Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Ngago5xydQXn8EljYnQRJsPfPSQ.roa
File: Ngago5xydQXn8EljYnQRJsPfPSQ.roa (raw, json)
Hash identifier: awb2Qqqf5jTME6Mi/k48AB0AFWHo4yAHTfMjcn+P6Bc=
Subject key identifier: 36:06:A0:A3:9C:72:75:05:E7:F0:49:63:62:74:11:26:C3:DF:3D:24
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 019137C5F0A9F571636C11EC9AB2096EF8AB
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Ngago5xydQXn8EljYnQRJsPfPSQ.roa
Signing time: Fri 09 Aug 2024 15:33:24 +0000
ROA not before: Fri 09 Aug 2024 15:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.79.0/24 maxlen: 24
77.81.80.0/23 maxlen: 24
128.65.172.0/22 maxlen: 24
194.26.2.0/24 maxlen: 24
194.26.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:37:c5:f0:a9:f5:71:63:6c:11:ec:9a:b2:09:6e:f8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Aug 9 15:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3606a0a39c727505e7f0496362741126c3df3d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:93:16:13:bb:82:db:43:fa:09:de:05:d3:
0e:cd:68:dc:51:65:f2:41:b1:ed:e9:67:2d:d0:ca:
d6:c0:0e:53:88:ac:4c:1a:74:85:f1:f8:4e:7d:b5:
22:f9:4a:26:2d:4e:3b:cc:ff:ef:c3:be:98:3c:6c:
1b:14:1e:72:2c:ac:b2:92:74:48:c9:56:34:d6:3d:
25:1b:04:d4:d2:2e:23:1d:33:93:7e:4a:61:0b:19:
cd:59:27:3e:db:87:3f:55:be:a1:64:17:c9:1d:40:
ef:35:74:e5:71:df:e8:d1:28:5f:9e:3a:ae:a5:05:
7d:39:a7:b0:e4:15:15:ca:4b:30:eb:bd:88:70:51:
2b:40:b8:de:07:07:8d:c9:26:a5:ca:88:46:5f:82:
59:d1:50:1f:71:b2:3a:cb:35:a8:dd:43:c7:be:f6:
0c:07:4a:2a:f3:20:03:94:f1:5d:7a:5e:7c:64:0b:
22:11:dc:e4:90:27:69:f5:84:73:21:c6:24:42:88:
7f:5d:90:92:e5:9e:b1:2d:a3:58:0c:cd:0c:a9:44:
6d:82:64:13:4a:89:52:9f:43:aa:05:3a:39:8f:5c:
f9:1e:cc:c6:f6:37:c0:cf:84:96:62:c7:ed:bf:91:
86:ab:91:aa:b1:28:24:68:75:e1:ef:83:b7:88:31:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:06:A0:A3:9C:72:75:05:E7:F0:49:63:62:74:11:26:C3:DF:3D:24
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Ngago5xydQXn8EljYnQRJsPfPSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0-77.81.81.255
128.65.172.0/22
194.26.2.0/24
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
21:58:34:0b:2e:61:0d:ef:ee:fa:ef:7b:80:c5:e6:ec:c9:d7:
94:28:df:ab:7b:14:d5:21:0f:fe:5c:db:42:be:b0:13:5e:6b:
c6:b3:b2:dc:bf:35:d4:a2:22:e1:68:cd:3d:34:f7:4b:f1:60:
a1:22:dc:76:b5:50:5b:34:51:09:e2:13:a7:d8:ac:3c:94:81:
f8:57:ab:4b:46:80:59:92:32:90:e0:90:55:ae:27:be:5b:9b:
2f:53:93:6d:d9:7f:db:01:e5:e6:ac:be:08:67:20:75:ca:66:
62:90:a9:0f:2d:12:84:cf:09:14:e6:20:d2:5d:ba:ba:81:c3:
d6:45:9d:e9:1e:59:59:7b:fa:fc:ce:d4:74:ed:3c:00:34:92:
99:8f:25:8e:11:9a:b6:97:fd:da:67:a6:6d:94:00:12:fa:c9:
bb:f7:3f:a4:f2:95:6d:b3:49:20:b3:7c:cd:e8:eb:66:e9:f3:
23:d6:c7:68:08:b3:aa:5e:51:54:77:5f:24:4f:2a:e0:ef:06:
c2:14:20:6f:33:eb:44:ef:c7:d0:c3:5d:97:60:0e:4b:ce:26:
a1:4c:82:12:3b:65:4d:db:12:25:76:34:04:2d:e2:aa:55:36:
d0:92:da:c9:4e:e1:ca:b8:1d:04:0e:c3:ea:f9:31:73:d1:55:
10:1d:60:72
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZE3xfCp9XFjbBHsmrIJbvirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjQwODA5MTUzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjA2YTBhMzljNzI3NTA1ZTdmMDQ5NjM2Mjc0MTEyNmMzZGYzZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDaTFhO7gttD+gneBdMOzWjcUWXy
QbHt6Wct0MrWwA5TiKxMGnSF8fhOfbUi+UomLU47zP/vw76YPGwbFB5yLKyyknRI
yVY01j0lGwTU0i4jHTOTfkphCxnNWSc+24c/Vb6hZBfJHUDvNXTlcd/o0Shfnjqu
pQV9Oaew5BUVyksw672IcFErQLjeBweNySalyohGX4JZ0VAfcbI6yzWo3UPHvvYM
B0oq8yADlPFdel58ZAsiEdzkkCdp9YRzIcYkQoh/XZCS5Z6xLaNYDM0MqURtgmQT
SolSn0OqBTo5j1z5HszG9jfAz4SWYsftv5GGq5GqsSgkaHXh74O3iDH1lwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDYGoKOccnUF5/BJY2J0ESbD3z0kMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvTmdhZ281eHlkUVhuOEVsalluUVJKc1BmUFNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBABNUU8D
BAFNUVADBAKAQawDBADCGgIDBADCGhUwDQYJKoZIhvcNAQELBQADggEBACFYNAsu
YQ3v7vrve4DF5uzJ15Qo36t7FNUhD/5c20K+sBNea8azsty/NdSiIuFozT0090vx
YKEi3Ha1UFs0UQniE6fYrDyUgfhXq0tGgFmSMpDgkFWuJ75bmy9Tk23Zf9sB5eas
vghnIHXKZmKQqQ8tEoTPCRTmINJdurqBw9ZFnekeWVl7+vzO1HTtPAA0kpmPJY4R
mraX/dpnpm2UABL6ybv3P6TylW2zSSCzfM3o62bp8yPWx2gIs6peUVR3XyRPKuDv
BsIUIG8z60Tvx9DDXZdgDkvOJqFMghI7ZU3bEiV2NAQt4qpVNtCS2slO4cq4HQQO
w+r5MXPRVRAdYHI=
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:04:28 2025 by rpki-client