Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/NKeE-RtZg8dSWJbr9za2AOyKokI.roa
File: NKeE-RtZg8dSWJbr9za2AOyKokI.roa (raw, json)
Hash identifier: 52C5m6UNlhjanKdSlJTGk7ftNWhKA9F99tdr+iwWVDY=
Subject key identifier: 34:A7:84:F9:1B:59:83:C7:52:58:96:EB:F7:36:B6:00:EC:8A:A2:42
Certificate issuer: /CN=975151222dc563076f931a41497eb87c6acfdfcd
Certificate serial: 01835A5E0B939A305197E83ABAB4D5DAC24E
Authority key identifier: 97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/NKeE-RtZg8dSWJbr9za2AOyKokI.roa
Signing time: Tue 20 Sep 2022 10:07:36 +0000
ROA not before: Tue 20 Sep 2022 10:07:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48345
IP address blocks: 185.168.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:5e:0b:93:9a:30:51:97:e8:3a:ba:b4:d5:da:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975151222dc563076f931a41497eb87c6acfdfcd
Validity
Not Before: Sep 20 10:07:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34a784f91b5983c7525896ebf736b600ec8aa242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:9b:02:36:19:38:1a:51:13:a2:8c:e2:b1:
63:3e:e5:ca:72:49:42:88:aa:c5:6c:e0:0a:ef:94:
bb:93:5f:c9:8f:eb:4b:07:02:9e:62:15:0d:dc:a7:
1f:98:5b:f7:86:33:7e:9a:04:75:f4:a9:3a:6d:65:
32:57:ae:f0:ef:6b:60:dc:a4:7b:00:96:2d:87:73:
c8:1e:ea:43:fd:e7:bc:31:12:7d:66:51:c5:55:24:
03:48:8b:20:bd:9b:f4:58:7f:31:cf:41:a5:b4:fc:
95:26:cd:61:b9:2b:d8:b7:36:d9:7d:95:0a:94:d6:
4f:1f:d2:a1:df:d8:66:ba:ea:88:73:8c:83:91:31:
40:b0:42:b7:f9:96:4f:f0:e5:85:d2:10:8c:2b:c9:
3b:c9:c7:64:13:08:d0:5a:b9:1c:bc:76:a3:3c:ef:
29:a8:d2:f0:9a:48:fd:73:f6:9d:75:e4:1f:64:86:
24:98:20:54:b2:02:c3:0f:27:2a:99:39:fb:cd:3c:
65:73:83:d7:0a:2b:8a:6e:f7:0d:f0:e1:10:ea:54:
9c:b6:17:1a:37:25:b8:25:b0:ca:25:06:f6:d6:bc:
cc:0a:65:7d:ec:35:ca:2a:42:6a:f3:93:a3:82:6c:
9c:87:bd:2e:b0:a8:07:f0:be:36:90:82:af:10:75:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A7:84:F9:1B:59:83:C7:52:58:96:EB:F7:36:B6:00:EC:8A:A2:42
X509v3 Authority Key Identifier:
keyid:97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/NKeE-RtZg8dSWJbr9za2AOyKokI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:43:57:03:56:6a:a4:79:90:7f:44:10:26:5d:1e:5d:87:47:
60:c4:f9:95:d5:3e:b2:fe:df:38:2c:36:17:2b:c3:71:b1:af:
77:10:28:e0:db:5a:35:44:1d:72:5b:42:3e:84:77:f7:8b:f5:
a1:b3:e5:a9:64:d6:27:35:db:32:76:04:a5:c6:81:ad:82:f3:
18:08:df:3c:a0:07:04:7e:42:2a:c4:70:f3:eb:65:21:a9:44:
aa:a6:6b:89:62:00:57:98:30:f8:62:9d:c3:3e:06:a2:bf:8c:
45:ab:08:b3:41:c0:64:f3:3d:eb:4d:5c:6c:a8:ea:b1:fa:b6:
23:c1:b1:ad:2b:a8:71:6a:92:6d:fa:61:ed:1e:f2:1d:24:3c:
9c:c8:c7:46:97:bd:6c:9a:c6:ff:d0:a9:a0:36:09:95:05:ae:
50:8c:eb:f6:8d:e9:53:0b:9e:8a:67:75:5c:53:61:81:4f:05:
0a:ef:7a:4c:93:0e:fe:5f:33:5c:54:5e:f1:c6:f5:13:08:d5:
13:0f:af:e1:5f:45:d8:f6:eb:41:54:1a:51:e7:96:c0:ee:1c:
63:4d:24:f9:cc:1f:be:1b:17:78:35:21:ca:5f:29:1b:33:2f:
80:f5:cc:ab:05:72:8d:80:d8:40:53:7c:9a:1d:52:17:61:c7:
1f:08:79:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNaXguTmjBRl+g6urTV2sJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTE1MTIyMmRjNTYzMDc2ZjkzMWE0MTQ5N2ViODdjNmFj
ZmRmY2QwHhcNMjIwOTIwMTAwNzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGE3ODRmOTFiNTk4M2M3NTI1ODk2ZWJmNzM2YjYwMGVjOGFhMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV+bAjYZOBpRE6KM4rFjPuXKcklC
iKrFbOAK75S7k1/Jj+tLBwKeYhUN3KcfmFv3hjN+mgR19Kk6bWUyV67w72tg3KR7
AJYth3PIHupD/ee8MRJ9ZlHFVSQDSIsgvZv0WH8xz0GltPyVJs1huSvYtzbZfZUK
lNZPH9Kh39hmuuqIc4yDkTFAsEK3+ZZP8OWF0hCMK8k7ycdkEwjQWrkcvHajPO8p
qNLwmkj9c/addeQfZIYkmCBUsgLDDycqmTn7zTxlc4PXCiuKbvcN8OEQ6lScthca
NyW4JbDKJQb21rzMCmV97DXKKkJq85Ojgmych70usKgH8L42kIKvEHXFCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDSnhPkbWYPHUliW6/c2tgDsiqJCMB8GA1UdIwQY
MBaAFJdRUSItxWMHb5MaQUl+uHxqz9/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFGUklpM0ZZd2R2a3hwQlNYNjRmR3JQMzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNTVmYWQtMjJlZS00YWFkLTliYzYt
MTQ1MmMwMTgxZWIzLzEvTktlRS1SdFpnOGRTV0picjl6YTJBT3lLb2tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNTVmYWQtMjJlZS00YWFkLTliYzYtMTQ1MmMwMTgxZWIz
LzEvbDFGUklpM0ZZd2R2a3hwQlNYNjRmR3JQMzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaipMA0G
CSqGSIb3DQEBCwUAA4IBAQBqQ1cDVmqkeZB/RBAmXR5dh0dgxPmV1T6y/t84LDYX
K8Nxsa93ECjg21o1RB1yW0I+hHf3i/Whs+WpZNYnNdsydgSlxoGtgvMYCN88oAcE
fkIqxHDz62UhqUSqpmuJYgBXmDD4Yp3DPgaiv4xFqwizQcBk8z3rTVxsqOqx+rYj
wbGtK6hxapJt+mHtHvIdJDycyMdGl71smsb/0KmgNgmVBa5QjOv2jelTC56KZ3Vc
U2GBTwUK73pMkw7+XzNcVF7xxvUTCNUTD6/hX0XY9utBVBpR55bA7hxjTST5zB++
Gxd4NSHKXykbMy+A9cyrBXKNgNhAU3yaHVIXYccfCHls
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org