Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/NQRi_N70iufGcnKVNY0wwsCjteM.roa
File: NQRi_N70iufGcnKVNY0wwsCjteM.roa (raw, json)
Hash identifier: QYNN8/FnWPxzKyrnP4y2CoHOJyBcKROavAd6jqt91B4=
Subject key identifier: 35:04:62:FC:DE:F4:8A:E7:C6:72:72:95:35:8D:30:C2:C0:A3:B5:E3
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0190FA7B542585C251284C297D4D4BAB0EA9
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/NQRi_N70iufGcnKVNY0wwsCjteM.roa
Signing time: Sun 28 Jul 2024 17:55:04 +0000
ROA not before: Sun 28 Jul 2024 17:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198990
IP address blocks: 89.28.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:7b:54:25:85:c2:51:28:4c:29:7d:4d:4b:ab:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jul 28 17:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=350462fcdef48ae7c6727295358d30c2c0a3b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:d8:56:47:30:5b:60:00:41:d7:cf:df:61:
1a:3c:e9:36:6e:b3:4b:e8:40:41:1a:23:19:a8:b0:
1b:29:91:86:39:53:f6:f9:5a:ad:01:4b:39:7e:37:
4f:b5:30:98:17:83:1d:13:09:39:9a:17:a1:34:8d:
17:37:1c:dc:73:0f:b3:2b:c0:25:0f:b1:72:c8:2c:
7a:35:b2:6e:69:95:c3:94:a6:34:05:66:64:b6:7f:
bc:31:a0:c7:c4:aa:9b:ea:4a:d8:d4:45:fe:c8:75:
d7:b9:c5:e3:7c:ff:01:15:24:29:5d:6f:0e:ff:f3:
c8:ea:0c:17:24:a6:73:58:7c:74:be:b6:5f:e5:f7:
8e:8e:f0:ee:09:d6:09:99:07:b8:62:47:6c:70:74:
fd:34:a1:20:b4:9b:5e:7f:1f:bd:fb:b9:a0:4b:c9:
e4:ee:90:c2:4c:a3:00:d3:29:02:80:c5:d6:26:49:
b7:da:4f:e3:50:98:de:85:f8:ce:92:0f:58:2a:53:
ef:18:40:4d:31:01:5d:6d:34:2a:1c:ab:91:1a:25:
62:d8:99:97:a4:33:8a:ef:69:da:1c:04:a8:ea:9a:
8d:e7:d5:e9:72:4d:84:81:30:d5:c8:d3:3f:c0:c0:
e0:6e:f0:51:dc:1c:b9:21:41:27:65:30:9b:2f:d3:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:62:FC:DE:F4:8A:E7:C6:72:72:95:35:8D:30:C2:C0:A3:B5:E3
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/NQRi_N70iufGcnKVNY0wwsCjteM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d1:71:46:b8:bc:78:ef:49:4d:f2:38:83:59:9a:5b:56:6a:
47:47:85:e5:99:bf:18:e8:36:53:a9:24:94:7e:6b:b3:9b:40:
4a:67:2a:e8:3f:b2:db:31:c4:5a:fb:fa:2d:0e:c8:bc:5f:a6:
26:bf:7c:bb:0c:bc:84:9d:3d:c4:1e:d9:03:89:b8:5d:41:f6:
28:dc:60:02:f0:1e:9c:89:e4:d3:ad:ac:a5:41:d5:b0:72:ac:
8e:be:dd:10:27:8f:8c:d1:48:3f:6a:2c:5c:a1:91:52:b0:fc:
83:05:f2:d8:7a:58:07:64:66:a0:c4:a0:df:ab:f2:54:6d:27:
4c:15:bd:59:18:b7:b9:8b:34:b9:d7:a0:e8:e2:a5:6d:18:d3:
cd:58:4f:ab:7a:bb:21:8b:0f:67:27:1b:52:73:9b:3b:e7:17:
38:c9:dd:df:fe:40:90:b2:eb:05:3f:e2:dd:b5:a7:b5:6a:a6:
77:58:77:88:ce:1a:b0:70:88:51:ef:b1:d0:47:d4:c1:1d:b5:
4d:66:92:ee:4a:55:74:6e:62:2f:6f:10:58:9e:5e:c1:ff:91:
56:82:1a:78:88:da:93:7d:44:c6:f4:03:a0:f9:fb:20:c6:81:
22:f7:27:df:57:16:0a:5e:a2:b1:a8:a4:0d:39:df:36:66:0f:
90:5f:d7:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZD6e1QlhcJRKEwpfU1Lqw6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwNzI4MTc1NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTA0NjJmY2RlZjQ4YWU3YzY3MjcyOTUzNThkMzBjMmMwYTNiNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIrYVkcwW2AAQdfP32EaPOk2brNL
6EBBGiMZqLAbKZGGOVP2+VqtAUs5fjdPtTCYF4MdEwk5mhehNI0XNxzccw+zK8Al
D7FyyCx6NbJuaZXDlKY0BWZktn+8MaDHxKqb6krY1EX+yHXXucXjfP8BFSQpXW8O
//PI6gwXJKZzWHx0vrZf5feOjvDuCdYJmQe4YkdscHT9NKEgtJtefx+9+7mgS8nk
7pDCTKMA0ykCgMXWJkm32k/jUJjehfjOkg9YKlPvGEBNMQFdbTQqHKuRGiVi2JmX
pDOK72naHASo6pqN59Xpck2EgTDVyNM/wMDgbvBR3By5IUEnZTCbL9OSZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUEYvze9IrnxnJylTWNMMLAo7XjMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvTlFSaV9ONzBpdWZHY25LVk5ZMHd3c0NqdGVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRztMA0G
CSqGSIb3DQEBCwUAA4IBAQCO0XFGuLx470lN8jiDWZpbVmpHR4Xlmb8Y6DZTqSSU
fmuzm0BKZyroP7LbMcRa+/otDsi8X6Ymv3y7DLyEnT3EHtkDibhdQfYo3GAC8B6c
ieTTraylQdWwcqyOvt0QJ4+M0Ug/aixcoZFSsPyDBfLYelgHZGagxKDfq/JUbSdM
Fb1ZGLe5izS516Do4qVtGNPNWE+rershiw9nJxtSc5s75xc4yd3f/kCQsusFP+Ld
tae1aqZ3WHeIzhqwcIhR77HQR9TBHbVNZpLuSlV0bmIvbxBYnl7B/5FWghp4iNqT
fUTG9AOg+fsgxoEi9yffVxYKXqKxqKQNOd82Zg+QX9fO
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:49 2025 by rpki-client