Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/N8ETInNRV9IWJSLdgE8UETazPY8.roa
File: N8ETInNRV9IWJSLdgE8UETazPY8.roa (raw, json)
Hash identifier: OOapCgIoaVPw9lFwLDuhOitFdVWquIiW8sv2XSxYn4E=
Subject key identifier: 37:C1:13:22:73:51:57:D2:16:25:22:DD:80:4F:14:11:36:B3:3D:8F
Certificate issuer: /CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Certificate serial: 0182207DB3E4A39E3493F099D32808A5AA71
Authority key identifier: D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/N8ETInNRV9IWJSLdgE8UETazPY8.roa
Signing time: Thu 21 Jul 2022 11:21:25 +0000
ROA not before: Thu 21 Jul 2022 11:21:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 176.97.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:7d:b3:e4:a3:9e:34:93:f0:99:d3:28:08:a5:aa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Validity
Not Before: Jul 21 11:21:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37c11322735157d2162522dd804f141136b33d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:1f:96:74:64:cb:12:c1:7b:d7:12:49:ab:
c5:c9:b6:41:bd:3d:5d:18:45:1a:ea:da:7a:49:3f:
80:d3:d4:92:fc:7f:3d:ef:57:71:45:5f:79:32:99:
6c:91:c3:1e:4b:4b:5e:39:c1:14:81:8a:97:66:e4:
30:0e:96:e7:f2:1b:a6:21:e6:7e:3b:9f:e1:82:ca:
4f:29:c9:6b:d7:ed:6c:d8:4d:7c:a2:a5:02:dd:c8:
69:b1:f4:44:19:d6:02:6a:70:87:b4:2b:bd:51:29:
e2:af:4d:00:13:a2:03:ad:1e:6c:7e:d8:7c:ed:cf:
fe:e1:2a:33:63:e8:41:ac:10:db:6a:b7:19:54:8b:
52:53:69:92:32:2b:1d:2b:b5:bb:12:20:a6:a0:db:
e7:f4:6d:bd:d9:ce:48:5c:7f:58:a4:5a:77:be:75:
48:55:24:1b:b0:63:b1:96:18:f4:0f:26:53:14:dc:
e0:e6:98:98:85:a2:48:9b:64:b3:8b:83:79:63:4f:
48:a4:58:bb:8d:98:dd:f4:f7:73:b5:41:bd:38:61:
bf:af:b1:d2:b9:a7:3b:d7:50:97:5b:93:73:7e:c7:
6e:8f:65:8e:be:38:11:92:ca:a9:38:0d:21:41:5b:
22:90:b3:33:10:00:2b:35:b1:73:07:5c:02:1a:f0:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:13:22:73:51:57:D2:16:25:22:DD:80:4F:14:11:36:B3:3D:8F
X509v3 Authority Key Identifier:
keyid:D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/N8ETInNRV9IWJSLdgE8UETazPY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7d:da:39:f8:a9:6d:5a:cd:08:4a:e0:c6:80:89:c4:6d:15:
0f:34:d3:7b:65:d0:e1:21:10:53:e0:31:9b:16:2b:09:8c:73:
44:6f:81:f7:91:33:d1:cc:f1:b4:28:55:d7:ff:70:06:95:5d:
49:f9:c9:7e:3d:a3:5d:b1:7d:10:e6:9e:39:43:30:c5:97:62:
d1:a1:da:3a:76:65:84:fe:3b:5e:6d:cb:5e:91:e6:71:82:3f:
03:37:f1:15:33:78:57:ae:3c:c2:c4:36:a4:f1:d8:2f:9a:52:
2a:42:e0:b7:b6:8e:e1:74:90:37:5a:3f:4c:6a:79:57:4d:64:
18:6d:ac:2c:c8:cf:52:b0:13:7d:64:09:4b:72:39:a3:79:8c:
73:f8:ff:cc:33:65:8e:f1:5c:17:47:4a:72:56:c3:25:10:3f:
3e:b0:9e:62:0a:9c:85:4a:32:d1:48:cf:56:50:6e:88:ee:57:
78:60:30:cc:71:ef:3e:6b:24:51:af:d4:2c:8b:bb:e8:79:d5:
77:01:6a:8a:0c:a5:14:0f:08:25:fc:6e:3e:61:31:0e:be:e7:
a3:97:6e:b0:09:53:90:02:6b:6e:82:81:20:b0:f2:48:f1:09:
37:4b:52:28:02:be:e8:ae:2a:f2:10:31:e9:fc:0d:80:0c:19:
74:16:a7:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgfbPko540k/CZ0ygIpapxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNzNiMjg1Nzk2MzRkZDkwOGM0ZWYyMTZlMDVjZWI2YmRm
OTlmNzcwHhcNMjIwNzIxMTEyMTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2MxMTMyMjczNTE1N2QyMTYyNTIyZGQ4MDRmMTQxMTM2YjMzZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7YflnRkyxLBe9cSSavFybZBvT1d
GEUa6tp6ST+A09SS/H8971dxRV95MplskcMeS0teOcEUgYqXZuQwDpbn8humIeZ+
O5/hgspPKclr1+1s2E18oqUC3chpsfREGdYCanCHtCu9USnir00AE6IDrR5sfth8
7c/+4SozY+hBrBDbarcZVItSU2mSMisdK7W7EiCmoNvn9G292c5IXH9YpFp3vnVI
VSQbsGOxlhj0DyZTFNzg5piYhaJIm2Szi4N5Y09IpFi7jZjd9PdztUG9OGG/r7HS
uac711CXW5Nzfsduj2WOvjgRksqpOA0hQVsikLMzEAArNbFzB1wCGvD7cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfBEyJzUVfSFiUi3YBPFBE2sz2PMB8GA1UdIwQY
MBaAFNFzsoV5Y03ZCMTvIW4Fzra9+Z93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhPeWhYbGpUZGtJeE84aGJnWE90cjM1bjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kY2IyY2QtNDAzYi00NjcxLWE5NjUt
N2M5MjI3YWRjMTI2LzEvTjhFVEluTlJWOUlXSlNMZGdFOFVFVGF6UFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kY2IyY2QtNDAzYi00NjcxLWE5NjUtN2M5MjI3YWRjMTI2
LzEvMFhPeWhYbGpUZGtJeE84aGJnWE90cjM1bjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHbMA0G
CSqGSIb3DQEBCwUAA4IBAQA8fdo5+KltWs0ISuDGgInEbRUPNNN7ZdDhIRBT4DGb
FisJjHNEb4H3kTPRzPG0KFXX/3AGlV1J+cl+PaNdsX0Q5p45QzDFl2LRodo6dmWE
/jtebctekeZxgj8DN/EVM3hXrjzCxDak8dgvmlIqQuC3to7hdJA3Wj9ManlXTWQY
bawsyM9SsBN9ZAlLcjmjeYxz+P/MM2WO8VwXR0pyVsMlED8+sJ5iCpyFSjLRSM9W
UG6I7ld4YDDMce8+ayRRr9Qsi7voedV3AWqKDKUUDwgl/G4+YTEOvuejl26wCVOQ
AmtugoEgsPJI8Qk3S1IoAr7oriryEDHp/A2ADBl0Fqcw
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:25 2025 by rpki-client