Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/nFyZh5x08lIz1JqhlP26fbzVfb0.roa
File: nFyZh5x08lIz1JqhlP26fbzVfb0.roa (raw, json)
Hash identifier: QQhMNmFLQU4RqfQz/4LypnupJTRIGeWGcOivoM9k/tw=
Subject key identifier: 9C:5C:99:87:9C:74:F2:52:33:D4:9A:A1:94:FD:BA:7D:BC:D5:7D:BD
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019424458E23875D0768057E1FB7ED1AD89D
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/nFyZh5x08lIz1JqhlP26fbzVfb0.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61347
IP address blocks: 213.226.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8e:23:87:5d:07:68:05:7e:1f:b7:ed:1a:d8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c5c99879c74f25233d49aa194fdba7dbcd57dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:77:11:27:22:78:09:8b:2b:3f:97:05:3c:
fc:c0:23:8a:f6:dd:1e:33:dd:e0:20:d9:6f:cb:08:
aa:a3:ee:63:fc:d4:14:c9:c9:83:b4:be:ff:32:78:
3b:84:95:0c:e0:8b:98:08:e9:00:e2:7f:20:65:45:
69:65:96:85:07:f7:cc:56:b7:30:cc:89:a7:55:42:
39:ed:05:4f:4d:7d:0f:14:06:bf:16:f3:bc:a9:d4:
bf:b9:be:42:a6:0a:98:cf:4f:a7:ca:d5:39:9b:55:
62:f4:74:53:cd:9a:e9:aa:2f:cc:26:6b:1a:70:0d:
97:dd:0c:63:d4:33:fc:8c:4c:fc:83:1e:22:1b:9e:
0a:d9:1a:a3:16:09:12:5e:4c:55:56:2e:33:6c:fc:
22:10:58:86:ba:f3:94:64:e5:bf:92:13:9a:34:e4:
a5:ae:51:cc:a5:70:7c:21:dd:da:8c:95:04:da:16:
26:81:c5:0f:c1:9a:1d:30:c9:af:24:fe:19:10:29:
e3:9e:71:ca:a3:7d:90:3d:71:13:9e:45:28:4e:f2:
a8:c2:14:cd:66:1e:7c:d8:ca:ab:4a:d9:1b:95:d9:
8d:b7:04:12:9c:ce:ae:46:46:e3:53:04:e2:87:9a:
7b:2e:e3:26:3a:69:0f:00:e1:7c:30:c2:56:b6:bb:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:99:87:9C:74:F2:52:33:D4:9A:A1:94:FD:BA:7D:BC:D5:7D:BD
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/nFyZh5x08lIz1JqhlP26fbzVfb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:80:67:92:7e:d2:0e:c6:52:98:82:e1:3f:e5:32:17:1a:b4:
d2:c1:93:6c:4c:7c:3b:8b:15:ac:98:41:7f:39:2a:74:30:14:
5e:bf:38:83:8d:1c:07:83:aa:45:9d:78:05:02:8a:a3:eb:ab:
92:07:71:64:95:27:96:4c:68:7d:f2:2e:7a:3d:1e:35:49:94:
3c:b9:aa:63:6f:23:cf:b8:27:1f:8d:da:98:7a:94:2c:d6:24:
1f:3d:11:08:7e:8d:17:a6:77:7b:d5:7d:d9:5c:09:06:89:bc:
2c:13:37:32:34:0d:d5:b5:7f:e2:5b:05:b5:eb:af:d5:48:b7:
1c:0a:ed:cd:a8:fc:e0:70:04:2e:da:b9:6c:67:72:a5:e8:bb:
62:8f:e3:de:7a:12:8a:70:6b:b7:c3:70:64:5c:59:d5:f3:0d:
03:f9:1b:41:bc:24:30:c8:10:12:32:2b:f7:ec:d3:0d:92:d6:
5a:72:6d:8d:14:b4:15:0e:81:a8:71:2b:d1:b0:b6:fd:33:2b:
61:63:a2:b8:cb:8d:d7:44:36:51:55:28:3a:4c:51:1e:63:4a:
23:a2:fa:25:05:98:b3:82:75:16:c5:a1:62:85:eb:92:82:64:
1b:53:6f:64:69:67:7f:20:67:07:2b:e6:15:4f:20:f6:20:83:
8b:19:5b:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRY4jh10HaAV+H7ftGtidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjUwMTAxMjM0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzVjOTk4NzljNzRmMjUyMzNkNDlhYTE5NGZkYmE3ZGJjZDU3ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQh3EScieAmLKz+XBTz8wCOK9t0e
M93gINlvywiqo+5j/NQUycmDtL7/Mng7hJUM4IuYCOkA4n8gZUVpZZaFB/fMVrcw
zImnVUI57QVPTX0PFAa/FvO8qdS/ub5CpgqYz0+nytU5m1Vi9HRTzZrpqi/MJmsa
cA2X3Qxj1DP8jEz8gx4iG54K2RqjFgkSXkxVVi4zbPwiEFiGuvOUZOW/khOaNOSl
rlHMpXB8Id3ajJUE2hYmgcUPwZodMMmvJP4ZECnjnnHKo32QPXETnkUoTvKowhTN
Zh582MqrStkbldmNtwQSnM6uRkbjUwTih5p7LuMmOmkPAOF8MMJWtrvb2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxcmYecdPJSM9SaoZT9un281X29MB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEvbkZ5Wmg1eDA4bEl6MUpxaGxQMjZmYnpWZmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1eJ0MA0G
CSqGSIb3DQEBCwUAA4IBAQCOgGeSftIOxlKYguE/5TIXGrTSwZNsTHw7ixWsmEF/
OSp0MBRevziDjRwHg6pFnXgFAoqj66uSB3FklSeWTGh98i56PR41SZQ8uapjbyPP
uCcfjdqYepQs1iQfPREIfo0Xpnd71X3ZXAkGibwsEzcyNA3VtX/iWwW166/VSLcc
Cu3NqPzgcAQu2rlsZ3Kl6Ltij+PeehKKcGu3w3BkXFnV8w0D+RtBvCQwyBASMiv3
7NMNktZacm2NFLQVDoGocSvRsLb9MythY6K4y43XRDZRVSg6TFEeY0ojovolBZiz
gnUWxaFiheuSgmQbU29kaWd/IGcHK+YVTyD2IIOLGVs4
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:33 2025 by rpki-client