Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa
File: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (raw, json)
Hash identifier: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=
Subject key identifier: 36:63:E4:A2:22:A6:CE:F7:F1:AF:6B:44:F2:A5:7C:F8:22:19:9C:2A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 019425FCEBF815861B72B57E050A343A61BE
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa
Signing time: Thu 02 Jan 2025 07:48:39 +0000
ROA not before: Thu 02 Jan 2025 07:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3308
IP address blocks: 62.44.128.0/18 maxlen: 18
62.198.0.0/15 maxlen: 15
85.235.224.0/19 maxlen: 19
89.233.0.0/18 maxlen: 18
89.233.0.0/24 maxlen: 24
185.223.12.0/22 maxlen: 22
194.19.128.0/18 maxlen: 18
194.19.192.0/19 maxlen: 19
194.255.0.0/16 maxlen: 16
195.184.96.0/19 maxlen: 19
212.97.192.0/18 maxlen: 18
213.150.32.0/19 maxlen: 19
213.173.224.0/19 maxlen: 19
217.74.128.0/19 maxlen: 19
2a01:3a0::/29 maxlen: 29
2a01:3a0::/32 maxlen: 32
2a01:3a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:eb:f8:15:86:1b:72:b5:7e:05:0a:34:3a:61:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jan 2 07:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3663e4a222a6cef7f1af6b44f2a57cf822199c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:e1:47:e2:80:b5:74:a8:62:fc:98:34:46:
14:f0:2c:85:2e:f1:e5:6f:f7:4c:90:67:8b:63:85:
83:16:9e:c8:4a:b9:05:a3:a3:99:c5:4c:0f:81:e7:
33:d7:f5:a6:d4:93:f7:9d:65:9c:93:fe:22:99:67:
c2:5c:3e:b8:3a:7b:b5:8f:ec:54:6c:13:64:b8:fc:
3c:ec:bd:e5:08:f3:df:88:45:be:e1:6e:6d:ac:46:
da:17:cd:70:8c:c0:af:15:a0:56:38:bf:f8:60:da:
c7:41:9f:cd:09:fb:cc:9c:d3:b1:c1:98:ae:3f:42:
24:f7:c3:97:02:82:bf:52:73:5d:d6:37:f3:0c:24:
a8:cc:7f:0c:64:2b:30:69:f2:d8:57:61:77:e2:56:
15:c5:7b:54:ac:70:40:35:bd:b8:47:59:fc:16:36:
38:c7:7e:d4:fa:20:c1:a7:5d:e5:66:4b:42:52:9a:
ab:25:f3:ad:74:e0:a7:6e:ab:4c:e7:4a:ed:fe:11:
2e:7b:e0:cf:bb:17:a1:62:04:bb:c3:69:48:34:b4:
3b:85:76:09:34:51:87:54:7d:2f:88:e4:f6:87:68:
41:7f:c2:6e:40:3c:4f:e1:c4:50:29:49:23:a4:57:
c1:14:f8:54:70:d2:c0:ab:6e:f6:aa:1a:34:85:c4:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:63:E4:A2:22:A6:CE:F7:F1:AF:6B:44:F2:A5:7C:F8:22:19:9C:2A
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.128.0/18
62.198.0.0/15
85.235.224.0/19
89.233.0.0/18
185.223.12.0/22
194.19.128.0-194.19.223.255
194.255.0.0/16
195.184.96.0/19
212.97.192.0/18
213.150.32.0/19
