Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/NcJMjN4nc_WU-RktQLq2mseG8B0.roa
File: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (raw, json)
Hash identifier: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=
Subject key identifier: 35:C2:4C:8C:DE:27:73:F5:94:F9:19:2D:40:BA:B6:9A:C7:86:F0:1D
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61F7A7673F21F537C541BF9C5A866
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/NcJMjN4nc_WU-RktQLq2mseG8B0.roa
Signing time: Thu 02 Jan 2025 15:50:34 +0000
ROA not before: Thu 02 Jan 2025 15:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213079
IP address blocks: 147.234.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1f:7a:76:73:f2:1f:53:7c:54:1b:f9:c5:a8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35c24c8cde2773f594f9192d40bab69ac786f01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:72:6c:38:eb:a6:ec:c6:57:0f:db:4d:4c:
c3:aa:28:10:88:66:66:f7:a5:65:88:79:95:e7:c0:
2e:8b:2b:f7:ad:33:66:50:32:82:ac:e3:87:8e:20:
b2:24:72:fe:46:cb:62:c1:6c:1e:56:96:f9:d5:42:
52:1c:4a:1a:3e:a5:3b:f8:c7:89:09:44:15:0a:df:
a6:58:c9:28:01:69:80:7b:39:42:da:cb:9a:37:03:
90:c4:48:d0:12:21:0e:3e:62:d3:ad:af:f2:a5:7e:
fe:e3:13:76:bf:87:a7:0e:8d:ca:a2:d4:d5:e5:39:
67:d4:5b:ac:22:c4:d8:4b:9c:e7:4c:6e:29:10:d6:
f8:5d:01:6f:d5:71:1f:c5:5a:8f:3a:e1:37:83:ae:
fc:ee:98:ed:ea:60:aa:1f:24:d1:3f:b8:3f:27:f7:
e3:00:ad:51:16:30:55:52:8e:40:d9:aa:79:34:44:
b4:50:a1:72:35:fe:2f:96:c9:e1:95:a9:09:25:93:
14:8d:32:49:b2:93:77:93:d9:4f:10:fe:b0:16:7c:
af:f1:8a:c0:1e:ff:42:e3:b8:f7:ef:70:95:fe:8b:
a9:9f:f4:2c:9d:99:a2:14:a0:3c:70:5f:53:5a:4e:
3c:a1:09:7c:d6:81:3f:8e:89:8a:ae:a9:b3:85:72:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C2:4C:8C:DE:27:73:F5:94:F9:19:2D:40:BA:B6:9A:C7:86:F0:1D
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/NcJMjN4nc_WU-RktQLq2mseG8B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.85.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d9:18:ad:a5:7d:a7:91:b4:31:f2:60:d3:eb:6f:75:d1:3c:
08:e0:10:1b:9d:0f:11:22:a4:e3:4b:8e:34:b9:4c:8d:b9:4f:
b6:ee:c2:19:8c:dd:12:89:de:48:f0:71:26:8c:94:4d:1c:5a:
a9:0c:9a:08:00:35:15:b5:c4:45:5a:17:f7:9b:f5:70:c6:22:
a3:44:ee:0a:05:c4:50:84:45:e9:a3:70:2d:70:ac:f4:26:f5:
e5:f5:41:c9:3e:3c:cf:3b:25:5d:d2:eb:b7:58:45:90:f7:c7:
2f:03:a0:0d:7b:a5:50:e2:af:99:32:42:f2:32:73:72:df:fc:
76:8d:29:8f:b7:ce:49:f6:71:be:81:c1:b1:07:d7:f4:c4:bf:
41:22:da:90:5d:b1:f0:d9:a6:61:a5:83:de:10:fe:9d:9b:38:
f9:75:85:ba:eb:37:50:f4:f3:a8:32:d8:5f:cf:01:9b:a6:81:
2c:fc:e6:88:80:b7:1a:ce:5e:b2:af:6e:49:3a:2e:05:97:7d:
93:7b:f8:ee:1d:08:9a:7a:b5:ee:d7:0e:33:d5:d2:28:52:fc:
72:d6:71:1b:47:12:76:e5:76:e3:20:04:0f:62:a3:cb:b9:c2:
1e:ae:94:a6:aa:a2:fe:06:3c:f4:70:d3:58:77:ba:31:e1:30:
3f:2b:cd:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnth96dnPyH1N8VBv5xahmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjUwMTAyMTU1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWMyNGM4Y2RlMjc3M2Y1OTRmOTE5MmQ0MGJhYjY5YWM3ODZmMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgFybDjrpuzGVw/bTUzDqigQiGZm
96VliHmV58Auiyv3rTNmUDKCrOOHjiCyJHL+RstiwWweVpb51UJSHEoaPqU7+MeJ
CUQVCt+mWMkoAWmAezlC2suaNwOQxEjQEiEOPmLTra/ypX7+4xN2v4enDo3KotTV
5Tln1FusIsTYS5znTG4pENb4XQFv1XEfxVqPOuE3g6787pjt6mCqHyTRP7g/J/fj
AK1RFjBVUo5A2ap5NES0UKFyNf4vlsnhlakJJZMUjTJJspN3k9lPEP6wFnyv8YrA
Hv9C47j373CV/oupn/QsnZmiFKA8cF9TWk48oQl81oE/jomKrqmzhXJ1yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXCTIzeJ3P1lPkZLUC6tprHhvAdMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvTmNKTWpONG5jX1dVLVJrdFFMcTJtc2VHOEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+pVMA0G
CSqGSIb3DQEBCwUAA4IBAQB52RitpX2nkbQx8mDT62910TwI4BAbnQ8RIqTjS440
uUyNuU+27sIZjN0Sid5I8HEmjJRNHFqpDJoIADUVtcRFWhf3m/VwxiKjRO4KBcRQ
hEXpo3AtcKz0JvXl9UHJPjzPOyVd0uu3WEWQ98cvA6ANe6VQ4q+ZMkLyMnNy3/x2
jSmPt85J9nG+gcGxB9f0xL9BItqQXbHw2aZhpYPeEP6dmzj5dYW66zdQ9POoMthf
zwGbpoEs/OaIgLcazl6yr25JOi4Fl32Te/juHQiaerXu1w4z1dIoUvxy1nEbRxJ2
5XbjIAQPYqPLucIerpSmqqL+Bjz0cNNYd7ox4TA/K82D
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:03 2025 by rpki-client