Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/nbKYA5GmU8MEcdGrN_h0ESsADkY.roa
File: nbKYA5GmU8MEcdGrN_h0ESsADkY.roa (raw, json)
Hash identifier: P7S34JZPxEDIFMNTEy9l1THLiBXOSMLauRosAWkCEAk=
Subject key identifier: 9D:B2:98:03:91:A6:53:C3:04:71:D1:AB:37:F8:74:11:2B:00:0E:46
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 01856F0B43D8C61255D8AD1A924AABFAB372
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/nbKYA5GmU8MEcdGrN_h0ESsADkY.roa
Signing time: Sun 01 Jan 2023 20:34:47 +0000
ROA not before: Sun 01 Jan 2023 20:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48635
IP address blocks: 91.238.176.0/23 maxlen: 24
194.247.30.0/23 maxlen: 24
176.117.58.0/23 maxlen: 24
195.20.8.0/22 maxlen: 24
77.94.248.0/21 maxlen: 24
193.23.143.0/24 maxlen: 24
185.28.56.0/22 maxlen: 24
91.198.106.0/24 maxlen: 24
193.164.192.0/23 maxlen: 24
185.232.248.0/22 maxlen: 24
2a00:9b60::/40 maxlen: 48
2001:67c:28fc::/48 maxlen: 48
2a00:f60::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:43:d8:c6:12:55:d8:ad:1a:92:4a:ab:fa:b3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jan 1 20:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db2980391a653c30471d1ab37f874112b000e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:cb:8f:7b:44:61:de:94:e4:af:af:f1:72:
00:36:7e:6c:c5:5b:7d:af:86:e8:c6:b7:26:4c:20:
ce:ff:f7:06:c6:f6:8d:d6:71:f1:73:6c:e2:07:1b:
7d:60:80:b8:3e:f7:b9:36:ca:b8:44:95:3f:07:a0:
64:d1:11:3a:be:68:4a:71:e0:5f:5c:74:43:82:8e:
13:d0:cc:f1:1c:14:da:f4:17:05:26:e5:16:a5:39:
9a:e7:ba:41:d8:11:f9:68:e4:49:b3:c3:38:55:22:
bc:b4:ae:38:b7:c4:6f:00:a1:76:a7:25:e9:18:3b:
f0:91:e5:d8:35:f4:31:5f:21:9f:35:66:d8:1e:62:
80:69:2e:b5:74:19:9e:89:25:cf:58:8a:da:3a:37:
7f:63:a2:33:e2:84:d5:f6:3d:3d:8f:c6:b3:0f:52:
96:7b:c9:a1:2c:3c:93:4f:2f:a9:00:99:78:06:b2:
64:64:43:b9:80:51:37:38:61:83:bc:b7:e1:af:b9:
ae:59:bf:ce:a3:ec:1c:12:46:0e:fb:85:c6:0a:6f:
b3:b3:58:08:24:80:14:02:71:ed:6c:55:dd:4f:29:
8b:08:13:9d:4b:e6:98:fe:fe:6d:9b:f7:d9:71:73:
eb:29:03:55:7c:20:57:29:cd:0a:3d:b9:af:51:0b:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:98:03:91:A6:53:C3:04:71:D1:AB:37:F8:74:11:2B:00:0E:46
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/nbKYA5GmU8MEcdGrN_h0ESsADkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.248.0/21
91.198.106.0/24
91.238.176.0/23
176.117.58.0/23
185.28.56.0/22
185.232.248.0/22
193.23.143.0/24
