Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/npsIECKksHquuWzDi0zH7kfikNY.roa
File: npsIECKksHquuWzDi0zH7kfikNY.roa (raw, json)
Hash identifier: tDejnZ5vC0ALnpFBUuTvBRuI7iXba56GkVp1B7KYwZ8=
Subject key identifier: 9E:9B:08:10:22:A4:B0:7A:AE:B9:6C:C3:8B:4C:C7:EE:47:E2:90:D6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019425FE59EC080346AE76FA3A65A1801000
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/npsIECKksHquuWzDi0zH7kfikNY.roa
Signing time: Thu 02 Jan 2025 07:50:13 +0000
ROA not before: Thu 02 Jan 2025 07:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.47.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fe:59:ec:08:03:46:ae:76:fa:3a:65:a1:80:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 2 07:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e9b081022a4b07aaeb96cc38b4cc7ee47e290d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:87:8b:9b:75:92:5a:44:57:c8:fa:be:4b:
a7:ae:e5:af:ac:d6:2d:90:21:bc:ad:2c:07:64:af:
58:1e:10:5c:91:6b:b6:50:ae:ba:75:18:35:38:8a:
00:75:2e:93:93:89:22:01:c1:25:62:b5:b3:87:0c:
f4:ca:c0:cc:87:69:34:0a:47:18:46:4d:12:7e:45:
3d:52:f3:fa:fa:7d:2e:8b:5b:22:7a:60:ca:42:c2:
d6:0a:0f:78:d9:78:a5:35:0b:e6:f2:c5:7d:67:14:
d1:4a:87:e3:e0:a0:bd:cf:15:c9:ae:af:83:ae:b4:
21:0d:1d:3b:33:2d:cc:55:da:ca:f1:1d:dd:5a:62:
57:ee:04:38:19:75:72:56:3b:df:3d:cc:9a:80:a7:
3a:01:e2:18:6a:c1:39:ee:66:1d:58:4e:9f:ed:0c:
63:ba:fe:6f:f5:d4:5e:bf:a1:48:5a:80:de:63:68:
46:ec:83:4d:8a:91:3b:7c:5f:47:3e:b0:24:4d:08:
eb:af:b5:ef:4d:07:d3:b8:9e:2a:db:25:b8:d7:5c:
70:5b:77:00:ab:60:26:c0:96:a8:64:c4:8b:f3:9f:
b1:6d:47:0d:bb:6a:cb:ec:89:eb:8f:67:ba:dd:7d:
6b:78:ee:2d:39:23:ad:87:58:2c:a7:cc:81:96:46:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:08:10:22:A4:B0:7A:AE:B9:6C:C3:8B:4C:C7:EE:47:E2:90:D6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/npsIECKksHquuWzDi0zH7kfikNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4c:d7:db:5b:6a:69:43:b9:34:e4:45:20:5c:ae:4c:d2:f2:
ad:d6:bb:39:a6:7e:cc:3e:51:8d:56:34:71:cb:35:4f:1a:ac:
0e:d0:8d:57:5a:6c:90:bf:26:2f:ed:e8:c4:73:cb:e1:c7:0e:
7b:c6:70:3c:2e:dc:6c:92:94:64:32:7e:b4:24:5a:75:42:06:
66:c8:bf:73:2f:e8:ac:29:f3:1a:b1:8a:fc:9a:8d:4b:43:76:
18:3f:1f:4b:0c:2c:33:3b:fb:bb:43:75:d5:ad:a9:a9:10:b8:
b2:32:45:de:ad:f4:b9:14:3d:30:ca:a9:8d:8b:1e:68:e8:09:
48:91:44:08:a1:9e:76:16:fe:47:cd:5a:57:6e:73:85:5b:b0:
83:22:f1:9e:7c:cc:6a:77:e0:c7:d0:84:3f:e3:d2:c2:22:41:
07:94:7e:f0:9c:be:a1:27:bc:f3:da:ad:6a:7b:c9:5e:37:29:
b3:fc:16:8f:3e:4e:ea:17:ad:f8:34:ec:44:84:e2:df:94:ca:
40:25:82:25:cd:fa:98:eb:8c:05:fa:fb:1d:fb:bd:68:0c:cf:
61:6b:3c:3c:40:6c:e6:f0:88:48:68:16:40:c3:f8:88:0f:9d:
39:58:aa:b9:21:51:ce:fb:df:89:14:a3:03:9d:17:b5:52:2f:
bc:60:f8:3a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQl/lnsCANGrnb6OmWhgBAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAyMDc1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTliMDgxMDIyYTRiMDdhYWViOTZjYzM4YjRjYzdlZTQ3ZTI5MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9iHi5t1klpEV8j6vkunruWvrNYt
kCG8rSwHZK9YHhBckWu2UK66dRg1OIoAdS6Tk4kiAcElYrWzhwz0ysDMh2k0CkcY
Rk0SfkU9UvP6+n0ui1siemDKQsLWCg942XilNQvm8sV9ZxTRSofj4KC9zxXJrq+D
rrQhDR07My3MVdrK8R3dWmJX7gQ4GXVyVjvfPcyagKc6AeIYasE57mYdWE6f7Qxj
uv5v9dRev6FIWoDeY2hG7INNipE7fF9HPrAkTQjrr7XvTQfTuJ4q2yW411xwW3cA
q2AmwJaoZMSL85+xbUcNu2rL7Inrj2e63X1reO4tOSOth1gsp8yBlkbb+wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJ6bCBAipLB6rrlsw4tMx+5H4pDWMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvbnBzSUVDS2tzSHF1dVd6RGkwekg3a2Zpa05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZKlED
BAJZKlADBABZL3YwDQYJKoZIhvcNAQELBQADggEBADtM19tbamlDuTTkRSBcrkzS
8q3Wuzmmfsw+UY1WNHHLNU8arA7QjVdabJC/Ji/t6MRzy+HHDnvGcDwu3GySlGQy
frQkWnVCBmbIv3Mv6Kwp8xqxivyajUtDdhg/H0sMLDM7+7tDddWtqakQuLIyRd6t
9LkUPTDKqY2LHmjoCUiRRAihnnYW/kfNWlduc4VbsIMi8Z58zGp34MfQhD/j0sIi
QQeUfvCcvqEnvPParWp7yV43KbP8Fo8+TuoXrfg07ESE4t+UykAlgiXN+pjrjAX6
+x37vWgMz2FrPDxAbObwiEhoFkDD+IgPnTlYqrkhUc7734kUowOdF7VSL7xg+Do=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:32 2025 by rpki-client