Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/NkijWq_4VmUV0QwgspHARdufH_Y.roa
File: NkijWq_4VmUV0QwgspHARdufH_Y.roa (raw, json)
Hash identifier: b4RZz/+XPMMLEEiA+Zp22tuVe8Vk4R5Gg937mJTeLxA=
Subject key identifier: 36:48:A3:5A:AF:F8:56:65:15:D1:0C:20:B2:91:C0:45:DB:9F:1F:F6
Certificate issuer: /CN=c555e80533443d4eff1edf9899bb3f9c5b8a1bc3
Certificate serial: 054D882D
Authority key identifier: C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/NkijWq_4VmUV0QwgspHARdufH_Y.roa
Signing time: Wed 12 Jan 2022 09:17:58 +0000
ROA not before: Wed 12 Jan 2022 09:17:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210306
IP address blocks: 185.3.156.0/22 maxlen: 24
193.35.92.0/22 maxlen: 22
2a02:53c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88967213 (0x54d882d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c555e80533443d4eff1edf9899bb3f9c5b8a1bc3
Validity
Not Before: Jan 12 09:17:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3648a35aaff8566515d10c20b291c045db9f1ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:d3:1b:75:23:ce:6c:c9:a7:93:35:7d:2b:
3c:0f:25:c2:39:3b:6f:77:8f:e4:e0:91:a2:07:ec:
1c:15:0d:b6:f9:39:ae:d9:06:21:dc:4e:6d:8c:30:
28:40:31:0c:94:d2:99:4a:51:93:55:52:b3:4a:f8:
f3:02:f1:e4:ff:07:ad:12:85:52:93:55:38:c8:a1:
45:f0:09:9f:ed:d8:4f:61:f5:4e:3d:e6:0f:7a:61:
69:13:65:e7:52:9e:c5:0f:ec:67:9c:c5:2f:fc:ce:
dc:00:25:4d:59:8c:81:6c:1a:ba:f9:6d:d7:95:20:
69:d3:6b:20:60:33:40:76:83:0d:87:80:8e:28:31:
92:70:07:21:1a:64:b7:bc:06:19:ac:2f:65:09:4a:
e5:ce:2d:a9:84:ee:29:74:43:55:81:20:66:28:de:
54:b6:26:89:a9:5c:92:f0:0d:3b:bc:94:91:89:9b:
88:6f:51:a6:79:01:56:da:e6:83:e3:fa:aa:b7:5d:
7a:92:10:bf:03:fb:0d:1f:ac:f9:70:f2:41:d3:83:
8e:6c:3c:af:dc:b1:93:5c:92:5a:d5:e6:4c:2b:cf:
ae:ff:66:50:f6:8e:70:72:9c:ce:f4:28:42:87:ec:
b7:82:fc:74:31:0d:19:d6:7b:eb:37:ec:42:58:32:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:A3:5A:AF:F8:56:65:15:D1:0C:20:B2:91:C0:45:DB:9F:1F:F6
X509v3 Authority Key Identifier:
keyid:C5:55:E8:05:33:44:3D:4E:FF:1E:DF:98:99:BB:3F:9C:5B:8A:1B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/NkijWq_4VmUV0QwgspHARdufH_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/7da8e2-9d40-4204-b221-c083e32d9c07/1/xVXoBTNEPU7_Ht-Ymbs_nFuKG8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.156.0/22
193.35.92.0/22
IPv6:
2a02:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:60:fb:d9:7e:b6:8e:8c:35:fa:46:64:e7:d5:a0:ba:d1:38:
