Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/NaSNw-5nplSi1oWgCIXAtq-282g.roa
File: NaSNw-5nplSi1oWgCIXAtq-282g.roa (raw, json)
Hash identifier: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=
Subject key identifier: 35:A4:8D:C3:EE:67:A6:54:A2:D6:85:A0:08:85:C0:B6:AF:B6:F3:68
Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial: 019422FBB854C31CE1F61868CEA8D0E0BC53
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/NaSNw-5nplSi1oWgCIXAtq-282g.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.222.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b8:54:c3:1c:e1:f6:18:68:ce:a8:d0:e0:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35a48dc3ee67a654a2d685a00885c0b6afb6f368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:42:c0:d5:d9:67:b6:20:7e:0a:86:50:76:
fd:9c:6d:e2:57:4d:c5:c3:de:6f:d5:a9:49:e6:d4:
3a:9a:15:2f:f5:56:08:06:d6:b1:49:f0:4a:10:59:
69:8c:32:57:e0:c1:de:3a:d8:4e:34:1e:5c:be:61:
43:07:4e:14:95:cc:6d:48:b2:b3:a8:5a:29:97:bc:
e0:cf:c8:12:b1:90:ea:25:26:d0:5c:81:e2:bb:25:
9d:69:e5:ec:4a:e9:20:69:56:69:7f:a2:1f:0f:b6:
5f:02:0c:1f:97:39:b0:bd:93:61:f9:a9:e6:cf:48:
fe:b2:81:ae:ed:37:79:5d:18:00:43:9f:88:54:e8:
cf:40:65:28:9b:40:7e:d0:13:99:36:b0:9d:b4:e2:
7a:04:d3:d9:99:1b:57:39:9b:45:a2:4d:35:f6:a5:
fb:4a:6b:78:30:73:9b:a2:1b:75:3c:95:89:ef:b8:
d9:2c:0d:6d:dd:19:83:68:fb:b3:a7:38:b1:a3:57:
d1:6f:d3:6a:c7:a3:19:24:cd:10:42:3d:5b:e5:3e:
55:d8:98:db:60:82:6d:c0:c8:6f:c9:c6:7a:f4:d2:
f2:e3:9f:f1:5e:b7:1a:e9:2c:2f:3b:99:d6:f7:49:
1e:d6:f3:b0:47:77:9b:01:f7:c0:c7:5a:b8:b6:a6:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:8D:C3:EE:67:A6:54:A2:D6:85:A0:08:85:C0:B6:AF:B6:F3:68
X509v3 Authority Key Identifier:
keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/NaSNw-5nplSi1oWgCIXAtq-282g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.106.0/23
Signature Algorithm: sha256WithRSAEncryption
97:55:57:64:c5:15:9c:a0:3b:74:8f:95:e9:0b:3f:0a:42:b7:
11:50:75:d0:b2:fd:ac:9e:7e:18:3c:90:be:99:bb:5e:e2:a8:
72:b0:9e:4c:f7:fb:e6:f4:13:27:ab:5e:5c:91:e5:92:b6:57:
82:9a:79:30:9a:bc:94:bd:82:42:d1:ef:de:02:ae:6d:af:25:
73:a2:b7:07:d3:24:98:3b:a3:19:2f:88:61:dd:95:d8:93:de:
dd:7d:60:74:73:fa:e2:53:ef:bf:93:64:24:87:50:84:e0:63:
aa:5f:78:75:47:6b:76:a7:7e:14:a0:da:3d:5d:bd:03:fb:cc:
d3:3a:ac:6e:7d:a0:ed:91:ab:76:37:bf:df:78:1e:00:3b:46:
f4:28:65:d5:ad:25:09:37:80:8d:c0:e8:1a:49:5a:dc:91:93:
2e:ec:af:3b:c5:c1:b0:01:9b:2d:b2:1e:09:ad:c2:43:ed:3b:
ff:cd:ef:62:90:5a:17:70:c8:5a:f5:d1:e2:74:b3:12:10:e5:
17:b8:f5:c2:cd:c8:c9:4e:d9:32:49:7b:58:1b:9b:40:13:62:
10:64:ee:f4:c9:c5:c8:63:df:c0:fc:a3:45:04:61:67:39:be:
ef:e7:5d:be:c2:f3:16:2f:66:18:3d:d2:b1:de:3c:93:22:97:
10:c9:54:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+7hUwxzh9hhozqjQ4LxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNmQ5NWQ4ODM2YzFmMTE2YTcxZWUyMWRlYzBmZjY3MWUx
ZTA3MGQwHhcNMjUwMTAxMTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWE0OGRjM2VlNjdhNjU0YTJkNjg1YTAwODg1YzBiNmFmYjZmMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2NCwNXZZ7YgfgqGUHb9nG3iV03F
w95v1alJ5tQ6mhUv9VYIBtaxSfBKEFlpjDJX4MHeOthONB5cvmFDB04UlcxtSLKz
qFopl7zgz8gSsZDqJSbQXIHiuyWdaeXsSukgaVZpf6IfD7ZfAgwflzmwvZNh+anm
z0j+soGu7Td5XRgAQ5+IVOjPQGUom0B+0BOZNrCdtOJ6BNPZmRtXOZtFok019qX7
Smt4MHOboht1PJWJ77jZLA1t3RmDaPuzpzixo1fRb9Nqx6MZJM0QQj1b5T5V2Jjb
YIJtwMhvycZ69NLy45/xXrca6SwvO5nW90ke1vOwR3ebAffAx1q4tqZX7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWkjcPuZ6ZUotaFoAiFwLavtvNoMB8GA1UdIwQY
MBaAFDFtldiDbB8RanHuId7A/2ceHgcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEt
MTIzNzIwYmZlNzQ2LzEvTmFTTnctNW5wbFNpMW9XZ0NJWEF0cS0yODJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEtMTIzNzIwYmZlNzQ2
LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwd5qMA0G
CSqGSIb3DQEBCwUAA4IBAQCXVVdkxRWcoDt0j5XpCz8KQrcRUHXQsv2snn4YPJC+
mbte4qhysJ5M9/vm9BMnq15ckeWStleCmnkwmryUvYJC0e/eAq5tryVzorcH0ySY
O6MZL4hh3ZXYk97dfWB0c/riU++/k2Qkh1CE4GOqX3h1R2t2p34UoNo9Xb0D+8zT
OqxufaDtkat2N7/feB4AO0b0KGXVrSUJN4CNwOgaSVrckZMu7K87xcGwAZstsh4J
rcJD7Tv/ze9ikFoXcMha9dHidLMSEOUXuPXCzcjJTtkySXtYG5tAE2IQZO70ycXI
Y9/A/KNFBGFnOb7v512+wvMWL2YYPdKx3jyTIpcQyVTh
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:25 2025 by rpki-client