Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/N749z2dkpDzAhwSqqEV6Nz_j9mg.roa
File: N749z2dkpDzAhwSqqEV6Nz_j9mg.roa (raw, json)
Hash identifier: f1bkv1dmchjWMh/eobz5m/Ih6wuR970H864IoNhM550=
Subject key identifier: 37:BE:3D:CF:67:64:A4:3C:C0:87:04:AA:A8:45:7A:37:3F:E3:F6:68
Certificate issuer: /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial: 018D64BA21578EAE8167F44E4FC8922379C3
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/N749z2dkpDzAhwSqqEV6Nz_j9mg.roa
Signing time: Thu 01 Feb 2024 12:52:16 +0000
ROA not before: Thu 01 Feb 2024 12:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215946
IP address blocks: 185.120.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:ba:21:57:8e:ae:81:67:f4:4e:4f:c8:92:23:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Validity
Not Before: Feb 1 12:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37be3dcf6764a43cc08704aaa8457a373fe3f668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:fd:56:c7:68:1a:4c:a4:06:e6:60:aa:d8:
e7:ed:dc:17:42:d8:60:f3:61:ab:7d:ee:d9:04:21:
f1:95:47:a9:82:c5:f2:20:a4:f7:7a:16:be:6e:e1:
10:75:ca:09:93:1f:81:69:9e:75:6a:e3:05:da:4c:
47:b5:5b:6f:3b:23:a3:55:b3:a0:a2:a8:50:71:6f:
7b:95:26:04:e4:d8:8d:45:f4:82:97:76:91:70:87:
36:7b:9c:48:81:8a:0f:95:73:30:50:c4:55:aa:1a:
2b:d8:53:9f:0a:d0:d9:8c:76:33:53:18:f1:ea:93:
40:0e:67:49:a1:1c:fb:1f:69:91:14:55:a9:c8:f9:
e9:75:f3:b2:3e:49:40:32:67:b7:86:42:47:9e:2c:
77:79:80:ec:c3:f7:5e:11:a7:c4:47:ec:e7:83:4d:
e5:54:11:8d:c1:e7:9b:2f:2a:50:5d:a8:e6:b7:79:
87:7a:68:8c:ac:3f:54:f3:3d:0f:08:da:2c:c8:ad:
1b:08:d2:02:6b:3f:e2:e1:62:05:83:45:eb:0c:05:
2a:e3:a1:e2:59:79:1e:54:d5:bc:a3:c8:4c:b1:a0:
5c:ee:c4:6c:b2:8a:4e:e8:41:fd:58:30:80:03:bb:
d7:66:52:68:5c:60:ae:be:ec:76:ff:fd:ee:fd:d9:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:3D:CF:67:64:A4:3C:C0:87:04:AA:A8:45:7A:37:3F:E3:F6:68
X509v3 Authority Key Identifier:
keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/N749z2dkpDzAhwSqqEV6Nz_j9mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.39.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f1:71:97:ff:35:84:73:e3:20:d3:95:97:2f:e0:9c:43:6c:
60:67:7d:86:6e:1c:c6:7f:4f:74:cb:a8:99:91:57:6e:59:e4:
04:80:45:6f:05:d6:25:6a:c6:e6:11:07:c7:49:75:45:44:aa:
42:2d:5f:ae:fb:d0:cf:0b:f8:d6:30:c9:fe:df:54:b6:54:f8:
d3:43:94:97:59:ad:27:0c:46:fd:26:07:f9:4b:90:66:2b:a8:
c3:f3:d8:bd:8f:63:86:e7:3f:75:f3:7d:8d:55:dc:ba:98:3d:
30:aa:2c:06:06:e9:06:48:65:ca:2c:79:22:a0:0d:05:fb:ca:
42:b6:5d:50:ef:b1:9b:13:60:6d:84:13:ee:89:40:ff:bd:6e:
cf:d9:3a:76:6d:f8:63:76:1d:8c:c7:23:de:82:8b:87:c7:80:
85:e6:8e:6b:7b:89:52:8d:05:9e:ab:2b:f5:c9:cf:75:d0:db:
3c:0b:2b:c8:5c:76:61:b4:a5:57:e0:5e:63:a8:37:c8:74:35:
c9:76:27:49:3c:b1:37:60:e4:0b:12:70:0b:e9:26:93:47:5b:
1d:6b:fc:18:0e:f2:6c:e2:23:38:9b:6e:4a:96:0f:18:83:47:
d0:fe:4c:52:d9:c9:60:f9:d6:18:7e:6a:1a:76:94:13:7f:b9:
c5:95:8c:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1kuiFXjq6BZ/ROT8iSI3nDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTUwZGQ3OGYwM2M3MTEwNGQ1ZDFhMjYwNThhOTIwNzI0
ZTg1OWUwHhcNMjQwMjAxMTI1MjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2JlM2RjZjY3NjRhNDNjYzA4NzA0YWFhODQ1N2EzNzNmZTNmNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHP9VsdoGkykBuZgqtjn7dwXQthg
82Grfe7ZBCHxlUepgsXyIKT3eha+buEQdcoJkx+BaZ51auMF2kxHtVtvOyOjVbOg
oqhQcW97lSYE5NiNRfSCl3aRcIc2e5xIgYoPlXMwUMRVqhor2FOfCtDZjHYzUxjx
6pNADmdJoRz7H2mRFFWpyPnpdfOyPklAMme3hkJHnix3eYDsw/deEafER+zng03l
VBGNweebLypQXajmt3mHemiMrD9U8z0PCNosyK0bCNICaz/i4WIFg0XrDAUq46Hi
WXkeVNW8o8hMsaBc7sRssopO6EH9WDCAA7vXZlJoXGCuvux2//3u/dl2uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDe+Pc9nZKQ8wIcEqqhFejc/4/ZoMB8GA1UdIwQY
MBaAFHGlDdePA8cRBNXRomBYqSByToWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FVTjE0OER4eEVFMWRHaVlGaXBJSEpPaFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mY2VjNWMtODhlZi00ZDExLTk3NTQt
ZmRiZmE1YjZiMzczLzEvTjc0OXoyZGtwRHpBaHdTcXFFVjZOel9qOW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mY2VjNWMtODhlZi00ZDExLTk3NTQtZmRiZmE1YjZiMzcz
LzEvY2FVTjE0OER4eEVFMWRHaVlGaXBJSEpPaFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXgnMA0G
CSqGSIb3DQEBCwUAA4IBAQAy8XGX/zWEc+Mg05WXL+CcQ2xgZ32GbhzGf090y6iZ
kVduWeQEgEVvBdYlasbmEQfHSXVFRKpCLV+u+9DPC/jWMMn+31S2VPjTQ5SXWa0n
DEb9Jgf5S5BmK6jD89i9j2OG5z91832NVdy6mD0wqiwGBukGSGXKLHkioA0F+8pC
tl1Q77GbE2BthBPuiUD/vW7P2Tp2bfhjdh2MxyPegouHx4CF5o5re4lSjQWeqyv1
yc910Ns8CyvIXHZhtKVX4F5jqDfIdDXJdidJPLE3YOQLEnAL6SaTR1sda/wYDvJs
4iM4m25Klg8Yg0fQ/kxS2clg+dYYfmoadpQTf7nFlYzN
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:45 2025 by rpki-client