Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/nhjvxrJvK3UDdXjL8EW3Nb9Pj14.roa
File: nhjvxrJvK3UDdXjL8EW3Nb9Pj14.roa (raw, json)
Hash identifier: CFJA7EDO0YeDM2lHcHVboJYdZxUs/r81XKfmo1YV5tg=
Subject key identifier: 9E:18:EF:C6:B2:6F:2B:75:03:75:78:CB:F0:45:B7:35:BF:4F:8F:5E
Certificate issuer: /CN=8f1b7edf827db1366de571f00b4a5cfdb239cc61
Certificate serial: 1A7933CC
Authority key identifier: 8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxt-34J9sTZt5XHwC0pc_bI5zGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/nhjvxrJvK3UDdXjL8EW3Nb9Pj14.roa
Signing time: Sat 01 Jan 2022 13:00:16 +0000
ROA not before: Sat 01 Jan 2022 13:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44581
IP address blocks: 94.245.37.0/24 maxlen: 24
213.185.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444150732 (0x1a7933cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1b7edf827db1366de571f00b4a5cfdb239cc61
Validity
Not Before: Jan 1 13:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e18efc6b26f2b75037578cbf045b735bf4f8f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:6f:ab:25:7b:57:bf:52:1a:e3:59:5e:83:
31:1d:da:1e:b8:4f:cf:1c:d9:39:b8:f0:5f:88:f6:
1a:71:98:53:9a:14:68:5e:42:90:3c:f0:cb:da:65:
54:4f:aa:f9:1d:5d:c4:7a:b9:0e:a1:f5:61:85:90:
d8:1d:da:70:63:50:da:7b:c7:2f:b4:38:f8:c7:7e:
2e:27:54:bf:e4:ca:8a:dc:b2:21:93:f6:3f:6e:a8:
12:8b:d6:41:a6:7f:ff:7e:fa:96:13:5a:17:f4:c7:
a1:e9:47:a3:3e:51:71:d1:dd:08:2c:1d:08:12:20:
33:47:71:92:34:db:f7:30:92:5d:a3:ac:76:81:c6:
42:51:43:01:91:62:30:7e:fe:84:45:87:fe:03:dd:
7e:62:05:5d:21:cc:d8:1c:74:84:c5:cc:74:47:8e:
7e:a5:f9:65:53:43:ea:d2:57:d9:1f:96:be:cc:89:
c0:0e:c2:33:07:d7:6f:f2:6c:4e:55:2d:e3:cc:d4:
b6:4b:c5:df:5b:0f:19:7e:44:91:77:5b:72:ec:4d:
d4:d0:95:42:68:6c:cf:1e:75:58:a3:ca:a0:d6:e9:
38:4a:e6:d9:d2:53:b4:ef:a5:bd:82:69:92:4a:f7:
af:7d:aa:7a:19:a5:3d:6b:cc:d9:25:dd:18:79:aa:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:EF:C6:B2:6F:2B:75:03:75:78:CB:F0:45:B7:35:BF:4F:8F:5E
X509v3 Authority Key Identifier:
keyid:8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxt-34J9sTZt5XHwC0pc_bI5zGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/nhjvxrJvK3UDdXjL8EW3Nb9Pj14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/jxt-34J9sTZt5XHwC0pc_bI5zGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.245.37.0/24
213.185.4.0/24
Signature Algorithm: sha256WithRSAEncryption
78:98:a0:5c:a3:14:54:f2:9a:d0:e5:82:56:6f:f7:9e:70:ec:
