Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/N2TVrNREiImgT2LReoCrJZnQbhU.roa
File: N2TVrNREiImgT2LReoCrJZnQbhU.roa (raw, json)
Hash identifier: b4GcWYH531y0Hu23G7yoXbAghXbpj1qG5kK5BjpiWUM=
Subject key identifier: 37:64:D5:AC:D4:44:88:89:A0:4F:62:D1:7A:80:AB:25:99:D0:6E:15
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 0194252215191D163AF1EBE0E6562B51FE30
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/N2TVrNREiImgT2LReoCrJZnQbhU.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199366
IP address blocks: 2.56.60.0/24 maxlen: 24
2.56.61.0/24 maxlen: 24
2.56.62.0/24 maxlen: 24
2.56.63.0/24 maxlen: 24
185.19.92.0/24 maxlen: 24
185.19.93.0/24 maxlen: 24
185.19.94.0/24 maxlen: 24
185.19.95.0/24 maxlen: 24
185.59.28.0/24 maxlen: 24
185.59.29.0/24 maxlen: 24
185.59.30.0/24 maxlen: 24
185.59.31.0/24 maxlen: 24
185.114.192.0/24 maxlen: 24
185.114.193.0/24 maxlen: 24
185.114.194.0/24 maxlen: 24
185.114.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:15:19:1d:16:3a:f1:eb:e0:e6:56:2b:51:fe:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3764d5acd4448889a04f62d17a80ab2599d06e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:59:b0:2e:e8:8c:e1:7c:fa:bc:a6:69:e8:
3f:b4:e0:09:55:f6:b6:20:93:32:bb:23:71:27:4e:
c0:aa:9f:66:6a:67:0a:93:57:ab:f6:dd:92:1e:67:
d8:d2:eb:6d:fa:d0:77:f5:f3:c9:80:05:95:ca:51:
c5:a7:1f:50:d8:f9:a8:63:67:24:4e:b1:a1:4a:e5:
f7:f0:26:08:61:c9:ff:3b:c8:d1:0f:f5:f0:85:ea:
79:f9:fd:3d:14:91:82:17:7c:69:2f:51:6d:c5:36:
29:48:36:bf:53:cb:b4:07:e3:8d:4b:c8:06:ec:d2:
fb:9a:21:f0:a1:3b:0b:48:a6:ba:16:90:f8:86:6b:
9f:49:b2:b4:8c:78:1a:49:49:66:b5:ed:58:fa:8c:
35:19:d3:f8:42:b9:90:a2:90:23:21:58:1b:a1:af:
57:f0:15:45:e1:ae:1b:13:5e:11:7a:2e:05:89:b4:
e4:40:a4:41:08:79:7a:69:97:d4:64:4f:44:7d:f8:
4f:ea:32:09:cc:b8:2c:e5:a4:df:95:56:a8:f2:50:
f5:ed:30:60:ff:76:7d:19:7d:1f:e0:22:e7:68:93:
a2:ea:d2:6a:dd:e2:85:9b:d5:ae:d0:be:69:2b:65:
e5:69:91:58:2d:77:45:be:a5:1f:7e:25:76:e1:2b:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:D5:AC:D4:44:88:89:A0:4F:62:D1:7A:80:AB:25:99:D0:6E:15
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/N2TVrNREiImgT2LReoCrJZnQbhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.60.0/22
185.19.92.0/22
185.59.28.0/22
185.114.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:53:67:26:c3:0e:01:bf:01:ad:7a:74:1f:6c:16:1a:44:45:
a4:8e:66:3c:14:44:ee:a4:d9:a6:4f:cf:e1:3b:fc:b3:d9:54:
72:3d:17:8c:4a:8d:c3:09:32:90:ce:9d:71:69:37:35:a9:1c:
29:8b:a4:71:e0:dd:a7:5d:cf:34:1e:36:fd:e6:54:22:89:d7:
2f:08:fe:14:5d:53:b1:8b:0f:7c:1d:d5:3e:f8:14:e2:60:d6:
e9:e5:56:bc:63:38:d1:9b:50:f8:02:17:7c:48:fd:19:eb:03:
32:bc:bd:96:bc:8e:b6:e0:a4:da:49:b9:af:40:a0:4c:85:cd:
80:95:de:87:3d:03:0b:d8:c5:b6:4a:15:42:fb:3e:5d:ef:85:
31:f8:9b:3a:7e:63:55:35:17:a0:37:e5:74:7e:38:4a:8f:7b:
b5:22:a6:5c:5c:e6:4c:de:0d:bf:66:ac:89:e3:bb:28:13:16:
97:ea:69:f5:97:58:a8:bb:00:54:c9:46:ed:ee:3d:16:e1:93:
24:52:59:9a:de:6f:f0:89:cd:c3:fc:10:87:bd:c4:8b:bf:03:
08:10:dc:20:a0:f4:7b:6b:34:21:a9:7d:df:a0:cc:e1:46:c1:
64:b1:be:a7:c0:89:5e:80:1e:a5:9b:71:ea:29:07:93:3e:b9:
91:20:c3:17
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQlIhUZHRY68evg5lYrUf4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0
Y2VhMDUwHhcNMjUwMTAyMDM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY0ZDVhY2Q0NDQ4ODg5YTA0ZjYyZDE3YTgwYWIyNTk5ZDA2ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudFZsC7ojOF8+rymaeg/tOAJVfa2
IJMyuyNxJ07Aqp9mamcKk1er9t2SHmfY0utt+tB39fPJgAWVylHFpx9Q2PmoY2ck
TrGhSuX38CYIYcn/O8jRD/Xwhep5+f09FJGCF3xpL1FtxTYpSDa/U8u0B+ONS8gG
7NL7miHwoTsLSKa6FpD4hmufSbK0jHgaSUlmte1Y+ow1GdP4QrmQopAjIVgboa9X
8BVF4a4bE14Rei4FibTkQKRBCHl6aZfUZE9EffhP6jIJzLgs5aTflVao8lD17TBg
/3Z9GX0f4CLnaJOi6tJq3eKFm9Wu0L5pK2XlaZFYLXdFvqUffiV24StyAwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDdk1azURIiJoE9i0XqAqyWZ0G4VMB8GA1UdIwQY
MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt
Y2QxZmE0ODQ0MTFiLzEvTjJUVnJOUkVpSW1nVDJMUmVvQ3JKWm5RYmhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi
LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAjg8AwQC
uRNcAwQCuTscAwQCuXLAMA0GCSqGSIb3DQEBCwUAA4IBAQDKU2cmww4BvwGtenQf
bBYaREWkjmY8FETupNmmT8/hO/yz2VRyPReMSo3DCTKQzp1xaTc1qRwpi6Rx4N2n
Xc80Hjb95lQiidcvCP4UXVOxiw98HdU++BTiYNbp5Va8YzjRm1D4Ahd8SP0Z6wMy
vL2WvI624KTaSbmvQKBMhc2Ald6HPQML2MW2ShVC+z5d74Ux+Js6fmNVNRegN+V0
fjhKj3u1IqZcXOZM3g2/ZqyJ47soExaX6mn1l1iouwBUyUbt7j0W4ZMkUlma3m/w
ic3D/BCHvcSLvwMIENwgoPR7azQhqX3foMzhRsFksb6nwIlegB6lm3HqKQeTPrmR
IMMX
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:30 2025 by rpki-client