Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/NboIUfQA9lXixICTfxXSRQ87r3M.roa
File: NboIUfQA9lXixICTfxXSRQ87r3M.roa (raw, json)
Hash identifier: tWCm+qqn+IKl+MEpbxX1/bLJVoMmCAvlKtZYYHdcoiU=
Subject key identifier: 35:BA:08:51:F4:00:F6:55:E2:C4:80:93:7F:15:D2:45:0F:3B:AF:73
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0195C8EBC665F88B7E829C9944DF334F3649
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/NboIUfQA9lXixICTfxXSRQ87r3M.roa
Signing time: Mon 24 Mar 2025 16:10:49 +0000
ROA not before: Mon 24 Mar 2025 16:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 31.24.224.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
37.123.112.0/24 maxlen: 24
46.23.64.0/21 maxlen: 21
46.23.72.0/22 maxlen: 22
46.23.76.0/22 maxlen: 24
77.92.64.0/19 maxlen: 23
82.163.72.0/21 maxlen: 24
83.170.64.0/18 maxlen: 24
88.202.176.0/20 maxlen: 24
88.202.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 24
109.123.64.0/18 maxlen: 24
176.67.160.0/21 maxlen: 21
176.67.169.0/24 maxlen: 24
176.67.171.0/24 maxlen: 24
176.67.172.0/22 maxlen: 24
185.7.224.0/22 maxlen: 24
2a02:2498::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:eb:c6:65:f8:8b:7e:82:9c:99:44:df:33:4f:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Mar 24 16:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ba0851f400f655e2c480937f15d2450f3baf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b4:93:38:8c:03:a8:4a:13:f9:a6:44:4d:b7:
9b:80:c8:c4:84:54:0d:ac:4f:84:3f:14:b4:89:63:
57:31:cc:40:3a:5a:46:f8:ec:58:e8:23:08:b2:f8:
05:03:1e:f6:a1:46:a5:c1:8e:cf:3e:09:0c:1a:c0:
13:42:88:0d:aa:62:44:13:5d:6d:11:b2:e8:e6:78:
02:6f:c0:06:2c:2a:c8:34:ca:db:2e:5f:61:f2:1f:
85:4f:be:34:d2:db:02:5d:22:32:86:96:cc:c6:65:
50:2b:cc:6e:15:5b:fc:77:38:86:62:04:22:25:29:
9a:bd:0b:f2:ec:ea:53:a5:f1:eb:aa:45:df:ba:4a:
9f:2b:f6:3d:f6:ab:35:de:f4:5f:9d:99:38:ad:e5:
80:da:20:4a:eb:b1:64:83:87:5a:26:f6:ac:3d:2a:
50:a4:44:aa:0e:c6:b7:31:db:97:7c:50:93:0b:c9:
29:f3:d9:59:a5:0c:db:8d:ca:1a:1a:82:7a:05:8a:
40:d0:e0:8b:a8:22:a6:18:1b:40:b1:67:1b:ad:7d:
41:45:8b:2d:2b:25:d8:13:b5:0d:cf:c4:99:59:82:
27:c8:7c:1f:70:ed:8a:96:66:9a:0f:12:28:f4:c4:
7d:f1:b2:ab:0c:35:45:6a:1b:40:ae:fb:7a:39:76:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:08:51:F4:00:F6:55:E2:C4:80:93:7F:15:D2:45:0F:3B:AF:73
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/NboIUfQA9lXixICTfxXSRQ87r3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/21
176.67.169.0/24
176.67.171.0-176.67.175.255
185.7.224.0/22
IPv6:
2a02:2498::/32
