Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/NuC1DvR6dkAnmNkZTXn3GrNysHw.roa
File: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (raw, json)
Hash identifier: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=
Subject key identifier: 36:E0:B5:0E:F4:7A:76:40:27:98:D9:19:4D:79:F7:1A:B3:72:B0:7C
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 01941F8C3CE6EC29933EFD598F8D17D152FA
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/NuC1DvR6dkAnmNkZTXn3GrNysHw.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 91.188.192.0/22 maxlen: 24
217.68.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:e6:ec:29:93:3e:fd:59:8f:8d:17:d1:52:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36e0b50ef47a76402798d9194d79f71ab372b07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:9d:b3:3b:24:c3:9f:83:e0:82:f8:54:74:
6a:0c:46:ae:53:c7:9e:46:fc:f0:c7:de:80:bd:15:
a7:15:63:17:e5:3a:9c:cb:52:01:d1:a7:61:b6:32:
9d:b4:6f:2a:2c:2b:c0:02:fc:b1:ae:47:51:e4:ed:
05:ba:1b:85:99:f6:56:fd:e5:01:d1:c5:78:cc:d5:
46:41:ba:22:01:88:0e:a7:9d:53:59:96:4a:67:b3:
bb:87:a4:c7:74:f9:c0:58:d6:83:f5:46:31:f4:e0:
1f:eb:b9:fe:3b:5f:c5:a1:eb:57:3e:26:f5:0c:c0:
52:4d:23:d7:b2:24:f0:88:4f:7b:58:83:d0:27:73:
66:7c:89:db:c4:4a:22:35:50:a5:f6:59:da:75:35:
82:0a:29:09:3e:87:44:cd:0e:68:f7:5c:76:52:a5:
b4:c1:f6:9b:8d:ae:98:f3:44:42:1a:bf:d5:d7:8f:
81:d6:40:3e:13:a1:6b:73:24:08:68:7d:9f:9a:c7:
7b:b6:fe:ff:3d:f1:49:e9:2d:2e:d4:76:96:ad:91:
85:ce:a4:12:2c:28:1d:c2:e7:7c:bb:f9:d8:f4:bd:
ef:85:fb:a6:96:5d:de:90:6f:7d:0a:16:cd:49:bb:
64:46:11:c7:8d:54:28:98:fb:5f:22:b1:f0:9e:25:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:B5:0E:F4:7A:76:40:27:98:D9:19:4D:79:F7:1A:B3:72:B0:7C
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/NuC1DvR6dkAnmNkZTXn3GrNysHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.192.0/22
217.68.208.0/20
Signature Algorithm: sha256WithRSAEncryption
80:1d:a6:16:fd:7f:bf:0e:9d:0f:ba:45:88:50:28:dd:a5:95:
70:2b:62:42:a2:be:50:92:ba:42:21:a7:85:15:0c:ac:5a:c0:
08:48:b4:43:86:b0:40:f2:1c:41:3e:fc:bb:a3:15:30:b8:f4:
13:98:ab:d2:fa:aa:ef:14:c3:f6:84:6e:4c:78:88:9d:ed:2f:
98:e6:ce:9a:50:22:d7:bb:bc:ec:0a:f4:d3:5b:18:2c:bc:ad:
3c:4b:08:a6:18:e1:68:74:b2:25:aa:40:ee:50:6a:ff:23:34:
c4:e1:21:27:0b:f7:e4:50:e9:26:b4:af:2f:37:1d:a1:e4:11:
cf:6d:27:5c:85:9b:19:20:b2:8e:bc:43:71:bb:a8:5f:b9:d3:
37:65:5e:8d:29:65:2c:50:8c:73:ee:32:9c:c4:05:c9:0d:b8:
e4:0e:aa:2e:02:4a:95:88:bf:04:40:a6:a8:e2:1f:1c:d0:c9:
d6:3e:c1:44:02:ce:1d:fb:a4:58:77:ff:17:51:da:32:c3:0b:
dc:0d:9f:a2:aa:d7:82:73:48:e4:af:f8:59:c9:c1:d4:3d:e0:
c4:2a:a6:58:9e:dd:87:40:ce:2e:67:13:39:8b:e1:d7:40:36:
13:4e:07:a7:60:19:d7:7b:8a:a3:bc:39:90:fb:4a:61:4b:c4:
30:e9:87:78
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjDzm7CmTPv1Zj40X0VL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3
YWRjYWYwHhcNMjUwMTAxMDE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmUwYjUwZWY0N2E3NjQwMjc5OGQ5MTk0ZDc5ZjcxYWIzNzJiMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/Gdszskw5+D4IL4VHRqDEauU8ee
Rvzwx96AvRWnFWMX5Tqcy1IB0adhtjKdtG8qLCvAAvyxrkdR5O0FuhuFmfZW/eUB
0cV4zNVGQboiAYgOp51TWZZKZ7O7h6THdPnAWNaD9UYx9OAf67n+O1/FoetXPib1
DMBSTSPXsiTwiE97WIPQJ3NmfInbxEoiNVCl9lnadTWCCikJPodEzQ5o91x2UqW0
wfabja6Y80RCGr/V14+B1kA+E6FrcyQIaH2fmsd7tv7/PfFJ6S0u1HaWrZGFzqQS
LCgdwud8u/nY9L3vhfumll3ekG99ChbNSbtkRhHHjVQomPtfIrHwniU/+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDbgtQ70enZAJ5jZGU159xqzcrB8MB8GA1UdIwQY
MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt
ZjYwMDc0ODJmYTkzLzEvTnVDMUR2UjZka0FubU5rWlRYbjNHck55c0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz
LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW7zAAwQE
2UTQMA0GCSqGSIb3DQEBCwUAA4IBAQCAHaYW/X+/Dp0PukWIUCjdpZVwK2JCor5Q
krpCIaeFFQysWsAISLRDhrBA8hxBPvy7oxUwuPQTmKvS+qrvFMP2hG5MeIid7S+Y
5s6aUCLXu7zsCvTTWxgsvK08SwimGOFodLIlqkDuUGr/IzTE4SEnC/fkUOkmtK8v
Nx2h5BHPbSdchZsZILKOvENxu6hfudM3ZV6NKWUsUIxz7jKcxAXJDbjkDqouAkqV
iL8EQKao4h8c0MnWPsFEAs4d+6RYd/8XUdoywwvcDZ+iqteCc0jkr/hZycHUPeDE
KqZYnt2HQM4uZxM5i+HXQDYTTgenYBnXe4qjvDmQ+0phS8Qw6Yd4
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:47 2025 by rpki-client