Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/nCqqP-t6ETnySNbOI9OIvBWkHMQ.roa
File: nCqqP-t6ETnySNbOI9OIvBWkHMQ.roa (raw, json)
Hash identifier: 5ofv83v/BqPadKNXhZ6dNzv5TTfhmybpiCg93UVvTy8=
Subject key identifier: 9C:2A:AA:3F:EB:7A:11:39:F2:48:D6:CE:23:D3:88:BC:15:A4:1C:C4
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 0184EE75AECBD1A2C7258F2BAEDB34B73699
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/nCqqP-t6ETnySNbOI9OIvBWkHMQ.roa
Signing time: Wed 07 Dec 2022 21:20:00 +0000
ROA not before: Wed 07 Dec 2022 21:20:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 46.248.106.0/23 maxlen: 23
46.248.124.0/23 maxlen: 23
46.248.126.0/23 maxlen: 23
82.136.52.0/24 maxlen: 24
85.116.0.0/23 maxlen: 23
85.116.2.0/23 maxlen: 23
85.116.4.0/23 maxlen: 23
85.116.6.0/23 maxlen: 23
85.116.16.0/21 maxlen: 21
85.116.24.0/24 maxlen: 24
85.116.26.0/24 maxlen: 24
85.116.25.0/24 maxlen: 24
85.116.28.0/24 maxlen: 24
85.116.27.0/24 maxlen: 24
85.116.30.0/24 maxlen: 24
85.116.29.0/24 maxlen: 24
85.116.31.0/24 maxlen: 24
82.136.26.0/24 maxlen: 24
82.136.43.0/24 maxlen: 24
82.136.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:75:ae:cb:d1:a2:c7:25:8f:2b:ae:db:34:b7:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Dec 7 21:20:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c2aaa3feb7a1139f248d6ce23d388bc15a41cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:ac:8b:3f:13:cf:a0:e5:fa:7e:aa:96:21:
2f:bb:c7:b5:f6:0d:9d:bc:52:87:db:41:3e:a2:2e:
a0:e6:68:56:ab:e4:d9:02:8f:68:cb:3f:00:a4:e5:
f1:a8:c6:07:9e:f1:d7:87:93:70:0d:25:35:ca:d6:
5f:a3:85:bc:18:a3:e8:ed:b4:bf:47:7a:28:cd:8e:
5d:82:cc:55:aa:75:ca:ef:e5:a7:ab:71:aa:46:24:
a3:64:a0:93:cf:38:6a:90:27:4a:9d:fa:b1:c7:4f:
08:1b:3d:32:5b:6d:72:07:94:46:7a:32:c1:f4:2b:
2b:d4:45:2b:58:8f:d0:4c:30:29:15:44:dc:10:2d:
73:8d:ec:64:3c:4f:16:ec:a4:37:94:65:e4:c5:05:
21:19:c9:68:83:fc:6c:13:85:7b:72:c7:f8:85:6d:
38:79:62:d0:d0:22:2a:e7:3a:2b:f8:dd:12:2c:53:
c5:28:aa:54:09:63:d5:ba:8d:ce:ab:a5:03:0a:b2:
bc:fb:dc:58:2a:d5:94:af:da:2a:27:a1:9c:ba:ae:
11:4e:bc:a6:2e:83:33:77:46:ee:16:20:4b:10:35:
05:cd:58:13:ff:25:3a:1f:48:4f:8b:19:24:94:71:
40:a6:06:46:0b:5b:d5:0c:8f:2d:41:09:55:00:25:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:AA:3F:EB:7A:11:39:F2:48:D6:CE:23:D3:88:BC:15:A4:1C:C4
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/nCqqP-t6ETnySNbOI9OIvBWkHMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.106.0/23
