Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/nwc2tDL5RP83Eniz4UeOkL4Hcpw.roa
File: nwc2tDL5RP83Eniz4UeOkL4Hcpw.roa (raw, json)
Hash identifier: i18+5N/j0onXs9f5APj2Dpj831foKmBj6uzI3Vk4R9g=
Subject key identifier: 9F:07:36:B4:32:F9:44:FF:37:12:78:B3:E1:47:8E:90:BE:07:72:9C
Certificate issuer: /CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Certificate serial: 01836550A84A6DD18FC9C83978CDE0FC4027
Authority key identifier: 25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/nwc2tDL5RP83Eniz4UeOkL4Hcpw.roa
Signing time: Thu 22 Sep 2022 13:08:48 +0000
ROA not before: Thu 22 Sep 2022 13:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 146.19.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:50:a8:4a:6d:d1:8f:c9:c8:39:78:cd:e0:fc:40:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Validity
Not Before: Sep 22 13:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f0736b432f944ff371278b3e1478e90be07729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:90:c4:23:14:65:0d:ad:4e:0e:a7:83:14:
fe:e3:da:a7:dd:b3:92:d6:24:01:6a:8e:c9:e6:46:
3b:0d:96:44:11:af:d4:a5:11:c0:7a:eb:80:72:e9:
e4:4a:b2:7f:9b:c5:37:88:6e:1b:9e:fe:5b:76:42:
03:22:f2:d1:95:e6:3d:a5:8d:a6:44:da:87:47:40:
4f:cd:60:32:0c:61:ab:d2:5b:04:e8:b7:0b:77:ae:
b9:08:63:71:97:c0:d7:cd:20:32:18:5b:56:26:de:
b7:c8:71:3d:b1:51:09:88:e3:10:bb:f2:51:27:a0:
ff:90:0b:48:aa:0c:78:13:c1:d0:13:1e:89:ca:27:
db:5d:b0:33:20:87:3e:84:9d:23:07:2b:fc:2a:d2:
75:f8:9a:79:53:fe:3f:14:43:f3:6c:bf:5d:fb:35:
99:f2:1d:66:3c:56:ec:80:c4:05:19:31:f2:8d:cb:
72:96:38:0b:47:69:60:9c:b4:6e:bc:6f:cf:62:8f:
e0:b5:62:8b:be:34:fc:9b:ae:a3:3d:b2:32:c5:c5:
86:63:1b:29:e7:a1:1f:14:32:e8:09:1f:59:37:d9:
cf:45:7e:8e:e2:a2:a6:9a:60:b4:b2:39:74:b3:66:
54:17:8f:21:54:67:b0:84:f5:7c:be:17:13:72:ca:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:36:B4:32:F9:44:FF:37:12:78:B3:E1:47:8E:90:BE:07:72:9C
X509v3 Authority Key Identifier:
keyid:25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/nwc2tDL5RP83Eniz4UeOkL4Hcpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bb:79:b9:bb:0e:45:c7:98:8d:e4:64:98:ee:9e:3f:65:92:
47:27:5d:56:72:f7:15:90:1b:60:92:9d:1a:77:52:04:5c:9d:
dc:e4:a6:5d:e9:07:55:10:18:9b:e9:f9:77:32:77:49:6e:f8:
61:13:36:e7:3b:64:c0:63:59:b9:4c:6d:26:5c:92:68:40:f9:
5e:1c:db:35:2c:0a:13:f3:02:fa:8a:33:23:0b:09:df:22:40:
42:58:81:00:83:d2:19:5f:d8:ac:fd:05:f3:d3:4c:38:16:17:
2f:86:f7:2a:80:8f:f0:65:18:ed:bf:c6:a1:8c:0e:c9:20:ba:
d9:09:6f:74:54:a2:eb:57:09:36:6b:f1:57:0c:b6:98:82:62:
d9:33:1c:9e:23:7b:f4:b3:df:0c:4c:ad:27:c4:62:a4:fc:fb:
87:48:f6:cb:7b:05:28:d6:81:03:d1:22:48:ec:ab:fe:14:3e:
1a:d8:68:5a:af:49:94:e1:4f:66:70:eb:7f:e1:6b:20:a4:1f:
85:72:b3:a3:f6:8c:ac:90:b3:ef:b0:dd:bd:17:6c:c8:84:5a:
7e:5c:6b:53:73:6a:b9:c5:cf:fe:69:02:00:db:e0:4f:5f:d8:
a2:01:b6:eb:25:ef:af:a7:3a:01:42:b1:43:d3:37:24:e8:fb:
1c:82:55:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNlUKhKbdGPycg5eM3g/EAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YjgxNDA5MjM4MGY1OGRjNmJhNmUwNzQzMmY5YmRiNTdi
NGM3ZjcwHhcNMjIwOTIyMTMwODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjA3MzZiNDMyZjk0NGZmMzcxMjc4YjNlMTQ3OGU5MGJlMDc3MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57SQxCMUZQ2tTg6ngxT+49qn3bOS
1iQBao7J5kY7DZZEEa/UpRHAeuuAcunkSrJ/m8U3iG4bnv5bdkIDIvLRleY9pY2m
RNqHR0BPzWAyDGGr0lsE6LcLd665CGNxl8DXzSAyGFtWJt63yHE9sVEJiOMQu/JR
J6D/kAtIqgx4E8HQEx6JyifbXbAzIIc+hJ0jByv8KtJ1+Jp5U/4/FEPzbL9d+zWZ
8h1mPFbsgMQFGTHyjctyljgLR2lgnLRuvG/PYo/gtWKLvjT8m66jPbIyxcWGYxsp
56EfFDLoCR9ZN9nPRX6O4qKmmmC0sjl0s2ZUF48hVGewhPV8vhcTcsonYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8HNrQy+UT/NxJ4s+FHjpC+B3KcMB8GA1UdIwQY
MBaAFCW4FAkjgPWNxrpuB0Mvm9tXtMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJnVUNTT0E5WTNHdW00SFF5LWIyMWUweF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lMzBlMjktZGMyYy00ZjBhLTg4M2Yt
MTEzOGE1Y2VlZGZmLzEvbndjMnRETDVSUDgzRW5pejRVZU9rTDRIY3B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lMzBlMjktZGMyYy00ZjBhLTg4M2YtMTEzOGE1Y2VlZGZm
LzEvSmJnVUNTT0E5WTNHdW00SFF5LWIyMWUweF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNmMA0G
CSqGSIb3DQEBCwUAA4IBAQAsu3m5uw5Fx5iN5GSY7p4/ZZJHJ11WcvcVkBtgkp0a
d1IEXJ3c5KZd6QdVEBib6fl3MndJbvhhEzbnO2TAY1m5TG0mXJJoQPleHNs1LAoT
8wL6ijMjCwnfIkBCWIEAg9IZX9is/QXz00w4FhcvhvcqgI/wZRjtv8ahjA7JILrZ
CW90VKLrVwk2a/FXDLaYgmLZMxyeI3v0s98MTK0nxGKk/PuHSPbLewUo1oED0SJI
7Kv+FD4a2Ghar0mU4U9mcOt/4WsgpB+FcrOj9oyskLPvsN29F2zIhFp+XGtTc2q5
xc/+aQIA2+BPX9iiAbbrJe+vpzoBQrFD0zck6PscglXX
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:04 2025 by rpki-client