Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/NTsAtjYezkC963Cwz6tD457BBtU.roa
File: NTsAtjYezkC963Cwz6tD457BBtU.roa (raw, json)
Hash identifier: CRvZKNTnGlcby8PUu7MnSQKeDO4WZZvxvJJNbH5+wOQ=
Subject key identifier: 35:3B:00:B6:36:1E:CE:40:BD:EB:70:B0:CF:AB:43:E3:9E:C1:06:D5
Certificate issuer: /CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Certificate serial: 0185703981187ACD08697E79BDD2D2A60169
Authority key identifier: 23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/NTsAtjYezkC963Cwz6tD457BBtU.roa
Signing time: Mon 02 Jan 2023 02:04:54 +0000
ROA not before: Mon 02 Jan 2023 02:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.25.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:81:18:7a:cd:08:69:7e:79:bd:d2:d2:a6:01:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Validity
Not Before: Jan 2 02:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=353b00b6361ece40bdeb70b0cfab43e39ec106d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:4b:aa:d7:d3:6c:4a:a6:62:5d:48:0e:cd:
7e:c0:c3:05:19:23:76:06:6a:2a:99:ca:03:2d:7c:
15:db:ca:39:a8:d4:9b:9d:08:05:dc:d4:83:df:87:
73:1d:b5:2a:d0:a0:13:7e:0b:37:35:d5:67:f4:07:
8c:65:48:9a:df:8a:7c:ef:82:bb:14:a0:d8:06:6f:
dc:ee:a0:ce:25:f1:f0:9c:e9:47:6b:98:64:2b:eb:
a5:ed:30:af:be:47:4c:b8:27:df:9c:d3:38:15:27:
a1:95:07:54:4a:04:1e:77:c3:ff:bc:64:80:7c:55:
e8:9b:72:36:09:08:2f:d4:8e:20:33:9f:4c:d3:18:
20:14:90:17:3c:32:56:a1:0c:2a:96:6a:59:41:03:
d0:65:dc:5f:59:68:1a:e6:4e:93:90:96:8e:32:b7:
1e:46:79:00:fb:c8:71:bb:05:e4:9f:6c:10:de:4d:
7f:e0:a3:42:9a:59:a5:6e:ae:a1:10:27:f1:cb:e7:
16:c7:52:98:c6:13:11:1e:20:66:ea:07:fb:64:c8:
69:46:b3:89:5d:a7:f5:bc:dd:b2:3c:56:b8:e0:68:
dc:41:85:98:85:9b:7f:b5:0a:4d:0a:0b:cb:fb:77:
94:65:0c:ad:4e:30:1d:37:fe:7e:d0:67:40:5a:ec:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:00:B6:36:1E:CE:40:BD:EB:70:B0:CF:AB:43:E3:9E:C1:06:D5
X509v3 Authority Key Identifier:
keyid:23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/NTsAtjYezkC963Cwz6tD457BBtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.104.0/24
Signature Algorithm: sha256WithRSAEncryption
61:06:fe:da:88:98:e2:e6:c0:8c:d2:25:d5:f3:f9:60:c2:91:
06:21:86:ad:f2:b6:7c:d3:b0:e0:20:70:de:e1:8e:d9:c5:a4:
49:ef:e1:78:65:86:fd:ed:fe:83:2a:21:06:3c:80:53:aa:8a:
a0:ea:8b:60:69:8d:8b:ac:0b:dc:78:f6:b6:33:2f:ee:6c:35:
e4:18:51:55:8a:72:fd:71:be:0c:02:98:04:18:07:62:37:49:
94:8f:1c:da:ac:8c:b5:a4:e4:58:39:8c:3a:95:a8:cc:e5:57:
93:67:31:ee:03:0f:ef:fa:b8:d2:54:cd:8b:79:74:73:04:21:
23:36:70:fa:21:82:7a:0e:41:6f:c3:c9:b0:6a:15:fd:cb:c0:
cd:68:20:c0:5a:76:df:62:25:08:5b:e0:e5:e4:f7:b7:fc:03:
6b:ac:1a:de:33:ea:c2:d3:b2:cf:af:47:0a:67:59:44:a2:b8:
45:d3:9d:fb:9f:8c:5c:49:91:5d:55:84:5a:60:9b:c9:d5:d2:
63:62:ce:08:26:a9:c1:56:e5:eb:71:19:1b:79:be:d8:9e:de:
27:c2:44:fa:fc:18:d4:4a:df:8b:f2:a0:89:58:81:0e:12:c7:
6d:d5:28:ca:51:e4:91:21:c1:f3:02:8d:79:ca:d5:8b:10:2a:
fe:b7:08:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOYEYes0IaX55vdLSpgFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2RiODk5MTU0YTk4MjVkMWIzMWRkMDVhNTgzOGQyNzBh
YWY0ZjQwHhcNMjMwMTAyMDIwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTNiMDBiNjM2MWVjZTQwYmRlYjcwYjBjZmFiNDNlMzllYzEwNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/9LqtfTbEqmYl1IDs1+wMMFGSN2
BmoqmcoDLXwV28o5qNSbnQgF3NSD34dzHbUq0KATfgs3NdVn9AeMZUia34p874K7
FKDYBm/c7qDOJfHwnOlHa5hkK+ul7TCvvkdMuCffnNM4FSehlQdUSgQed8P/vGSA
fFXom3I2CQgv1I4gM59M0xggFJAXPDJWoQwqlmpZQQPQZdxfWWga5k6TkJaOMrce
RnkA+8hxuwXkn2wQ3k1/4KNCmlmlbq6hECfxy+cWx1KYxhMRHiBm6gf7ZMhpRrOJ
Xaf1vN2yPFa44GjcQYWYhZt/tQpNCgvL+3eUZQytTjAdN/5+0GdAWuwFXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDU7ALY2Hs5AvetwsM+rQ+OewQbVMB8GA1UdIwQY
MBaAFCM9uJkVSpgl0bMd0FpYONJwqvT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXoyNG1SVkttQ1hSc3gzUVdsZzQwbkNxOVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83ZGVlMTAtOTMxMy00ODI1LWExZGQt
OGNiNzQxYWE4NzEwLzEvTlRzQXRqWWV6a0M5NjNDd3o2dEQ0NTdCQnRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83ZGVlMTAtOTMxMy00ODI1LWExZGQtOGNiNzQxYWE4NzEw
LzEvSXoyNG1SVkttQ1hSc3gzUVdsZzQwbkNxOVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRloMA0G
CSqGSIb3DQEBCwUAA4IBAQBhBv7aiJji5sCM0iXV8/lgwpEGIYat8rZ807DgIHDe
4Y7ZxaRJ7+F4ZYb97f6DKiEGPIBTqoqg6otgaY2LrAvcePa2My/ubDXkGFFVinL9
cb4MApgEGAdiN0mUjxzarIy1pORYOYw6lajM5VeTZzHuAw/v+rjSVM2LeXRzBCEj
NnD6IYJ6DkFvw8mwahX9y8DNaCDAWnbfYiUIW+Dl5Pe3/ANrrBreM+rC07LPr0cK
Z1lEorhF0537n4xcSZFdVYRaYJvJ1dJjYs4IJqnBVuXrcRkbeb7Ynt4nwkT6/BjU
St+L8qCJWIEOEsdt1SjKUeSRIcHzAo15ytWLECr+twjk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org