193.164.192.0/23
194.247.30.0/23
195.20.8.0/22
IPv6:
2001:67c:28fc::/48
2a00:f60::/32
2a00:9b60::/40
Signature Algorithm: sha256WithRSAEncryption
72:9f:3c:f3:b0:04:7f:94:aa:3a:fb:4b:1a:8e:3a:91:00:df:
fb:c1:94:60:49:c3:35:18:03:5b:f9:5e:fc:b6:c2:5d:6e:c4:
d9:ce:0c:00:a0:97:77:84:23:2f:55:f9:36:17:a5:d0:05:dc:
59:ec:72:46:6c:5c:74:33:c5:1f:a8:63:fc:79:71:01:f4:ed:
a0:62:67:c2:16:4c:79:70:27:d1:50:bf:19:1d:a7:9a:5a:8c:
6e:06:d9:39:c4:7f:4f:69:f4:1d:38:f4:8f:d9:91:28:c2:2c:
8e:98:e7:60:d6:40:c2:c0:0f:fc:f3:56:38:39:38:d5:ca:8d:
3a:d3:2b:a4:0d:d9:6b:9e:fa:3f:91:c2:66:8c:60:af:11:99:
cd:e1:97:23:85:1b:2e:ba:9d:88:92:a4:09:8a:a2:6b:39:0c:
d9:08:93:36:10:b8:04:6b:a8:e2:55:de:73:fd:58:a4:05:e5:
c9:33:5f:45:57:d5:4c:0b:97:73:14:07:5b:70:b8:ba:1c:48:
63:f2:3d:56:7b:9d:a1:a7:38:96:6f:39:7d:e0:7f:2b:4c:c4:
c3:1b:a8:5f:60:5d:52:c3:f3:fa:2d:d4:8b:ae:53:25:be:48:
6b:39:8b:87:76:fa:7f:de:a2:f8:3c:3e:6d:ff:57:77:ab:f0:
2b:f7:18:5c
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAYVvC0PYxhJV2K0akkqr+rNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjMwMTAxMjAzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGIyOTgwMzkxYTY1M2MzMDQ3MWQxYWIzN2Y4NzQxMTJiMDAwZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cfLj3tEYd6U5K+v8XIANn5sxVt9
r4boxrcmTCDO//cGxvaN1nHxc2ziBxt9YIC4Pve5Nsq4RJU/B6Bk0RE6vmhKceBf
XHRDgo4T0MzxHBTa9BcFJuUWpTma57pB2BH5aORJs8M4VSK8tK44t8RvAKF2pyXp
GDvwkeXYNfQxXyGfNWbYHmKAaS61dBmeiSXPWIraOjd/Y6Iz4oTV9j09j8azD1KW
e8mhLDyTTy+pAJl4BrJkZEO5gFE3OGGDvLfhr7muWb/Oo+wcEkYO+4XGCm+zs1gI
JIAUAnHtbFXdTymLCBOdS+aY/v5tm/fZcXPrKQNVfCBXKc0KPbmvUQvEDwIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFJ2ymAORplPDBHHRqzf4dBErAA5GMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvbmJLWUE1R21VOE1FY2RHck5faDBFU3NBRGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBCBAIAATA8AwQDTV74AwQA
W8ZqAwQBW+6wAwQBsHU6AwQCuRw4AwQCuej4AwQAwRePAwQBwaTAAwQBwvceAwQC
wxQIMB4EAgACMBgDBwAgAQZ8KPwDBQAqAA9gAwYAKgCbYAAwDQYJKoZIhvcNAQEL
BQADggEBAHKfPPOwBH+Uqjr7SxqOOpEA3/vBlGBJwzUYA1v5Xvy2wl1uxNnODACg
l3eEIy9V+TYXpdAF3FnsckZsXHQzxR+oY/x5cQH07aBiZ8IWTHlwJ9FQvxkdp5pa
jG4G2TnEf09p9B049I/ZkSjCLI6Y52DWQMLAD/zzVjg5ONXKjTrTK6QN2Wue+j+R
wmaMYK8Rmc3hlyOFGy66nYiSpAmKoms5DNkIkzYQuARrqOJV3nP9WKQF5ckzX0VX
1UwLl3MUB1twuLocSGPyPVZ7naGnOJZvOX3gfytMxMMbqF9gXVLD8/ot1IuuUyW+
SGs5i4d2+n/eovg8Pm3/V3er8Cv3GFw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:37 2025 by rpki-client