46.248.124.0/22
82.136.26.0/24
82.136.43.0/24
82.136.47.0/24
82.136.52.0/24
85.116.0.0/21
85.116.16.0/20
Signature Algorithm: sha256WithRSAEncryption
13:c1:da:ee:0f:a1:c1:8b:56:a3:ba:2e:42:5b:9c:d7:2c:68:
7f:9e:88:b1:9c:64:9e:45:62:21:9d:d5:84:90:56:c9:f9:98:
2c:4f:8b:02:5d:a6:96:07:51:63:9b:e9:b5:10:01:99:dc:ed:
45:f3:9c:de:13:e6:92:ec:38:4d:75:28:36:9e:a1:28:99:8e:
53:dd:55:0a:5f:f0:9c:c5:08:30:10:60:e7:b1:41:f5:91:83:
8a:e8:9b:80:92:ce:d2:e0:7b:96:b9:f1:37:f5:d8:39:16:95:
93:31:3e:92:40:aa:ba:b4:75:57:ed:71:dd:2e:85:e4:d6:f0:
5e:3b:f2:28:c2:31:eb:c9:44:b6:a4:99:64:04:8d:75:5f:53:
5e:53:6f:e5:b8:c8:08:cd:b8:c4:9c:9f:07:96:d5:ae:40:45:
63:14:8a:ba:b0:32:7f:56:15:4b:6f:bc:78:a9:7f:fc:b5:4c:
13:4c:7e:cf:ec:b3:65:a3:07:dc:e8:92:8a:c4:6b:2e:a4:de:
74:ac:81:2f:ab:a4:f7:92:5b:c7:3f:ad:20:93:25:99:47:c4:
52:d7:22:ab:05:be:16:62:47:98:fe:fd:ca:f5:d9:1a:1d:6a:
ad:cb:61:9f:4b:31:16:2b:20:54:74:d3:e9:45:3f:99:dd:3c:
15:6d:c9:80
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYTuda7L0aLHJY8rrts0tzaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4
NjEyM2YwHhcNMjIxMjA3MjEyMDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzJhYWEzZmViN2ExMTM5ZjI0OGQ2Y2UyM2QzODhiYzE1YTQxY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Ksiz8Tz6Dl+n6qliEvu8e19g2d
vFKH20E+oi6g5mhWq+TZAo9oyz8ApOXxqMYHnvHXh5NwDSU1ytZfo4W8GKPo7bS/
R3oozY5dgsxVqnXK7+Wnq3GqRiSjZKCTzzhqkCdKnfqxx08IGz0yW21yB5RGejLB
9Csr1EUrWI/QTDApFUTcEC1zjexkPE8W7KQ3lGXkxQUhGclog/xsE4V7csf4hW04
eWLQ0CIq5zor+N0SLFPFKKpUCWPVuo3Oq6UDCrK8+9xYKtWUr9oqJ6Gcuq4RTrym
LoMzd0buFiBLEDUFzVgT/yU6H0hPixkklHFApgZGC1vVDI8tQQlVACWtoQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJwqqj/rehE58kjWziPTiLwVpBzEMB8GA1UdIwQY
MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt
NGIxZjYxNjUzZjNkLzEvbkNxcVAtdDZFVG55U05iT0k5T0l2QldrSE1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk
LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBLvhqAwQC
Lvh8AwQAUogaAwQAUogrAwQAUogvAwQAUog0AwQDVXQAAwQEVXQQMA0GCSqGSIb3
DQEBCwUAA4IBAQATwdruD6HBi1ajui5CW5zXLGh/noixnGSeRWIhndWEkFbJ+Zgs
T4sCXaaWB1Fjm+m1EAGZ3O1F85zeE+aS7DhNdSg2nqEomY5T3VUKX/CcxQgwEGDn
sUH1kYOK6JuAks7S4HuWufE39dg5FpWTMT6SQKq6tHVX7XHdLoXk1vBeO/IowjHr
yUS2pJlkBI11X1NeU2/luMgIzbjEnJ8HltWuQEVjFIq6sDJ/VhVLb7x4qX/8tUwT
TH7P7LNlowfc6JKKxGsupN50rIEvq6T3klvHP60gkyWZR8RS1yKrBb4WYkeY/v3K
9dkaHWqty2GfSzEWKyBUdNPpRT+Z3TwVbcmA
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:03 2025 by rpki-client