Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa
File: NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa (raw, json)
Hash identifier: YbW4L3XomgDTTG2VVXMsP5shedyMXIrMiyf4jWJ1fEY=
Subject key identifier: 35:05:B2:8F:77:71:5F:AA:CF:B3:4C:B4:05:F1:74:64:52:6E:53:A9
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0194282740D249B28D05C421029EF8867D2D
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213772
IP address blocks: 45.82.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:40:d2:49:b2:8d:05:c4:21:02:9e:f8:86:7d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3505b28f77715faacfb34cb405f17464526e53a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:82:89:68:3f:93:21:57:e5:3a:50:c3:88:
eb:7d:c6:12:8c:5e:21:cc:79:1e:fc:e8:36:60:b0:
5e:54:f0:80:a9:73:68:4b:fd:c5:9f:63:fc:f0:b7:
67:50:22:4c:0d:10:ec:4f:e4:a8:a1:b3:71:ff:0f:
a9:10:fa:31:52:6e:f2:74:ba:0f:91:82:f3:1b:c1:
f5:3d:6b:85:13:fb:3d:23:0f:cf:76:2a:51:57:45:
c9:30:e9:d1:05:15:21:fe:31:20:9c:bd:16:22:8c:
68:da:ee:7c:06:f8:c1:92:d6:19:10:c4:c8:60:99:
74:71:a0:b8:0d:44:69:44:3a:f7:3a:4c:b9:c7:94:
8d:93:c6:f5:01:9b:d1:df:cd:62:c8:93:36:db:b8:
93:23:1e:f1:c3:ea:1a:6d:77:97:68:5d:97:d9:01:
b6:d8:39:01:33:40:79:55:ec:b0:72:f9:cd:cd:61:
01:61:a2:f7:d5:0f:5e:4d:9e:4f:48:81:90:48:4c:
c6:76:09:97:5b:22:8c:a8:38:d9:3a:e2:af:63:57:
fc:e6:fa:c2:b2:f7:24:10:5c:2c:50:5e:d5:e2:8c:
64:71:55:45:1d:50:d8:a6:67:4f:9f:91:db:8a:04:
e6:a7:e9:de:db:6a:3f:b5:82:60:fb:0e:3e:56:bd:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:05:B2:8F:77:71:5F:AA:CF:B3:4C:B4:05:F1:74:64:52:6E:53:A9
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:91:b8:a1:48:47:87:97:bf:1f:d9:f3:7a:26:36:da:3e:bd:
6f:c2:a4:9c:0f:13:df:87:2d:6e:f2:68:f2:ae:7a:6f:b7:c1:
ae:c5:a6:fc:ac:13:69:b3:56:9f:9d:4c:ac:a4:ce:4b:71:28:
c6:9e:8e:90:70:50:37:f5:0d:e6:10:f7:00:b6:b2:6a:45:f3:
a9:40:d9:b5:06:89:70:18:ed:78:7a:0f:2e:5c:9a:90:71:e6:
98:97:17:42:17:99:8c:df:c9:26:80:a0:a6:80:af:54:7c:58:
3e:5c:10:1c:d9:d9:84:cd:62:7d:b0:6b:6c:37:c3:cd:ab:78:
78:ee:dc:d0:0a:6b:d0:83:f8:cd:05:10:73:ad:bb:6a:b1:b1:
d0:92:2e:4d:9f:02:b9:56:c8:8c:4c:17:18:30:5c:19:71:f6:
e2:d8:b4:61:26:6f:18:b9:97:26:9b:1a:ce:3b:ed:bd:4d:16:
a8:8b:ef:aa:89:a2:7c:c9:fc:60:c7:9e:38:1b:c3:88:e2:1a:
45:ba:2f:fa:dc:9e:05:7f:57:de:c0:d0:c2:86:b4:f3:f0:2f:
07:6d:48:38:c4:6f:b2:f8:17:6c:3d:5c:c0:71:bc:19:b5:c4:
0f:7d:8b:f3:be:24:df:7a:ef:42:47:3e:2d:9e:c7:c7:53:4b:
0d:e1:cd:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ0DSSbKNBcQhAp74hn0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw
MGQwNDYwHhcNMjUwMTAyMTc1NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTA1YjI4Zjc3NzE1ZmFhY2ZiMzRjYjQwNWYxNzQ2NDUyNmU1M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxmCiWg/kyFX5TpQw4jrfcYSjF4h
zHke/Og2YLBeVPCAqXNoS/3Fn2P88LdnUCJMDRDsT+SoobNx/w+pEPoxUm7ydLoP
kYLzG8H1PWuFE/s9Iw/PdipRV0XJMOnRBRUh/jEgnL0WIoxo2u58BvjBktYZEMTI
YJl0caC4DURpRDr3Oky5x5SNk8b1AZvR381iyJM227iTIx7xw+oabXeXaF2X2QG2
2DkBM0B5VeywcvnNzWEBYaL31Q9eTZ5PSIGQSEzGdgmXWyKMqDjZOuKvY1f85vrC
svckEFwsUF7V4oxkcVVFHVDYpmdPn5HbigTmp+ne22o/tYJg+w4+Vr3CjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUFso93cV+qz7NMtAXxdGRSblOpMB8GA1UdIwQY
MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt
NDRlYTY0NzIxYzllLzEvTlFXeWozZHhYNnJQczB5MEJmRjBaRkp1VTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll
LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVIqMA0G
CSqGSIb3DQEBCwUAA4IBAQCakbihSEeHl78f2fN6JjbaPr1vwqScDxPfhy1u8mjy
rnpvt8Guxab8rBNps1afnUyspM5LcSjGno6QcFA39Q3mEPcAtrJqRfOpQNm1Bolw
GO14eg8uXJqQceaYlxdCF5mM38kmgKCmgK9UfFg+XBAc2dmEzWJ9sGtsN8PNq3h4
7tzQCmvQg/jNBRBzrbtqsbHQki5NnwK5VsiMTBcYMFwZcfbi2LRhJm8YuZcmmxrO
O+29TRaoi++qiaJ8yfxgx544G8OI4hpFui/63J4Ff1fewNDChrTz8C8HbUg4xG+y
+BdsPVzAcbwZtcQPfYvzviTfeu9CRz4tnsfHU0sN4c3K
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:25 2025 by rpki-client