Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/nYSUhhKNV1AT2H-4naVza27ZDOA.roa
File: nYSUhhKNV1AT2H-4naVza27ZDOA.roa (raw, json)
Hash identifier: o6xNr5Ke3qqZYzCqrvTkv0D8Qt/kg5dwkN1dH2Aaq3g=
Subject key identifier: 9D:84:94:86:12:8D:57:50:13:D8:7F:B8:9D:A5:73:6B:6E:D9:0C:E0
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 0194266AF867588E24AF420DA8FAAB162216
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/nYSUhhKNV1AT2H-4naVza27ZDOA.roa
Signing time: Thu 02 Jan 2025 09:48:52 +0000
ROA not before: Thu 02 Jan 2025 09:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34913
IP address blocks: 185.227.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:f8:67:58:8e:24:af:42:0d:a8:fa:ab:16:22:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Jan 2 09:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d849486128d575013d87fb89da5736b6ed90ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:2d:f2:0c:c0:36:5b:92:ad:02:2b:e0:aa:
e4:bc:c1:56:a0:4e:90:72:46:af:ab:56:cd:a2:1e:
f3:65:1c:ea:3d:f9:2a:53:4a:2b:f0:92:15:ee:ec:
38:c0:7d:cd:6d:de:4a:82:b5:ed:bb:1f:bc:63:d3:
93:d3:20:ec:e4:01:c4:ac:fa:28:46:dc:aa:83:cf:
51:bf:d5:3d:99:15:af:ae:3c:1a:36:23:42:d9:87:
b8:64:e3:d3:0b:5e:8c:52:66:2d:5e:9c:ce:7b:f0:
4d:26:3f:e1:34:2b:da:f8:bb:98:c0:48:d5:17:49:
eb:16:a6:7d:83:94:34:04:de:f1:1c:95:4f:81:04:
5b:7c:c7:2b:b5:df:99:a0:0a:d6:cb:0a:4a:8b:7e:
72:37:0d:16:eb:e6:5e:c0:fb:a6:4e:64:3a:4f:3a:
5e:72:90:ff:4e:46:b1:9d:ee:31:3d:ac:9b:6d:00:
44:c7:13:14:c9:7a:cc:2f:75:20:a8:a4:d7:71:18:
06:ff:54:c8:09:20:4e:5f:ad:ff:72:54:8d:90:af:
6a:c9:9f:73:91:7f:87:ef:a7:e6:b2:63:7c:b1:60:
b0:d6:83:f8:a3:52:45:90:4c:c0:6e:6c:b7:fa:4e:
61:da:7b:88:d5:1f:fb:6b:ce:44:d3:cb:53:40:cc:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:94:86:12:8D:57:50:13:D8:7F:B8:9D:A5:73:6B:6E:D9:0C:E0
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/nYSUhhKNV1AT2H-4naVza27ZDOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.233.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ba:50:1b:64:df:f9:e9:76:4c:2b:66:31:86:f9:1a:5b:f2:
90:a4:62:13:c6:35:7d:9d:11:0f:45:4f:1b:d9:0c:33:a4:3d:
67:e9:23:90:43:1e:a0:c9:6f:df:14:5a:87:6e:7b:e9:de:2f:
87:23:7c:44:e7:22:b4:09:1f:93:a6:6b:49:07:42:6d:c3:73:
5c:b9:00:99:28:20:54:dc:38:bb:ae:5a:13:f2:42:1e:21:47:
fd:e1:b4:eb:7d:00:81:31:ac:24:f2:b7:bc:2a:cf:3a:74:ec:
22:5d:57:6b:64:07:c6:bf:ee:a6:ec:25:13:93:5b:53:3f:09:
46:c5:0d:e8:c7:b9:42:da:b5:65:06:bf:c0:72:7c:df:fb:75:
c5:12:26:53:6a:fd:e0:e4:0f:1a:9a:4e:8a:eb:36:84:a3:84:
ba:10:e1:b3:5d:a7:a3:ed:61:40:93:ea:e0:6f:77:b1:1c:ce:
6d:df:d2:12:dd:89:b7:3f:e5:86:68:b9:79:72:ec:85:2d:00:
50:8e:79:bd:7a:bf:0d:08:8b:c1:25:3d:e8:54:be:17:19:94:
9d:a2:82:56:72:d8:22:cc:b6:7c:e0:31:51:cf:ff:9f:cb:9a:
c5:80:93:50:4e:47:d6:4b:41:52:5a:4b:9c:dd:93:6e:fe:bb:
32:3f:c1:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmavhnWI4kr0INqPqrFiIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDdiYTQzZTI3MGM5OGJkYzY0MmE5ZTNjMjE4Y2E1MjRl
YjBmNTMwHhcNMjUwMTAyMDk0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDg0OTQ4NjEyOGQ1NzUwMTNkODdmYjg5ZGE1NzM2YjZlZDkwY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8wt8gzANluSrQIr4KrkvMFWoE6Q
ckavq1bNoh7zZRzqPfkqU0or8JIV7uw4wH3Nbd5KgrXtux+8Y9OT0yDs5AHErPoo
Rtyqg89Rv9U9mRWvrjwaNiNC2Ye4ZOPTC16MUmYtXpzOe/BNJj/hNCva+LuYwEjV
F0nrFqZ9g5Q0BN7xHJVPgQRbfMcrtd+ZoArWywpKi35yNw0W6+ZewPumTmQ6Tzpe
cpD/Tkaxne4xPaybbQBExxMUyXrML3UgqKTXcRgG/1TICSBOX63/clSNkK9qyZ9z
kX+H76fmsmN8sWCw1oP4o1JFkEzAbmy3+k5h2nuI1R/7a85E08tTQMxLkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2ElIYSjVdQE9h/uJ2lc2tu2QzgMB8GA1UdIwQY
MBaAFHJHukPicMmL3GQqnjwhjKUk6w9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2Yt
Mjc5MjAzYjFkOTJjLzEvbllTVWhoS05WMUFUMkgtNG5hVnphMjdaRE9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2YtMjc5MjAzYjFkOTJj
LzEvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuePpMA0G
CSqGSIb3DQEBCwUAA4IBAQAWulAbZN/56XZMK2YxhvkaW/KQpGITxjV9nREPRU8b
2QwzpD1n6SOQQx6gyW/fFFqHbnvp3i+HI3xE5yK0CR+TpmtJB0Jtw3NcuQCZKCBU
3Di7rloT8kIeIUf94bTrfQCBMawk8re8Ks86dOwiXVdrZAfGv+6m7CUTk1tTPwlG
xQ3ox7lC2rVlBr/Acnzf+3XFEiZTav3g5A8amk6K6zaEo4S6EOGzXaej7WFAk+rg
b3exHM5t39IS3Ym3P+WGaLl5cuyFLQBQjnm9er8NCIvBJT3oVL4XGZSdooJWctgi
zLZ84DFRz/+fy5rFgJNQTkfWS0FSWkuc3ZNu/rsyP8Eh
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:01:31 2025 by rpki-client