Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NAsVaZeqOYtsRXT2_gpDioHFi1s.roa
File: NAsVaZeqOYtsRXT2_gpDioHFi1s.roa (raw, json)
Hash identifier: AUfOgMdlZpuQH+lZUgNaq4RQX1UFQqykpRfmQdSdTcE=
Subject key identifier: 34:0B:15:69:97:AA:39:8B:6C:45:74:F6:FE:0A:43:8A:81:C5:8B:5B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274819D7CB7491BA98396F463559CA82
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NAsVaZeqOYtsRXT2_gpDioHFi1s.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:19:d7:cb:74:91:ba:98:39:6f:46:35:59:ca:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=340b156997aa398b6c4574f6fe0a438a81c58b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:78:33:80:f8:08:c7:45:45:0c:4b:07:7b:
11:e0:a3:f0:89:fd:6d:eb:83:a4:ec:c6:17:44:6d:
c2:50:38:d4:32:b4:87:40:8c:7a:3b:e4:ff:64:0f:
0d:26:fa:6d:ce:cb:01:96:ae:47:4e:81:9c:60:a6:
d2:96:80:0f:6c:5f:09:b5:be:90:4f:1a:39:10:73:
f9:7e:b3:c7:38:1c:31:3d:27:0f:b0:6d:c9:7a:3e:
1e:a7:74:ed:36:3d:24:5d:98:e8:f8:3a:32:75:c2:
2a:e8:bf:bb:c4:f2:3f:d0:59:d1:44:75:7f:be:52:
1e:8f:60:f3:76:c6:b2:c2:05:c3:11:02:2d:f8:bf:
48:d2:11:1a:bf:05:eb:1a:29:51:f3:55:4c:31:6f:
d2:7d:64:ae:36:54:57:48:e8:dd:51:13:d7:e2:af:
c7:98:df:d1:28:48:89:db:2c:f1:4c:e7:71:61:73:
de:d6:6f:0c:df:c2:05:9f:ea:ac:b6:49:6c:28:00:
1f:1d:3e:2b:5e:af:4b:8c:1f:d6:4a:37:55:8a:00:
ac:91:48:0d:50:0b:05:19:2b:12:e6:6f:68:72:3a:
20:c3:9a:81:a9:d1:22:97:eb:e5:c5:b8:ce:f1:8e:
a3:cb:68:9d:16:f9:2c:37:d5:65:76:aa:9b:0e:4c:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:15:69:97:AA:39:8B:6C:45:74:F6:FE:0A:43:8A:81:C5:8B:5B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NAsVaZeqOYtsRXT2_gpDioHFi1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:d4:fd:e4:e5:df:64:61:7c:88:7e:88:d6:ee:60:8f:80:df:
2c:b5:af:40:91:27:af:35:1a:af:ac:9c:45:a4:a8:09:ba:f8:
0c:8d:8a:38:2a:c2:e8:de:03:1c:bb:13:83:2b:94:65:56:91:
f7:ec:47:85:52:e7:04:08:7f:1d:fd:04:56:51:bf:0f:3e:c6:
fc:0a:33:be:55:bc:4a:c2:ed:19:9f:9b:ce:c5:95:27:47:63:
21:ea:04:ff:5b:73:0c:5c:52:35:dc:d5:58:aa:32:f4:fe:45:
5f:c3:1a:81:08:6d:66:69:a1:e2:92:55:e7:38:94:48:0d:69:
88:85:6a:32:c7:a4:d6:fc:23:e2:2f:b0:a9:00:7e:e6:84:7c:
31:7c:cd:18:f9:9d:88:d1:5f:9c:dd:a9:ec:16:45:84:ec:5d:
26:2d:29:b2:60:b2:8a:4f:6b:b4:d3:4b:f8:22:2d:04:b2:26:
e1:2b:6a:e4:2c:f5:48:ca:52:e6:0c:5e:8d:6c:e4:46:09:09:
6e:30:53:16:20:7a:c6:ee:af:fc:24:f8:cb:1d:9c:cb:44:1e:
41:db:f7:93:c0:cc:42:98:0e:48:dc:bf:94:4e:c4:6c:cf:db:
32:b3:17:e8:e2:90:c4:76:d7:f1:98:81:9e:06:8b:94:4e:9f:
97:0a:7b:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSBnXy3SRupg5b0Y1WcqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTAyMTM1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDBiMTU2OTk3YWEzOThiNmM0NTc0ZjZmZTBhNDM4YTgxYzU4YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY54M4D4CMdFRQxLB3sR4KPwif1t
64Ok7MYXRG3CUDjUMrSHQIx6O+T/ZA8NJvptzssBlq5HToGcYKbSloAPbF8Jtb6Q
Txo5EHP5frPHOBwxPScPsG3Jej4ep3TtNj0kXZjo+DoydcIq6L+7xPI/0FnRRHV/
vlIej2DzdsaywgXDEQIt+L9I0hEavwXrGilR81VMMW/SfWSuNlRXSOjdURPX4q/H
mN/RKEiJ2yzxTOdxYXPe1m8M38IFn+qstklsKAAfHT4rXq9LjB/WSjdVigCskUgN
UAsFGSsS5m9ocjogw5qBqdEil+vlxbjO8Y6jy2idFvksN9VldqqbDkzsQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDQLFWmXqjmLbEV09v4KQ4qBxYtbMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTkFzVmFaZXFPWXRzUlhUMl9ncERpb0hGaTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYF/AwQB
Xb72MA0GCSqGSIb3DQEBCwUAA4IBAQBv1P3k5d9kYXyIfojW7mCPgN8sta9AkSev
NRqvrJxFpKgJuvgMjYo4KsLo3gMcuxODK5RlVpH37EeFUucECH8d/QRWUb8PPsb8
CjO+VbxKwu0Zn5vOxZUnR2Mh6gT/W3MMXFI13NVYqjL0/kVfwxqBCG1maaHiklXn
OJRIDWmIhWoyx6TW/CPiL7CpAH7mhHwxfM0Y+Z2I0V+c3ansFkWE7F0mLSmyYLKK
T2u000v4Ii0EsibhK2rkLPVIylLmDF6NbORGCQluMFMWIHrG7q/8JPjLHZzLRB5B
2/eTwMxCmA5I3L+UTsRsz9sysxfo4pDEdtfxmIGeBouUTp+XCnte
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:48:15 2025 by rpki-client