Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/NyMZjnNDLzk4QUehVPzVYOHMpC4.roa
File: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (raw, json)
Hash identifier: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=
Subject key identifier: 37:23:19:8E:73:43:2F:39:38:41:47:A1:54:FC:D5:60:E1:CC:A4:2E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BAF4DCC8C370D5C092884ECAF4FD2
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/NyMZjnNDLzk4QUehVPzVYOHMpC4.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 5.104.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:af:4d:cc:8c:37:0d:5c:09:28:84:ec:af:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3723198e73432f39384147a154fcd560e1cca42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:68:47:cc:04:26:11:19:62:9b:b5:df:a4:
01:8e:cf:32:a2:c2:47:86:d0:eb:ab:f4:60:75:f2:
5b:f6:ff:67:a9:7e:0b:e4:95:d2:23:20:4e:18:c5:
82:24:57:f7:67:da:88:d9:77:34:ba:35:4b:d9:3d:
5d:83:da:69:ed:fa:39:c3:73:e8:bc:6e:ad:f1:be:
12:fb:6b:d2:0b:67:a4:cd:68:d4:b9:4d:1e:fd:60:
4e:b4:b6:a0:31:b4:80:ac:0d:cd:ca:c6:ab:a3:0e:
72:be:a4:aa:4e:a2:cc:02:7b:ce:87:f6:6e:78:7b:
ba:1d:e8:6d:8f:e3:19:c7:ba:39:c1:b5:1d:26:39:
e7:a0:6a:f9:24:a5:e7:62:64:d1:bf:ae:bd:dd:c9:
ce:1f:e8:90:48:6f:7c:e3:f8:9b:d2:58:ee:86:38:
99:47:cb:62:e6:ab:0d:b9:18:f9:cd:fb:53:cc:7a:
f9:05:03:36:03:c8:95:ce:01:af:3c:90:cd:dd:77:
3d:5b:ac:d1:45:c5:9f:7c:83:04:c0:c7:5f:1e:9a:
e7:b9:80:cd:8c:be:f8:2b:f4:d7:b1:e7:2e:15:20:
82:ef:f3:98:36:c7:a9:7e:63:6f:06:98:92:83:9a:
27:11:aa:5b:cc:8f:e5:f3:a4:19:82:47:2d:d7:99:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:19:8E:73:43:2F:39:38:41:47:A1:54:FC:D5:60:E1:CC:A4:2E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/NyMZjnNDLzk4QUehVPzVYOHMpC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:94:59:ba:ef:53:09:2c:00:80:55:52:e8:bc:e4:f8:d6:57:
c2:84:b9:56:b8:a9:88:f9:ee:e1:86:ed:04:84:37:04:cb:01:
b5:3c:d0:6c:3c:7f:8e:68:63:cb:df:5d:6e:d0:a4:fa:3e:07:
92:01:57:f2:fc:e9:18:09:52:36:62:8e:90:f6:5b:95:e1:78:
0c:12:23:ed:87:80:3f:34:93:ee:6f:d8:68:81:bb:c7:c4:bd:
89:3f:2e:97:3a:e3:92:85:82:77:74:c8:59:be:f2:10:e7:19:
22:48:70:91:4d:1e:80:71:2e:96:28:23:da:61:e5:7b:8a:83:
1c:c4:5a:9e:cf:e9:70:d3:21:26:65:27:e4:3a:87:5b:f9:96:
2d:11:40:bb:33:d4:c7:f1:b5:aa:a3:33:8d:1d:72:dc:b5:9b:
35:c6:ae:8e:0a:f6:a1:6b:30:72:14:f3:37:ee:f5:66:9f:02:
fe:96:3a:75:40:3b:55:06:cf:13:15:cb:90:f7:79:01:68:33:
7a:98:39:49:b3:a9:aa:56:3b:18:e9:37:de:26:b0:49:ea:b3:
77:24:b1:64:be:9d:1f:db:e6:83:91:fa:a5:76:bf:a7:c2:f3:
15:02:42:97:12:0b:31:2b:48:34:26:96:cb:b3:43:9d:be:bc:
ff:40:c7:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma69NzIw3DVwJKITsr0/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwMTAyMDk0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzIzMTk4ZTczNDMyZjM5Mzg0MTQ3YTE1NGZjZDU2MGUxY2NhNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BBoR8wEJhEZYpu136QBjs8yosJH
htDrq/RgdfJb9v9nqX4L5JXSIyBOGMWCJFf3Z9qI2Xc0ujVL2T1dg9pp7fo5w3Po
vG6t8b4S+2vSC2ekzWjUuU0e/WBOtLagMbSArA3Nysarow5yvqSqTqLMAnvOh/Zu
eHu6Hehtj+MZx7o5wbUdJjnnoGr5JKXnYmTRv6693cnOH+iQSG984/ib0ljuhjiZ
R8ti5qsNuRj5zftTzHr5BQM2A8iVzgGvPJDN3Xc9W6zRRcWffIMEwMdfHprnuYDN
jL74K/TXsecuFSCC7/OYNsepfmNvBpiSg5onEapbzI/l86QZgkct15nhmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcjGY5zQy85OEFHoVT81WDhzKQuMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvTnlNWmpuTkRMems0UVVlaFZQelZZT0hNcEM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWhLMA0G
CSqGSIb3DQEBCwUAA4IBAQCrlFm671MJLACAVVLovOT41lfChLlWuKmI+e7hhu0E
hDcEywG1PNBsPH+OaGPL311u0KT6PgeSAVfy/OkYCVI2Yo6Q9luV4XgMEiPth4A/
NJPub9hogbvHxL2JPy6XOuOShYJ3dMhZvvIQ5xkiSHCRTR6AcS6WKCPaYeV7ioMc
xFqez+lw0yEmZSfkOodb+ZYtEUC7M9TH8bWqozONHXLctZs1xq6OCvahazByFPM3
7vVmnwL+ljp1QDtVBs8TFcuQ93kBaDN6mDlJs6mqVjsY6TfeJrBJ6rN3JLFkvp0f
2+aDkfqldr+nwvMVAkKXEgsxK0g0JpbLs0Odvrz/QMdB
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:35 2025 by rpki-client