213.173.224.0/19
217.74.128.0/19
IPv6:
2a01:3a0::/29
Signature Algorithm: sha256WithRSAEncryption
cd:86:57:25:09:fb:3e:17:5d:86:6f:fb:08:83:16:0d:6f:55:
a2:f1:86:f5:64:e1:ea:ac:c4:6a:60:8d:43:96:d7:fc:d9:a6:
63:f6:fc:e3:10:b4:42:53:54:d9:64:20:35:de:81:31:89:45:
33:85:f2:6e:51:06:f4:ef:09:84:b0:f1:c0:a0:05:30:ae:74:
0c:0f:01:43:c2:32:8c:93:8d:c8:c3:61:35:e0:df:69:7f:47:
ea:3b:f1:70:b4:bd:61:2a:8f:f7:4d:0c:44:a6:5c:6f:bb:cf:
f1:3f:15:0d:06:79:cb:eb:9c:57:cb:f0:30:e9:da:14:ac:f0:
c7:b1:3e:49:c2:2f:28:82:94:c8:8c:6f:33:f9:d2:03:81:df:
60:96:31:f1:97:55:a3:be:69:11:4f:8a:ce:69:8e:a4:5b:ea:
d3:03:16:1c:79:66:e5:63:24:bf:86:af:a3:78:c4:15:79:8a:
69:40:fd:2e:e5:7b:b3:52:d7:82:9a:30:37:45:e5:96:34:58:
42:51:dd:33:f0:3b:cd:49:6e:5c:46:ab:2e:f0:da:1b:00:27:
36:7c:f4:63:96:89:12:57:1c:a8:ec:3b:40:09:ac:80:85:56:
c8:f8:e2:fc:ea:41:5c:80:bc:1b:c8:8f:c1:51:33:0e:9e:99:
e5:94:d6:c0
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZQl/Ov4FYYbcrV+BQo0OmG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm
MmE1NmEwHhcNMjUwMTAyMDc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjYzZTRhMjIyYTZjZWY3ZjFhZjZiNDRmMmE1N2NmODIyMTk5YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviThR+KAtXSoYvyYNEYU8CyFLvHl
b/dMkGeLY4WDFp7ISrkFo6OZxUwPgecz1/Wm1JP3nWWck/4imWfCXD64Onu1j+xU
bBNkuPw87L3lCPPfiEW+4W5trEbaF81wjMCvFaBWOL/4YNrHQZ/NCfvMnNOxwZiu
P0Ik98OXAoK/UnNd1jfzDCSozH8MZCswafLYV2F34lYVxXtUrHBANb24R1n8FjY4
x37U+iDBp13lZktCUpqrJfOtdOCnbqtM50rt/hEue+DPuxehYgS7w2lINLQ7hXYJ
NFGHVH0viOT2h2hBf8JuQDxP4cRQKUkjpFfBFPhUcNLAq272qho0hcTyXwIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFDZj5KIips738a9rRPKlfPgiGZwqMB8GA1UdIwQY
MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt
NjNjZDNjODYxZDhlLzEvTm1Qa29pS216dmZ4cjJ0RThxVjgtQ0labkNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl
LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQGPiyAAwMB
PsYDBAVV6+ADBAZZ6QADBAK53wwwDAMEB8ITgAMEBcITwAMDAML/AwQFw7hgAwQG
1GHAAwQF1ZYgAwQF1a3gAwQF2UqAMA0EAgACMAcDBQMqAQOgMA0GCSqGSIb3DQEB
CwUAA4IBAQDNhlclCfs+F12Gb/sIgxYNb1Wi8Yb1ZOHqrMRqYI1Dltf82aZj9vzj
ELRCU1TZZCA13oExiUUzhfJuUQb07wmEsPHAoAUwrnQMDwFDwjKMk43Iw2E14N9p
f0fqO/FwtL1hKo/3TQxEplxvu8/xPxUNBnnL65xXy/Aw6doUrPDHsT5Jwi8ogpTI
jG8z+dIDgd9gljHxl1WjvmkRT4rOaY6kW+rTAxYceWblYyS/hq+jeMQVeYppQP0u
5XuzUteCmjA3ReWWNFhCUd0z8DvNSW5cRqsu8NobACc2fPRjlokSVxyo7DtACayA
hVbI+OL86kFcgLwbyI/BUTMOnpnllNbA
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:37 2025 by rpki-client