Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/NrE71IuktabMeqGn_y1NIBXEszA.roa
File: NrE71IuktabMeqGn_y1NIBXEszA.roa (raw, json)
Hash identifier: DEHDrENYtuWH/rim6w9RJlA53YBgKh006wNZnv4O94A=
Subject key identifier: 36:B1:3B:D4:8B:A4:B5:A6:CC:7A:A1:A7:FF:2D:4D:20:15:C4:B3:30
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 018570FBB02A514158035D1F63647036D4CF
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/NrE71IuktabMeqGn_y1NIBXEszA.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212369
IP address blocks: 194.36.85.0/24 maxlen: 24
45.155.125.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b0:2a:51:41:58:03:5d:1f:63:64:70:36:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36b13bd48ba4b5a6cc7aa1a7ff2d4d2015c4b330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:a4:ee:cc:49:8d:2b:6f:37:09:f4:ef:ad:
9d:68:64:66:c0:51:eb:08:5a:d5:3a:a0:eb:b8:71:
9a:24:0a:e9:7d:e5:32:cd:f1:69:cd:f9:33:c2:b6:
6b:3f:4a:b7:83:f3:2f:3e:bc:35:d5:e0:02:f5:f9:
c5:3a:5d:51:d4:ef:97:cf:c4:af:1a:a5:e2:d1:66:
e4:87:19:49:fd:96:b4:dd:58:bb:b1:64:a2:65:8e:
9d:52:02:b6:d4:90:8b:a5:d3:81:ac:03:eb:9a:ca:
97:a5:60:98:26:9d:35:5c:d4:db:e0:d4:3d:92:b3:
08:29:35:be:08:6f:ef:67:8e:0c:b9:81:e3:a8:eb:
47:e7:4e:3d:c8:b4:89:fe:57:41:18:74:df:93:3e:
05:e3:cf:54:ad:b3:97:cb:a4:a3:bb:c3:5f:6c:ab:
d2:90:e1:c3:60:59:cc:c6:87:17:66:12:70:00:cd:
9e:f3:48:b7:39:9c:fa:6c:e9:c3:14:69:48:c3:99:
b2:c3:58:af:43:a4:53:2f:13:37:51:7b:c5:87:44:
16:ac:91:42:53:51:29:fa:76:c1:6c:98:45:fb:1f:
d3:68:c1:51:91:26:94:44:c6:53:e8:0c:7d:bb:f4:
d2:5b:82:73:9c:da:47:fe:b9:d4:f5:82:6c:31:61:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:3B:D4:8B:A4:B5:A6:CC:7A:A1:A7:FF:2D:4D:20:15:C4:B3:30
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/NrE71IuktabMeqGn_y1NIBXEszA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
194.36.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ff:f9:66:46:b5:60:d3:24:30:10:c0:0f:02:e6:5a:62:05:
8b:29:f5:d2:23:df:9d:5b:9f:b5:05:e9:03:c9:a5:29:c7:0a:
6b:7b:2b:3e:f0:75:b0:db:8a:84:3d:95:80:6d:52:31:1c:40:
e3:cc:a2:a7:0e:b8:21:c3:84:75:e5:b0:89:94:bf:83:90:67:
b7:62:3b:19:e9:81:39:29:55:b7:c8:6a:15:b4:7a:f3:20:e5:
19:eb:f7:df:57:45:c8:4e:71:05:f8:18:01:3c:d9:05:a4:37:
49:c7:f9:96:da:ad:02:e7:16:80:09:6e:a2:fe:bf:72:40:fb:
52:ce:4f:56:ae:45:9a:a8:ad:5c:7d:45:3e:5f:6d:c7:10:b3:
2e:fd:b4:f1:29:76:32:1d:50:fe:a6:2d:a0:63:cf:c8:73:80:
e1:b9:29:4b:53:e6:85:c0:8d:24:c8:bc:34:26:bd:a9:03:0b:
e2:ab:1c:6f:d1:73:fc:df:5a:38:08:3c:53:21:c8:88:ff:8d:
34:87:d6:0d:ec:e7:ea:f7:f6:a9:1c:49:54:24:53:d1:62:82:
81:5b:9a:8c:5d:5a:4a:64:6b:6e:92:1d:c8:96:91:be:50:1e:
f7:07:9b:95:e4:e1:f3:e7:09:ce:9f:41:1d:85:a0:82:fa:dc:
21:21:5a:d9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw+7AqUUFYA10fY2RwNtTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNTUyNjBjZWJmMmE3M2NhMTQ3MDlkOTZkMjRhNWZmM2Jj
YjVkYzQwHhcNMjMwMTAyMDUzNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmIxM2JkNDhiYTRiNWE2Y2M3YWExYTdmZjJkNGQyMDE1YzRiMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTmk7sxJjStvNwn0762daGRmwFHr
CFrVOqDruHGaJArpfeUyzfFpzfkzwrZrP0q3g/MvPrw11eAC9fnFOl1R1O+Xz8Sv
GqXi0WbkhxlJ/Za03Vi7sWSiZY6dUgK21JCLpdOBrAPrmsqXpWCYJp01XNTb4NQ9
krMIKTW+CG/vZ44MuYHjqOtH5049yLSJ/ldBGHTfkz4F489UrbOXy6Sju8NfbKvS
kOHDYFnMxocXZhJwAM2e80i3OZz6bOnDFGlIw5myw1ivQ6RTLxM3UXvFh0QWrJFC
U1Ep+nbBbJhF+x/TaMFRkSaURMZT6Ax9u/TSW4JznNpH/rnU9YJsMWEaHwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDaxO9SLpLWmzHqhp/8tTSAVxLMwMB8GA1UdIwQY
MBaAFF1VJgzr8qc8oUcJ2W0kpf87y13EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFZVbURPdnlwenloUnduWmJTU2xfenZMWGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83MGRiNmMtZDE2Mi00ZDQ5LTg4NDkt
ZDJhY2NkYTA4YmVlLzEvTnJFNzFJdWt0YWJNZXFHbl95MU5JQlhFc3pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83MGRiNmMtZDE2Mi00ZDQ5LTg4NDktZDJhY2NkYTA4YmVl
LzEvWFZVbURPdnlwenloUnduWmJTU2xfenZMWGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZt9AwQA
wiRVAwQAwiRXMA0GCSqGSIb3DQEBCwUAA4IBAQCa//lmRrVg0yQwEMAPAuZaYgWL
KfXSI9+dW5+1BekDyaUpxwpreys+8HWw24qEPZWAbVIxHEDjzKKnDrghw4R15bCJ
lL+DkGe3YjsZ6YE5KVW3yGoVtHrzIOUZ6/ffV0XITnEF+BgBPNkFpDdJx/mW2q0C
5xaACW6i/r9yQPtSzk9WrkWaqK1cfUU+X23HELMu/bTxKXYyHVD+pi2gY8/Ic4Dh
uSlLU+aFwI0kyLw0Jr2pAwviqxxv0XP831o4CDxTIciI/400h9YN7Ofq9/apHElU
JFPRYoKBW5qMXVpKZGtukh3IlpG+UB73B5uV5OHz5wnOn0EdhaCC+twhIVrZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org