Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/NrSqEKUOU2XauV-i5XcFK6G4SDE.roa
File: NrSqEKUOU2XauV-i5XcFK6G4SDE.roa (raw, json)
Hash identifier: QbfLyNgfhw89ncOBcXtsqNeuurH1zO/6qaF1UEA+u6E=
Subject key identifier: 36:B4:AA:10:A5:0E:53:65:DA:B9:5F:A2:E5:77:05:2B:A1:B8:48:31
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 0194222020382DDFFF1E36D85C00F3E7AB13
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/NrSqEKUOU2XauV-i5XcFK6G4SDE.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210139
IP address blocks: 89.190.32.0/21 maxlen: 21
89.190.39.0/24 maxlen: 24
185.73.160.0/22 maxlen: 22
2a05:43c0::/29 maxlen: 29
2a05:43c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:20:38:2d:df:ff:1e:36:d8:5c:00:f3:e7:ab:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36b4aa10a50e5365dab95fa2e577052ba1b84831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:43:40:fd:20:40:cd:1e:ae:e2:ad:9f:84:
06:8e:d0:58:4f:b9:f1:1d:cc:33:98:75:df:b0:2c:
ef:cd:48:c7:81:b6:97:45:4b:7e:01:59:ed:6e:e8:
a3:dd:fa:ba:aa:40:48:22:fb:78:ff:43:29:9e:69:
ac:ff:63:93:63:23:58:e7:24:27:8b:18:a5:d7:f8:
51:1d:20:02:00:84:eb:23:d3:6a:24:84:87:4b:46:
95:2e:b3:21:6e:c1:fb:8e:b1:cb:72:b9:f1:26:e7:
9a:d7:77:38:45:19:a6:77:f7:09:c5:02:16:23:11:
06:be:be:02:90:e6:fa:a5:a1:a3:54:16:4b:a5:0c:
79:41:72:d0:07:5c:cd:e3:3b:ff:13:4f:c0:8b:c2:
1c:c1:41:93:8c:a4:7b:62:77:7a:1b:79:0e:97:e7:
d9:da:88:43:9e:ed:c1:78:dd:ff:47:83:31:df:12:
43:38:e3:8d:8d:44:21:49:41:86:ba:e7:af:b0:be:
08:31:7b:13:81:82:64:cb:02:cf:7b:81:20:aa:12:
fe:43:2c:36:40:21:1f:d3:0e:53:40:9e:a2:e3:59:
38:4a:d9:8c:a1:56:24:26:e9:c7:1a:ac:a6:c3:70:
0c:e9:02:83:3d:30:45:7d:b6:66:fa:f9:10:89:ec:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:AA:10:A5:0E:53:65:DA:B9:5F:A2:E5:77:05:2B:A1:B8:48:31
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/NrSqEKUOU2XauV-i5XcFK6G4SDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.32.0/21
185.73.160.0/22
IPv6:
2a05:43c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:9c:76:de:4d:10:9a:5a:ee:40:94:0e:9e:d7:2d:cd:ed:f9:
35:eb:89:32:5d:09:98:9a:d3:67:1a:3a:e7:cd:ae:2f:36:ca:
ce:b3:47:6d:fd:3a:62:d7:9d:a9:15:3a:7c:82:83:fa:5a:63:
c4:33:e9:76:54:e8:70:be:5b:66:71:c4:f7:5c:89:e8:78:22:
c2:34:43:a8:1e:96:4b:38:70:15:b5:3b:3f:dc:2b:df:dc:2d:
fa:26:a6:8d:37:bc:35:52:eb:e2:77:f8:83:7d:f5:ed:77:7d:
a2:fe:98:9e:c9:37:7f:ce:aa:fd:95:d7:0b:3c:c0:30:39:48:
d4:03:51:f2:30:c2:01:bc:24:68:44:d7:09:84:01:d6:b3:3a:
df:fd:fa:8b:c1:e8:66:39:7a:08:5b:e9:76:82:67:f6:7b:9d:
cf:5c:23:ec:d5:bd:f9:5b:a1:55:76:9e:16:5f:a6:fc:df:59:
23:9e:73:2b:93:3c:c2:81:18:d5:dd:44:89:d8:b8:8d:fc:a8:
21:08:6e:c3:31:5b:15:29:f9:9a:8f:ce:05:c9:0f:f9:4e:75:
d1:3d:96:9f:4b:2a:c5:5c:f0:8e:c7:e7:d0:48:86:04:06:bb:
3e:88:21:17:95:df:14:cf:cd:b7:71:cd:0c:cc:8e:01:8e:e6:
5d:29:db:54
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQiICA4Ld//HjbYXADz56sTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjkwNGRmNWVlYzIyMTZiMzQzMDE2YzVjYjI0YmI5MGE0
M2QzYTQwHhcNMjUwMTAxMTM0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmI0YWExMGE1MGU1MzY1ZGFiOTVmYTJlNTc3MDUyYmExYjg0ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP1DQP0gQM0eruKtn4QGjtBYT7nx
HcwzmHXfsCzvzUjHgbaXRUt+AVntbuij3fq6qkBIIvt4/0Mpnmms/2OTYyNY5yQn
ixil1/hRHSACAITrI9NqJISHS0aVLrMhbsH7jrHLcrnxJuea13c4RRmmd/cJxQIW
IxEGvr4CkOb6paGjVBZLpQx5QXLQB1zN4zv/E0/Ai8IcwUGTjKR7Ynd6G3kOl+fZ
2ohDnu3BeN3/R4Mx3xJDOOONjUQhSUGGuuevsL4IMXsTgYJkywLPe4EgqhL+Qyw2
QCEf0w5TQJ6i41k4StmMoVYkJunHGqymw3AM6QKDPTBFfbZm+vkQiewTiwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDa0qhClDlNl2rlfouV3BSuhuEgxMB8GA1UdIwQY
MBaAFNC5BN9e7CIWs0MBbFyyS7kKQ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUt
NDFhODRmNDE5YWM1LzEvTnJTcUVLVU9VMlhhdVYtaTVYY0ZLNkc0U0RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUtNDFhODRmNDE5YWM1
LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDWb4gAwQC
uUmgMA0EAgACMAcDBQMqBUPAMA0GCSqGSIb3DQEBCwUAA4IBAQBMnHbeTRCaWu5A
lA6e1y3N7fk164kyXQmYmtNnGjrnza4vNsrOs0dt/Tpi152pFTp8goP6WmPEM+l2
VOhwvltmccT3XInoeCLCNEOoHpZLOHAVtTs/3Cvf3C36JqaNN7w1Uuvid/iDffXt
d32i/pieyTd/zqr9ldcLPMAwOUjUA1HyMMIBvCRoRNcJhAHWszrf/fqLwehmOXoI
W+l2gmf2e53PXCPs1b35W6FVdp4WX6b831kjnnMrkzzCgRjV3USJ2LiN/KghCG7D
MVsVKfmaj84FyQ/5TnXRPZafSyrFXPCOx+fQSIYEBrs+iCEXld8Uz823cc0MzI4B
juZdKdtU
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:21 2025 by rpki-client