08:d6:a3:73:83:8f:45:48:d5:5a:a2:bd:b7:28:d2:d3:7e:bb:
35:02:54:49:80:c7:2e:4a:c3:ec:56:a4:4a:c6:f3:a3:14:4e:
3f:34:c9:20:03:4e:56:eb:e5:b1:34:e5:e2:2d:2f:dc:0a:d7:
08:e7:4e:7a:58:c4:19:46:b6:19:de:4c:41:c9:67:01:57:fe:
cf:0a:6c:b9:4d:b1:83:d2:9e:c8:a6:81:b1:41:58:60:94:64:
70:e0:87:2e:ef:23:75:26:31:e6:34:c2:7d:5d:db:86:b6:e1:
29:64:67:ad:02:3c:34:96:e2:d4:46:c9:cb:32:78:93:d9:c4:
20:eb:74:d7:0b:4f:16:fb:ac:82:e4:fc:fe:01:39:11:a5:95:
b5:61:98:87:fe:aa:f9:eb:6c:a2:11:ae:8c:05:da:b7:94:e4:
aa:5c:76:7f:e5:9f:85:fa:75:f9:b9:46:bd:51:a3:bc:08:6a:
6b:85:62:07:14:ed:e6:97:02:90:cc:34:5a:20:86:66:9d:c4:
bd:f2:fa:99:36:c2:f2:9b:95:61:06:91:27:16:57:46:43:a8:
59:e2:0f:5a:89:7c:0c:41:61:f1:a1:d5:18:a4:94:50:7e:72:
48:c8:80:8d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGnkzzDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZjFiN2VkZjgyN2RiMTM2NmRlNTcxZjAwYjRhNWNmZGIyMzljYzYxMB4XDTIyMDEw
MTEzMDAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWUxOGVmYzZiMjZm
MmI3NTAzNzU3OGNiZjA0NWI3MzViZjRmOGY1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKiFb6sle1e/UhrjWV6DMR3aHrhPzxzZObjwX4j2GnGYU5oU
aF5CkDzwy9plVE+q+R1dxHq5DqH1YYWQ2B3acGNQ2nvHL7Q4+Md+LidUv+TKityy
IZP2P26oEovWQaZ//376lhNaF/THoelHoz5RcdHdCCwdCBIgM0dxkjTb9zCSXaOs
doHGQlFDAZFiMH7+hEWH/gPdfmIFXSHM2Bx0hMXMdEeOfqX5ZVND6tJX2R+WvsyJ
wA7CMwfXb/JsTlUt48zUtkvF31sPGX5EkXdbcuxN1NCVQmhszx51WKPKoNbpOErm
2dJTtO+lvYJpkkr3r32qehmlPWvM2SXdGHmqbK0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSeGO/Gsm8rdQN1eMvwRbc1v0+PXjAfBgNVHSMEGDAWgBSPG37fgn2xNm3l
cfALSlz9sjnMYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2p4dC0zNEo5c1RadDVYSHdDMHBjX2JJNXpHRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvMmMyOTNjLTZkZjAtNDExMi1iODAwLTNjMThiYzg3YzY1Yy8x
L25oanZ4ckp2SzNVRGRYakw4RVczTmI5UGoxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
MmMyOTNjLTZkZjAtNDExMi1iODAwLTNjMThiYzg3YzY1Yy8xL2p4dC0zNEo5c1Ra
dDVYSHdDMHBjX2JJNXpHRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF71JQMEANW5BDANBgkqhkiG9w0B
AQsFAAOCAQEAeJigXKMUVPKa0OWCVm/3nnDsCNajc4OPRUjVWqK9tyjS0367NQJU
SYDHLkrD7FakSsbzoxROPzTJIANOVuvlsTTl4i0v3ArXCOdOeljEGUa2Gd5MQcln
AVf+zwpsuU2xg9KeyKaBsUFYYJRkcOCHLu8jdSYx5jTCfV3bhrbhKWRnrQI8NJbi
1EbJyzJ4k9nEIOt01wtPFvusguT8/gE5EaWVtWGYh/6q+etsohGujAXat5Tkqlx2
f+Wfhfp1+blGvVGjvAhqa4ViBxTt5pcCkMw0WiCGZp3EvfL6mTbC8puVYQaRJxZX
RkOoWeIPWol8DEFh8aHVGKSUUH5ySMiAjQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:15 2025 by rpki-client