Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/ngj_j58zHfPbbf9JsQ4k_xRXjAM.roa
File: ngj_j58zHfPbbf9JsQ4k_xRXjAM.roa (raw, json)
Hash identifier: TwaYCj3AP+Kx1K7tX3y/IkH6FCr8bn6E/Ti741i+5pw=
Subject key identifier: 9E:08:FF:8F:9F:33:1D:F3:DB:6D:FF:49:B1:0E:24:FF:14:57:8C:03
Certificate issuer: /CN=9a3df0ed749abcb8ab94a80e6938d08e7f567b23
Certificate serial: 0183F7ABC33B59C2AD6CF455D7A77C91D93C
Authority key identifier: 9A:3D:F0:ED:74:9A:BC:B8:AB:94:A8:0E:69:38:D0:8E:7F:56:7B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mj3w7XSavLirlKgOaTjQjn9WeyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/ngj_j58zHfPbbf9JsQ4k_xRXjAM.roa
Signing time: Thu 20 Oct 2022 23:12:52 +0000
ROA not before: Thu 20 Oct 2022 23:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 109.107.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f7:ab:c3:3b:59:c2:ad:6c:f4:55:d7:a7:7c:91:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3df0ed749abcb8ab94a80e6938d08e7f567b23
Validity
Not Before: Oct 20 23:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e08ff8f9f331df3db6dff49b10e24ff14578c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:1c:25:66:c3:e9:23:62:87:45:0e:95:ae:
50:ea:89:27:91:a6:3c:3b:d6:11:5c:84:7d:8b:46:
df:ac:82:8c:81:25:bc:ae:a4:0b:c6:34:cf:ab:46:
38:51:3c:38:48:b5:63:28:11:38:71:51:d7:28:cc:
f7:71:f8:3a:a1:cd:97:f4:b2:13:27:40:7b:d2:ef:
de:91:3c:b9:92:14:b7:a9:48:16:70:e2:49:c7:19:
95:20:55:17:4e:bf:27:39:c0:65:d4:5f:b8:b1:b0:
f7:cd:08:37:b3:ec:a7:67:f3:9d:fa:55:c9:6b:db:
5f:99:00:f6:e0:13:6c:1b:50:d7:bb:b1:10:0d:20:
c1:2d:d8:fe:cf:4c:ad:a8:bb:c7:c0:94:b3:1c:a4:
7c:eb:5a:96:74:09:5e:30:10:ec:5d:dc:16:a8:5e:
c7:2b:81:9c:89:a4:be:f2:33:4b:91:72:60:27:ff:
83:84:b6:38:4b:3a:d2:4f:9a:b9:45:19:8a:2d:a0:
32:30:06:23:29:53:76:14:d3:bb:1c:f1:aa:e0:13:
f0:b6:a8:b3:59:7f:53:da:b4:a1:6b:0b:a5:13:3b:
85:36:00:4a:ec:80:05:b9:64:ce:36:ec:7a:df:90:
60:b4:ca:74:c2:37:39:0d:95:52:25:99:2a:a5:88:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:FF:8F:9F:33:1D:F3:DB:6D:FF:49:B1:0E:24:FF:14:57:8C:03
X509v3 Authority Key Identifier:
keyid:9A:3D:F0:ED:74:9A:BC:B8:AB:94:A8:0E:69:38:D0:8E:7F:56:7B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mj3w7XSavLirlKgOaTjQjn9WeyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/ngj_j58zHfPbbf9JsQ4k_xRXjAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/72c406-5fbb-4ba6-8e78-f4a0f175fc25/1/mj3w7XSavLirlKgOaTjQjn9WeyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.149.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7a:0b:d6:d4:c0:b1:13:35:6d:1c:d7:e7:03:cd:a1:df:78:
