Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nNKvfHAuvUMW-GGWOQsCilALtu4.roa
File: nNKvfHAuvUMW-GGWOQsCilALtu4.roa (raw, json)
Hash identifier: VrLFyghH7SBym3Hk2rgLbqLTCxp5sQ77omiQr48UKNU=
Subject key identifier: 9C:D2:AF:7C:70:2E:BD:43:16:F8:61:96:39:0B:02:8A:50:0B:B6:EE
Certificate issuer: /CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Certificate serial: 018C6C97082DB6618B5E81005E3CAB966DE9
Authority key identifier: 9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nNKvfHAuvUMW-GGWOQsCilALtu4.roa
Signing time: Fri 15 Dec 2023 08:28:06 +0000
ROA not before: Fri 15 Dec 2023 08:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15435
IP address blocks: 213.184.96.0/19 maxlen: 24
62.45.0.0/16 maxlen: 24
83.128.0.0/16 maxlen: 24
2a0f:900::/29 maxlen: 48
2001:4c38::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:97:08:2d:b6:61:8b:5e:81:00:5e:3c:ab:96:6d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Validity
Not Before: Dec 15 08:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cd2af7c702ebd4316f86196390b028a500bb6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:59:1c:3e:41:55:70:d4:de:eb:79:9f:d4:e9:
f5:81:ce:27:15:ed:05:b4:f5:04:e3:8a:b7:ed:82:
5d:ee:68:74:7c:ac:f0:ef:2a:dd:24:e6:69:6f:9c:
07:4a:2d:9b:2d:ed:61:92:51:84:d1:3c:44:dc:7e:
34:f1:dc:d9:28:6d:78:b3:8b:21:82:32:de:df:5e:
4c:be:dd:40:e8:07:8f:3f:6f:86:fc:04:61:bc:bd:
f2:ed:bb:ed:87:fc:ab:7b:1d:72:5e:e4:c6:b1:bc:
7c:df:24:fb:56:22:c3:b8:d6:98:f6:85:69:9b:23:
2e:6e:c3:81:a3:a2:d4:cf:6f:6d:8a:50:a4:e3:d5:
a6:cc:51:92:f7:82:09:78:56:76:68:ef:e8:4e:6b:
e2:8e:50:e7:de:16:59:4e:44:b0:e0:b6:2e:99:1e:
4b:d2:cf:cf:65:61:8d:61:36:08:61:89:cc:b4:2a:
29:f4:04:88:a3:cb:6d:cd:e3:6d:f6:86:ef:6f:cd:
67:58:f6:72:f4:0c:cf:cd:68:66:b8:70:b3:4a:ba:
6e:93:4e:04:7a:7c:1a:2f:de:91:7c:39:a4:56:77:
38:bc:30:4d:5a:f6:d6:31:3b:97:dd:38:96:a1:8b:
e5:7b:c9:53:56:6a:fe:88:e1:ff:46:64:29:b2:23:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:AF:7C:70:2E:BD:43:16:F8:61:96:39:0B:02:8A:50:0B:B6:EE
X509v3 Authority Key Identifier:
keyid:9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nNKvfHAuvUMW-GGWOQsCilALtu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.45.0.0/16
83.128.0.0/16
213.184.96.0/19
IPv6:
2001:4c38::/29
2a0f:900::/29
Signature Algorithm: sha256WithRSAEncryption
39:9c:c3:70:31:07:ea:40:64:2f:7b:f3:63:84:32:b3:7c:25:
3b:68:f7:4e:8d:69:66:a7:8b:2d:75:20:18:d4:70:9c:38:93:
cf:5e:19:0d:2a:45:e5:e4:dd:a9:b1:26:ff:7b:28:68:49:74:
3d:f2:8b:c9:04:1d:e3:85:48:d6:4d:08:ab:b1:f9:47:b8:83:
cf:37:0a:7c:40:ec:fc:e7:2f:49:e2:1d:fb:c8:21:33:34:44:
70:13:bc:69:da:47:6c:00:c3:8c:bc:16:1f:1b:6c:e6:8e:6a:
c6:7b:a3:94:56:85:69:c2:c7:16:9c:4d:60:2c:f9:cc:dd:1c:
5d:6c:73:c9:97:b3:ae:ef:01:5a:7f:19:8c:90:31:a6:cd:e6:
22:bd:39:60:53:41:b8:76:eb:0c:5f:04:7d:7c:68:10:b7:89:
53:28:d1:58:25:63:41:15:7f:86:67:c5:bc:ec:c0:29:b9:a2:
f4:7e:47:bb:5a:be:c7:4f:c4:7b:02:ca:92:3d:98:d3:f6:07:
c7:04:93:eb:0b:35:e3:f6:44:8a:dc:f9:62:d0:56:1f:0a:8e:
e0:48:54:8e:6f:07:ca:4e:c8:06:06:7a:8a:bf:7f:c0:81:8f:
9f:3f:98:c4:f1:13:2f:7e:f2:4b:24:8b:ef:73:a3:03:8b:39:
24:f0:79:00
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYxslwgttmGLXoEAXjyrlm3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTZlNDI3MmUyY2UzODdiNGNjMDRiMTQzZjczMzA5ZDcx
MzYyOWIwHhcNMjMxMjE1MDgyODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2QyYWY3YzcwMmViZDQzMTZmODYxOTYzOTBiMDI4YTUwMGJiNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglkcPkFVcNTe63mf1On1gc4nFe0F
tPUE44q37YJd7mh0fKzw7yrdJOZpb5wHSi2bLe1hklGE0TxE3H408dzZKG14s4sh
gjLe315Mvt1A6AePP2+G/ARhvL3y7bvth/yrex1yXuTGsbx83yT7ViLDuNaY9oVp
myMubsOBo6LUz29tilCk49WmzFGS94IJeFZ2aO/oTmvijlDn3hZZTkSw4LYumR5L
0s/PZWGNYTYIYYnMtCop9ASIo8ttzeNt9obvb81nWPZy9AzPzWhmuHCzSrpuk04E
enwaL96RfDmkVnc4vDBNWvbWMTuX3TiWoYvle8lTVmr+iOH/RmQpsiOTdQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJzSr3xwLr1DFvhhljkLAopQC7buMB8GA1UdIwQY
MBaAFJ3m5CcuLOOHtMwEsUP3MwnXE2KbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMt
N2JhZDViYWU1MWU0LzEvbk5LdmZIQXV2VU1XLUdHV09Rc0NpbEFMdHU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMtN2JhZDViYWU1MWU0
LzEvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAWBAIAATAQAwMAPi0DAwBT
gAMEBdW4YDAUBAIAAjAOAwUDIAFMOAMFAyoPCQAwDQYJKoZIhvcNAQELBQADggEB
ADmcw3AxB+pAZC9782OEMrN8JTto906NaWaniy11IBjUcJw4k89eGQ0qReXk3amx
Jv97KGhJdD3yi8kEHeOFSNZNCKux+Ue4g883CnxA7PznL0niHfvIITM0RHATvGna
R2wAw4y8Fh8bbOaOasZ7o5RWhWnCxxacTWAs+czdHF1sc8mXs67vAVp/GYyQMabN
5iK9OWBTQbh26wxfBH18aBC3iVMo0VglY0EVf4ZnxbzswCm5ovR+R7tavsdPxHsC
ypI9mNP2B8cEk+sLNeP2RIrc+WLQVh8KjuBIVI5vB8pOyAYGeoq/f8CBj58/mMTx
Ey9+8kski+9zowOLOSTweQA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:09:21 2025 by rpki-client