47:43:7d:e4:e9:7b:37:79:79:41:3d:b1:5c:01:14:b4:c9:e4:
47:7f:4f:ae:50:6c:fa:92:5a:a0:85:6b:26:5e:7e:6d:23:1e:
0e:72:6a:81:b3:b4:db:62:8b:cf:0d:05:90:fd:d1:b0:a9:ed:
7b:1c:fe:20:33:e9:3d:22:ab:0e:c3:14:1f:ca:c6:fa:47:70:
f9:d0:d8:1f:33:62:c9:a2:9f:b9:00:e9:58:c9:d0:dd:8a:de:
c2:78:6e:69:35:d8:0a:0c:06:75:d9:7f:7c:7a:9e:e9:8b:93:
1e:cf:3e:c5:c4:a3:a5:3f:e1:59:3f:06:b5:4f:6c:8a:7b:ec:
ff:ee:50:50:55:32:3d:ae:d2:45:c6:60:df:65:4f:66:76:ff:
dc:2d:13:88:d7:e5:e9:1c:d5:b4:d6:18:81:3f:9b:c7:d5:6b:
9f:f0:e0:8c:14:af:f8:ce:8e:9a:b5:e1:0b:04:66:21:48:3a:
86:d2:74:94:d4:d5:e5:03:dd:4d:27:07:90:47:4b:15:2b:52:
73:6d:76:bd:ee:c5:e8:15:57:7f:73:82:4c:1a:1b:68:6c:50:
91:87:01:ee:85:a5:96:b1:3c:ff:80:c8:4d:d3:ed:13:28:e9:
d9:c6:d4:78
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBU2ILTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NTU1ZTgwNTMzNDQzZDRlZmYxZWRmOTg5OWJiM2Y5YzViOGExYmMzMB4XDTIyMDEx
MjA5MTc1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzY0OGEzNWFhZmY4
NTY2NTE1ZDEwYzIwYjI5MWMwNDVkYjlmMWZmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN6V0xt1I85syaeTNX0rPA8lwjk7b3eP5OCRogfsHBUNtvk5
rtkGIdxObYwwKEAxDJTSmUpRk1VSs0r48wLx5P8HrRKFUpNVOMihRfAJn+3YT2H1
Tj3mD3phaRNl51KexQ/sZ5zFL/zO3AAlTVmMgWwauvlt15UgadNrIGAzQHaDDYeA
jigxknAHIRpkt7wGGawvZQlK5c4tqYTuKXRDVYEgZijeVLYmialckvANO7yUkYmb
iG9RpnkBVtrmg+P6qrddepIQvwP7DR+s+XDyQdODjmw8r9yxk1ySWtXmTCvPrv9m
UPaOcHKczvQoQofst4L8dDENGdZ76zfsQlgy0AsCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQ2SKNar/hWZRXRDCCykcBF258f9jAfBgNVHSMEGDAWgBTFVegFM0Q9Tv8e
35iZuz+cW4obwzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hWWG9CVE5FUFU3X0h0LVltYnNfbkZ1S0c4TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvN2RhOGUyLTlkNDAtNDIwNC1iMjIxLWMwODNlMzJkOWMwNy8x
L05raWpXcV80Vm1VVjBRd2dzcEhBUmR1ZkhfWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
N2RhOGUyLTlkNDAtNDIwNC1iMjIxLWMwODNlMzJkOWMwNy8xL3hWWG9CVE5FUFU3
X0h0LVltYnNfbkZ1S0c4TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArkDnAMEAsEjXDANBAIAAjAHAwUA
KgJTwDANBgkqhkiG9w0BAQsFAAOCAQEASmD72X62jow1+kZk59WgutE4R0N95Ol7
N3l5QT2xXAEUtMnkR39PrlBs+pJaoIVrJl5+bSMeDnJqgbO022KLzw0FkP3RsKnt
exz+IDPpPSKrDsMUH8rG+kdw+dDYHzNiyaKfuQDpWMnQ3YrewnhuaTXYCgwGddl/
fHqe6YuTHs8+xcSjpT/hWT8GtU9sinvs/+5QUFUyPa7SRcZg32VPZnb/3C0TiNfl
6RzVtNYYgT+bx9Vrn/DgjBSv+M6OmrXhCwRmIUg6htJ0lNTV5QPdTScHkEdLFStS
c212ve7F6BVXf3OCTBobaGxQkYcB7oWllrE8/4DITdPtEyjp2cbUeA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:42 2025 by rpki-client