Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/N5iXnoyJAb9yc441VVIV6-g3k7Q.roa
File: N5iXnoyJAb9yc441VVIV6-g3k7Q.roa (raw, json)
Hash identifier: MiiPAqBD2oSlBLLjDrBO9gzfsFqOXFVjyLOe7SXvpVM=
Subject key identifier: 37:98:97:9E:8C:89:01:BF:72:73:8E:35:55:52:15:EB:E8:37:93:B4
Certificate issuer: /CN=9727a708d5144437e4760512e8455c5fa5c37a54
Certificate serial: 0924F547
Authority key identifier: 97:27:A7:08:D5:14:44:37:E4:76:05:12:E8:45:5C:5F:A5:C3:7A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyenCNUURDfkdgUS6EVcX6XDelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/N5iXnoyJAb9yc441VVIV6-g3k7Q.roa
Signing time: Sat 01 Jan 2022 01:59:34 +0000
ROA not before: Sat 01 Jan 2022 01:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 93.92.224.0/22 maxlen: 24
185.119.236.0/22 maxlen: 24
85.117.244.0/22 maxlen: 24
188.208.20.0/22 maxlen: 24
2a06:8840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153417031 (0x924f547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9727a708d5144437e4760512e8455c5fa5c37a54
Validity
Not Before: Jan 1 01:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3798979e8c8901bf72738e35555215ebe83793b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:d1:de:dc:60:d6:88:da:f6:98:b3:44:34:
01:af:34:43:7a:78:0b:6e:0c:89:97:09:c7:4b:4f:
27:ed:7d:0b:f2:53:a8:87:7e:49:02:c8:9d:05:aa:
d5:64:0b:9c:0d:16:be:57:8c:c0:e2:b1:1d:ef:c7:
3d:3e:76:85:bf:9f:18:e6:f1:47:92:14:2c:6c:88:
57:af:bf:ca:bd:4b:a4:11:74:75:1e:e5:76:fa:5e:
a9:d1:d0:d8:5b:5f:22:ce:2e:8d:ba:c2:94:be:7e:
0e:05:ce:02:9b:21:05:60:55:32:86:c5:09:6e:6a:
cb:f9:a4:e5:41:83:63:ca:e5:69:3c:fe:83:57:6b:
0f:74:42:6a:b2:f2:6c:e8:e4:36:3f:18:19:3d:fa:
aa:5b:7b:77:d9:06:02:31:fa:09:68:0c:0e:e6:b3:
3b:ea:e1:8b:9b:87:77:1e:0d:51:fd:31:96:59:81:
73:32:7c:af:0e:56:3a:0f:e2:21:25:10:1f:ff:1d:
f4:25:4d:dd:9a:09:ed:08:f4:14:50:48:f3:64:63:
73:a2:34:5e:4f:d6:80:c0:1f:1a:26:d8:c1:cc:f2:
f7:ba:36:52:be:ac:d1:3d:e6:c8:01:25:c1:5c:28:
e8:2c:e3:89:e9:ce:b2:ba:d4:43:37:86:2b:bf:74:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:97:9E:8C:89:01:BF:72:73:8E:35:55:52:15:EB:E8:37:93:B4
X509v3 Authority Key Identifier:
keyid:97:27:A7:08:D5:14:44:37:E4:76:05:12:E8:45:5C:5F:A5:C3:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyenCNUURDfkdgUS6EVcX6XDelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/N5iXnoyJAb9yc441VVIV6-g3k7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/lyenCNUURDfkdgUS6EVcX6XDelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.244.0/22
93.92.224.0/22
185.119.236.0/22
188.208.20.0/22
IPv6:
2a06:8840::/29