Signature Algorithm: sha256WithRSAEncryption
45:dc:06:57:e9:71:90:84:f7:2e:bb:eb:21:f5:47:46:4c:7f:
91:ee:af:5c:75:00:28:b5:f3:d5:7c:bd:29:78:1b:02:c4:12:
1c:28:5f:36:ea:c8:b9:e5:9a:01:78:1a:11:ba:ec:d3:7b:52:
71:a1:6a:86:03:45:99:fc:94:47:87:df:ea:a7:ad:0c:69:2b:
2c:79:c7:27:99:29:a5:c9:b2:94:e9:cb:0c:57:46:e4:65:b2:
bc:ae:55:e3:80:0c:05:22:db:da:18:4f:64:71:f3:93:56:80:
27:68:91:d0:41:0e:02:d4:8e:df:4a:49:01:69:a1:e1:94:3f:
ba:af:37:2f:9b:48:9c:94:a0:be:cb:06:54:79:54:d2:fa:aa:
ec:69:26:9c:aa:06:6c:e3:08:c4:43:58:24:d6:ef:6f:8f:29:
3f:a8:b5:db:ae:e1:0b:09:99:54:43:37:d7:23:2b:df:05:eb:
be:b6:84:fc:e5:b1:0c:cf:b7:5b:d5:f6:e8:cf:d2:73:47:90:
ab:63:8e:72:bf:6d:c9:79:30:ab:08:c9:4b:68:34:34:18:b8:
a7:7d:83:1a:49:2e:0b:98:5e:20:d5:33:47:76:bb:04:aa:25:
94:e0:b9:02:a7:6b:48:b9:5d:28:00:d6:69:cb:d6:29:f9:74:
57:08:8e:07
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAZXI68Zl+It+gpyZRN8zTzZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmZmZjI4OWYyZGFkMGZjMDg0NTZiMGJhZDU0ZDdiYTQ0
OWE0OTIwHhcNMjUwMzI0MTYxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWJhMDg1MWY0MDBmNjU1ZTJjNDgwOTM3ZjE1ZDI0NTBmM2JhZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bSTOIwDqEoT+aZETbebgMjEhFQN
rE+EPxS0iWNXMcxAOlpG+OxY6CMIsvgFAx72oUalwY7PPgkMGsATQogNqmJEE11t
EbLo5ngCb8AGLCrINMrbLl9h8h+FT7400tsCXSIyhpbMxmVQK8xuFVv8dziGYgQi
JSmavQvy7OpTpfHrqkXfukqfK/Y99qs13vRfnZk4reWA2iBK67Fkg4daJvasPSpQ
pESqDsa3MduXfFCTC8kp89lZpQzbjcoaGoJ6BYpA0OCLqCKmGBtAsWcbrX1BRYst
KyXYE7UNz8SZWYInyHwfcO2KlmaaDxIo9MR98bKrDDVFahtArvt6OXYCbQIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFDW6CFH0APZV4sSAk38V0kUPO69zMB8GA1UdIwQY
MBaAFBn//yifLa0PwIRWsLrVTXukSaSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMt
ZDUyNTcxOGFhNDRhLzEvTmJvSVVmUUE5bFhpeElDVGZ4WFNSUTg3cjNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMtZDUyNTcxOGFhNDRh
LzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAx8Y4AME
AyV7cAMEBC4XQAMEBU1cQAMEA1KjSAMEBlOqQAMEBFjKsAMEA1jK4AMEA1tt8AME
Bm17QAMEA7BDoAMEALBDqTAMAwQAsEOrAwQEsEOgAwQCuQfgMA0EAgACMAcDBQAq
AiSYMA0GCSqGSIb3DQEBCwUAA4IBAQBF3AZX6XGQhPcuu+sh9UdGTH+R7q9cdQAo
tfPVfL0peBsCxBIcKF826si55ZoBeBoRuuzTe1JxoWqGA0WZ/JRHh9/qp60MaSss
eccnmSmlybKU6csMV0bkZbK8rlXjgAwFItvaGE9kcfOTVoAnaJHQQQ4C1I7fSkkB
aaHhlD+6rzcvm0iclKC+ywZUeVTS+qrsaSacqgZs4wjEQ1gk1u9vjyk/qLXbruEL
CZlUQzfXIyvfBeu+toT85bEMz7db1fboz9JzR5CrY45yv23JeTCrCMlLaDQ0GLin
fYMaSS4LmF4g1TNHdrsEqiWU4LkCp2tIuV0oANZpy9Yp+XRXCI4H
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:11:27 2025 by rpki-client