Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/Nli4Itve58eeaNE2UBTIjhCqMSA.roa
File: Nli4Itve58eeaNE2UBTIjhCqMSA.roa (raw, json)
Hash identifier: xuGc/R0+3aQbIoNlN6YitG2fRScQha1P6483IFtSc+k=
Subject key identifier: 36:58:B8:22:DB:DE:E7:C7:9E:68:D1:36:50:14:C8:8E:10:AA:31:20
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 018727F762115AE71022AF3DAC3E70CCC6D3
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/Nli4Itve58eeaNE2UBTIjhCqMSA.roa
Signing time: Tue 28 Mar 2023 11:25:36 +0000
ROA not before: Tue 28 Mar 2023 11:25:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.186.213.0/24 maxlen: 24
185.186.212.0/24 maxlen: 24
2a0b:8780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:f7:62:11:5a:e7:10:22:af:3d:ac:3e:70:cc:c6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Mar 28 11:25:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3658b822dbdee7c79e68d1365014c88e10aa3120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:6a:51:9f:3a:b4:b5:43:18:68:76:67:12:
41:f8:2c:63:df:2c:77:95:04:80:0c:52:34:9f:fd:
53:53:3c:14:fc:6c:57:9c:a5:57:0a:fc:23:b3:a3:
5c:e9:76:db:3f:f1:cd:40:06:4f:f5:20:6d:d2:ea:
a8:a7:bc:79:ca:07:04:50:e5:f9:b7:8e:42:89:e9:
ba:b7:33:ab:a7:3a:87:1b:88:bf:1d:14:28:28:b1:
56:46:59:20:ac:d8:ba:1e:8a:68:66:d9:f2:04:b3:
7a:46:f0:54:f9:a5:f5:10:aa:51:93:a3:62:db:e7:
75:66:07:58:6c:a3:34:71:91:a6:4c:db:df:c1:e9:
61:a5:2d:a0:31:56:70:3d:fc:75:4e:4d:60:08:f2:
1b:d2:40:67:9a:63:32:3f:fe:20:b2:03:c7:b2:33:
1d:cc:e2:9b:ad:86:27:d9:c0:5b:8d:95:31:b0:52:
0b:fc:33:a3:18:ad:44:9c:a6:48:d9:27:62:dd:18:
91:0c:7c:02:29:20:17:d1:3b:8d:e2:d7:4c:17:63:
d9:1e:8a:1d:63:8e:b7:71:04:20:c3:df:fe:56:57:
a7:4f:65:a3:70:70:0c:fb:6b:db:31:c7:55:c8:56:
5a:67:f4:61:30:75:70:e4:1d:06:43:50:98:be:11:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:B8:22:DB:DE:E7:C7:9E:68:D1:36:50:14:C8:8E:10:AA:31:20
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/Nli4Itve58eeaNE2UBTIjhCqMSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.212.0/23
IPv6:
2a0b:8780::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d0:0e:11:6b:c6:a7:ed:59:b1:b7:48:b5:9b:e0:ed:f1:f1:
5c:9c:66:39:6a:f0:d0:f5:7f:47:be:e4:3d:e0:61:5b:51:00:
0f:d0:19:13:61:23:28:eb:67:e4:df:cc:d5:ae:6e:5b:6a:99:
f6:02:b7:9a:98:8e:c2:38:b5:e1:88:ca:f0:22:ed:e1:6f:8d:
fb:38:28:35:03:07:5e:60:9a:19:eb:3a:49:6a:59:12:80:6e:
9f:a6:77:aa:76:df:2d:50:f2:a5:09:06:79:b5:3b:5a:80:60:
4a:4a:b9:14:25:54:2b:9e:ec:d6:4b:b8:01:c9:53:b3:4a:63:
8b:4a:4c:1c:d3:8b:40:e1:42:68:3d:ca:fd:2f:39:f7:a2:12:
af:85:2f:10:f6:22:78:ed:37:ae:6a:77:f1:c7:71:42:51:21:
75:89:3a:1b:a5:19:ac:69:f3:98:33:99:c1:c4:74:7e:f2:9d:
1f:58:85:95:08:a1:a4:ad:6d:1b:57:d1:21:f9:f9:96:bb:d7:
f1:11:47:cb:df:bf:00:ce:c0:c8:27:51:f4:9a:d2:9f:35:77:
99:20:66:c9:80:41:fd:39:fb:29:11:4b:6c:91:64:5d:18:06:
38:14:d7:64:3a:10:3d:52:28:fb:2e:a5:30:d0:4c:a8:0b:1e:
3f:9c:f7:35
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcn92IRWucQIq89rD5wzMbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx
MGRjYTMwHhcNMjMwMzI4MTEyNTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjU4YjgyMmRiZGVlN2M3OWU2OGQxMzY1MDE0Yzg4ZTEwYWEzMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EVqUZ86tLVDGGh2ZxJB+Cxj3yx3
lQSADFI0n/1TUzwU/GxXnKVXCvwjs6Nc6XbbP/HNQAZP9SBt0uqop7x5ygcEUOX5
t45Ciem6tzOrpzqHG4i/HRQoKLFWRlkgrNi6HopoZtnyBLN6RvBU+aX1EKpRk6Ni
2+d1ZgdYbKM0cZGmTNvfwelhpS2gMVZwPfx1Tk1gCPIb0kBnmmMyP/4gsgPHsjMd
zOKbrYYn2cBbjZUxsFIL/DOjGK1EnKZI2Sdi3RiRDHwCKSAX0TuN4tdMF2PZHood
Y463cQQgw9/+VlenT2WjcHAM+2vbMcdVyFZaZ/RhMHVw5B0GQ1CYvhGf1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDZYuCLb3ufHnmjRNlAUyI4QqjEgMB8GA1UdIwQY
MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt
ODY2N2ExMDEwMTQzLzEvTmxpNEl0dmU1OGVlYU5FMlVCVElqaENxTVNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz
LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBubrUMA8E
AgACMAkDBwAqC4eAAAAwDQYJKoZIhvcNAQELBQADggEBAIrQDhFrxqftWbG3SLWb
4O3x8VycZjlq8ND1f0e+5D3gYVtRAA/QGRNhIyjrZ+TfzNWubltqmfYCt5qYjsI4
teGIyvAi7eFvjfs4KDUDB15gmhnrOklqWRKAbp+md6p23y1Q8qUJBnm1O1qAYEpK
uRQlVCue7NZLuAHJU7NKY4tKTBzTi0DhQmg9yv0vOfeiEq+FLxD2InjtN65qd/HH
cUJRIXWJOhulGaxp85gzmcHEdH7ynR9YhZUIoaStbRtX0SH5+Za71/ERR8vfvwDO
wMgnUfSa0p81d5kgZsmAQf05+ykRS2yRZF0YBjgU12Q6ED1SKPsupTDQTKgLHj+c
9zU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:12 2025 by rpki-client