9hNBdEOU4APTAFvwKoJWM.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1e:86:97:1a:57:80:d0:85:ef:2a:ca:40:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36d9f4282f61341744394e003d3005bf02a82563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:ab:06:bd:2d:f2:98:99:e3:a0:7e:fe:ee:
b5:67:fd:3c:83:ef:92:3d:56:47:11:f8:af:b9:4e:
90:54:92:90:87:3b:a0:15:77:0f:df:5a:7f:5c:7d:
dd:9d:db:a1:a1:56:43:16:7a:87:78:cb:e5:33:69:
95:7a:f2:1e:66:1b:b1:73:6e:15:a9:e3:e9:bc:0a:
3b:40:f4:9f:3a:b0:cb:ac:e9:d4:94:44:cb:b6:7f:
ef:2e:91:13:26:66:4d:03:ae:31:99:75:19:36:e9:
17:13:c6:10:82:cd:7c:e5:45:b3:10:4b:d0:1d:3b:
4d:23:f7:96:e7:0b:28:04:fd:0c:13:a9:37:3d:c1:
22:0d:6d:20:f7:70:04:0b:7d:c3:ab:32:eb:0b:7c:
9e:52:69:9a:05:14:e8:f7:fd:af:30:2f:5e:f1:08:
8b:39:6e:92:03:25:bf:17:11:cb:8a:ba:a4:03:63:
78:cc:6b:ff:5b:ba:29:26:1c:f0:71:6a:57:92:43:
89:9c:f8:0f:f3:1f:42:af:ad:a5:3c:ba:70:10:c4:
57:16:f0:0b:ac:32:eb:a1:28:5a:d0:f6:52:83:b2:
78:6f:a6:cc:29:b6:42:21:36:04:04:6d:82:d3:b3:
ca:a9:af:cf:32:6b:f8:99:6a:5e:e8:fe:cd:eb:5b:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D9:F4:28:2F:61:34:17:44:39:4E:00:3D:30:05:BF:02:A8:25:63
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/Ntn0KC9hNBdEOU4APTAFvwKoJWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:53:bc:32:d8:5e:b2:61:db:7f:85:4a:15:a0:69:a1:c2:0e:
17:4d:00:21:df:7a:36:72:f1:c7:7f:e1:9b:39:4b:0f:e7:9d:
05:d8:6e:49:f0:55:5d:be:8b:79:f3:d1:bc:91:d4:c4:70:0f:
b8:b6:35:3c:c4:2d:22:e1:3b:18:1d:c6:50:dd:60:3c:6d:10:
5d:b2:e0:cf:f7:8b:c4:29:86:bc:c4:63:66:5c:0f:b3:5a:ad:
59:e4:04:9e:22:80:60:9a:de:eb:a8:91:7e:21:72:46:b1:ce:
89:00:82:fd:c6:02:ee:b8:07:66:2b:f1:ca:93:9b:aa:3a:7b:
36:42:2b:4b:16:c1:1d:f3:ff:70:d2:80:5e:eb:87:2e:a2:57:
6a:d1:f5:c8:9d:8d:d1:6f:53:2d:2a:a2:0d:47:56:d3:fe:bc:
fc:c6:3e:4e:87:fd:c6:8c:c4:9f:7d:de:d4:03:2b:19:d0:20:
b5:ce:a6:1f:59:f3:55:37:9a:24:f8:f7:41:6e:c2:b2:35:02:
07:19:3d:8a:0a:75:b7:b9:5b:f0:e6:70:76:86:86:2c:5c:97:
c3:1d:6e:e3:bb:1e:d9:2c:b7:63:25:df:21:05:9b:ff:51:46:
92:ce:de:c9:ef:eb:a0:bf:45:91:f3:2d:71:c9:20:85:38:b5:
5a:ee:ce:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1x6GlxpXgNCF7yrKQBlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjUwMTAxMjE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmQ5ZjQyODJmNjEzNDE3NDQzOTRlMDAzZDMwMDViZjAyYTgyNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsurBr0t8piZ46B+/u61Z/08g++S
PVZHEfivuU6QVJKQhzugFXcP31p/XH3dnduhoVZDFnqHeMvlM2mVevIeZhuxc24V
qePpvAo7QPSfOrDLrOnUlETLtn/vLpETJmZNA64xmXUZNukXE8YQgs185UWzEEvQ
HTtNI/eW5wsoBP0ME6k3PcEiDW0g93AEC33DqzLrC3yeUmmaBRTo9/2vMC9e8QiL
OW6SAyW/FxHLirqkA2N4zGv/W7opJhzwcWpXkkOJnPgP8x9Cr62lPLpwEMRXFvAL
rDLroSha0PZSg7J4b6bMKbZCITYEBG2C07PKqa/PMmv4mWpe6P7N61umqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDbZ9CgvYTQXRDlOAD0wBb8CqCVjMB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvTnRuMEtDOWhOQmRFT1U0QVBUQUZ2d0tvSldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIBMA0G
CSqGSIb3DQEBCwUAA4IBAQBNU7wy2F6yYdt/hUoVoGmhwg4XTQAh33o2cvHHf+Gb
OUsP550F2G5J8FVdvot589G8kdTEcA+4tjU8xC0i4TsYHcZQ3WA8bRBdsuDP94vE
KYa8xGNmXA+zWq1Z5ASeIoBgmt7rqJF+IXJGsc6JAIL9xgLuuAdmK/HKk5uqOns2
QitLFsEd8/9w0oBe64cuoldq0fXInY3Rb1MtKqINR1bT/rz8xj5Oh/3GjMSffd7U
AysZ0CC1zqYfWfNVN5ok+PdBbsKyNQIHGT2KCnW3uVvw5nB2hoYsXJfDHW7jux7Z
LLdjJd8hBZv/UUaSzt7J7+ugv0WR8y1xySCFOLVa7s5d
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:37 2025 by rpki-client