Signature Algorithm: sha256WithRSAEncryption
37:24:59:4f:85:8c:d9:6c:e8:aa:a7:83:d3:1d:fc:a2:53:04:
4c:62:fd:0d:fd:96:57:56:76:c8:6a:26:22:52:84:91:78:2b:
9f:44:5b:25:67:39:76:fd:08:cf:45:f0:f5:c7:90:fc:e2:d9:
36:28:66:1b:a0:1f:0e:5d:51:29:dd:d5:95:ee:26:3a:81:34:
0b:86:80:db:a7:82:23:66:85:37:95:1d:e3:bc:d7:a1:ef:fb:
b5:37:8f:fd:03:21:c8:b3:ca:9b:94:74:e0:b9:3d:db:35:9a:
b0:f3:2f:18:f7:e0:5f:a2:2d:83:15:2f:68:c6:46:d4:36:0c:
3a:2a:64:79:39:26:dd:41:e1:8c:ea:b1:ed:42:77:2b:c9:46:
ae:54:00:97:6f:88:d3:05:dc:3c:1c:ff:52:a1:c1:76:c2:9d:
b6:6a:66:73:7b:09:a7:23:b8:ab:df:3a:a8:f0:c1:a7:a6:16:
0e:b5:c6:f0:9f:5a:e6:b1:2c:b7:2d:ea:4c:50:e7:cb:4e:8b:
83:18:4c:f9:fb:d6:cb:c5:13:15:7a:e8:74:1e:34:b0:3e:0b:
04:65:41:69:57:09:f8:9b:c6:1b:ef:48:db:21:73:57:d9:b3:
bb:fa:41:73:54:ab:71:05:ce:dd:25:c6:c1:6b:de:ed:cb:ac:
9e:56:01:af
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIECST1RzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NzI3YTcwOGQ1MTQ0NDM3ZTQ3NjA1MTJlODQ1NWM1ZmE1YzM3YTU0MB4XDTIyMDEw
MTAxNTkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc5ODk3OWU4Yzg5
MDFiZjcyNzM4ZTM1NTU1MjE1ZWJlODM3OTNiNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKMT0d7cYNaI2vaYs0Q0Aa80Q3p4C24MiZcJx0tPJ+19C/JT
qId+SQLInQWq1WQLnA0WvleMwOKxHe/HPT52hb+fGObxR5IULGyIV6+/yr1LpBF0
dR7ldvpeqdHQ2FtfIs4ujbrClL5+DgXOApshBWBVMobFCW5qy/mk5UGDY8rlaTz+
g1drD3RCarLybOjkNj8YGT36qlt7d9kGAjH6CWgMDuazO+rhi5uHdx4NUf0xllmB
czJ8rw5WOg/iISUQH/8d9CVN3ZoJ7Qj0FFBI82Rjc6I0Xk/WgMAfGibYwczy97o2
Ur6s0T3myAElwVwo6CzjienOsrrUQzeGK790JQECAwEAAaOCAiowggImMB0GA1Ud
DgQWBBQ3mJeejIkBv3JzjjVVUhXr6DeTtDAfBgNVHSMEGDAWgBSXJ6cI1RREN+R2
BRLoRVxfpcN6VDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2x5ZW5DTlVVUkRma2RnVVM2RVZjWDZYRGVsUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvZWI4MDMxLWU2OTQtNDIzMS1iZjEyLTcyNzA3YWI4MmU0ZC8x
L041aVhub3lKQWI5eWM0NDFWVklWNi1nM2s3US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
ZWI4MDMxLWU2OTQtNDIzMS1iZjEyLTcyNzA3YWI4MmU0ZC8xL2x5ZW5DTlVVUkRm
a2RnVVM2RVZjWDZYRGVsUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAlV19AMEAl1c4AMEArl37AMEArzQ
FDANBAIAAjAHAwUDKgaIQDANBgkqhkiG9w0BAQsFAAOCAQEANyRZT4WM2WzoqqeD
0x38olMETGL9Df2WV1Z2yGomIlKEkXgrn0RbJWc5dv0Iz0Xw9ceQ/OLZNihmG6Af
Dl1RKd3Vle4mOoE0C4aA26eCI2aFN5Ud47zXoe/7tTeP/QMhyLPKm5R04Lk92zWa
sPMvGPfgX6ItgxUvaMZG1DYMOipkeTkm3UHhjOqx7UJ3K8lGrlQAl2+I0wXcPBz/
UqHBdsKdtmpmc3sJpyO4q986qPDBp6YWDrXG8J9a5rEsty3qTFDny06LgxhM+fvW
y8UTFXrodB40sD4LBGVBaVcJ+JvGG+9I2yFzV9mzu/pBc1SrcQXO3SXGwWve7cus
nlYBrw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:55 2025 by rpki-client