87:92:57:aa:3e:59:c7:26:9e:73:f4:f7:a6:10:cc:0d:55:21:
ac:c3:f1:81:d3:bc:16:ae:1f:d0:a1:1f:7c:ab:fd:b2:5b:97:
69:76:f7:ae:76:a2:1a:a2:ac:89:dc:10:f7:58:bd:f7:96:cb:
c3:cf:64:7f:74:e9:39:f2:29:b3:24:48:03:bb:bf:80:2b:1f:
60:e5:6e:af:5d:7e:40:08:c9:49:b4:d5:e2:d1:24:10:4b:c2:
2f:b2:0b:1b:6c:18:cc:a0:b6:93:8c:0e:90:5d:ba:f8:b8:12:
55:ad:88:12:1c:19:40:f1:28:5b:08:0a:3d:a8:6e:ca:5d:9c:
c2:51:99:42:5e:23:07:d5:8c:81:b2:0e:7a:71:53:9f:22:1e:
87:1d:76:0d:ed:b2:70:d7:69:1f:46:b7:42:92:a5:e0:cb:17:
1c:f5:b4:92:17:42:4a:ce:95:d6:ff:15:0b:53:c3:71:b4:d5:
b5:c0:c1:4a:93:e9:41:2b:7f:71:66:4c:96:59:1e:79:b5:6b:
68:c5:76:00:88:f4:2e:86:e2:4e:c1:cb:c1:75:d6:a1:b8:4b:
4d:82:cf:f9:6e:99:82:39:b0:77:98:1f:78:0d:7a:6c:70:c6:
42:53:d6:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP3q8M7WcKtbPRV16d8kdk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhM2RmMGVkNzQ5YWJjYjhhYjk0YTgwZTY5MzhkMDhlN2Y1
NjdiMjMwHhcNMjIxMDIwMjMxMjUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTA4ZmY4ZjlmMzMxZGYzZGI2ZGZmNDliMTBlMjRmZjE0NTc4YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0cJWbD6SNih0UOla5Q6oknkaY8
O9YRXIR9i0bfrIKMgSW8rqQLxjTPq0Y4UTw4SLVjKBE4cVHXKMz3cfg6oc2X9LIT
J0B70u/ekTy5khS3qUgWcOJJxxmVIFUXTr8nOcBl1F+4sbD3zQg3s+ynZ/Od+lXJ
a9tfmQD24BNsG1DXu7EQDSDBLdj+z0ytqLvHwJSzHKR861qWdAleMBDsXdwWqF7H
K4GciaS+8jNLkXJgJ/+DhLY4SzrST5q5RRmKLaAyMAYjKVN2FNO7HPGq4BPwtqiz
WX9T2rShawulEzuFNgBK7IAFuWTONux635BgtMp0wjc5DZVSJZkqpYhCDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4I/4+fMx3z223/SbEOJP8UV4wDMB8GA1UdIwQY
MBaAFJo98O10mry4q5SoDmk40I5/VnsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWozdzdYU2F2TGlybEtnT2FUalFqbjlXZXlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MmM0MDYtNWZiYi00YmE2LThlNzgt
ZjRhMGYxNzVmYzI1LzEvbmdqX2o1OHpIZlBiYmY5SnNRNGtfeFJYakFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83MmM0MDYtNWZiYi00YmE2LThlNzgtZjRhMGYxNzVmYzI1
LzEvbWozdzdYU2F2TGlybEtnT2FUalFqbjlXZXlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuVMA0G
CSqGSIb3DQEBCwUAA4IBAQBpegvW1MCxEzVtHNfnA82h33iHkleqPlnHJp5z9Pem
EMwNVSGsw/GB07wWrh/QoR98q/2yW5dpdveudqIaoqyJ3BD3WL33lsvDz2R/dOk5
8imzJEgDu7+AKx9g5W6vXX5ACMlJtNXi0SQQS8IvsgsbbBjMoLaTjA6QXbr4uBJV
rYgSHBlA8ShbCAo9qG7KXZzCUZlCXiMH1YyBsg56cVOfIh6HHXYN7bJw12kfRrdC
kqXgyxcc9bSSF0JKzpXW/xULU8NxtNW1wMFKk+lBK39xZkyWWR55tWtoxXYAiPQu
huJOwcvBddahuEtNgs/5bpmCObB3mB94DXpscMZCU9av
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:40 2024 by rpki-client on console-fra.rpki-client.org