Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/NbsEk1Q8qiEWwyPWmuHIrylMFyA.roa
File: NbsEk1Q8qiEWwyPWmuHIrylMFyA.roa (raw, json)
Hash identifier: t1XHzHl2GKqRdhSX83JbgUOoDRHoM1iXl4qGe+K63M8=
Subject key identifier: 35:BB:04:93:54:3C:AA:21:16:C3:23:D6:9A:E1:C8:AF:29:4C:17:20
Certificate issuer: /CN=167fe60ee7b078af23cfa5f62d75627b3f9c8de5
Certificate serial: 0189654AC3086912F4BCA5EA73CF2C516456
Authority key identifier: 16:7F:E6:0E:E7:B0:78:AF:23:CF:A5:F6:2D:75:62:7B:3F:9C:8D:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn_mDueweK8jz6X2LXViez-cjeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/NbsEk1Q8qiEWwyPWmuHIrylMFyA.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 84.246.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c3:08:69:12:f4:bc:a5:ea:73:cf:2c:51:64:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167fe60ee7b078af23cfa5f62d75627b3f9c8de5
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35bb0493543caa2116c323d69ae1c8af294c1720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:89:dd:da:9b:24:f9:71:36:94:31:73:0d:f4:
84:e5:ef:7b:5a:30:0b:99:d2:df:2b:e2:7e:bb:7b:
3e:1f:e4:62:20:fb:50:c9:85:57:bd:9f:d6:d6:ca:
74:44:9f:f5:09:c7:11:45:0e:c2:be:2f:70:ff:93:
eb:46:d5:a9:f9:cd:43:6c:3a:71:0b:c9:4f:e5:f4:
4b:3e:14:60:0f:6b:d5:ea:c8:a6:f3:77:fc:f3:4c:
3c:50:22:49:dd:cf:49:3b:5b:8c:1a:98:ad:8d:a5:
49:0a:ab:b4:02:3b:5a:f1:f9:d1:5d:13:8b:35:88:
c8:1f:f4:93:09:84:3b:29:96:c7:56:1c:ff:48:e9:
fc:86:80:24:15:42:99:b5:c0:47:a9:ac:4a:c3:bd:
d1:5a:21:29:22:4d:8b:83:1b:2a:49:37:16:09:c8:
4e:b1:06:6b:6f:de:93:80:37:87:1e:47:d0:93:78:
d7:f9:60:2f:17:27:61:0a:ba:02:37:fb:9b:de:fc:
b5:3a:79:70:12:ff:49:81:4a:56:a6:bc:a0:7a:5f:
31:ee:79:f0:24:e3:b5:2c:17:64:d3:28:30:45:7f:
a8:72:fe:90:df:cd:c9:f7:2f:f1:50:6e:85:5a:dd:
14:dd:b7:a1:8e:d4:ca:73:72:84:9b:a7:5d:e6:f0:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:04:93:54:3C:AA:21:16:C3:23:D6:9A:E1:C8:AF:29:4C:17:20
X509v3 Authority Key Identifier:
keyid:16:7F:E6:0E:E7:B0:78:AF:23:CF:A5:F6:2D:75:62:7B:3F:9C:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn_mDueweK8jz6X2LXViez-cjeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/NbsEk1Q8qiEWwyPWmuHIrylMFyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/Fn_mDueweK8jz6X2LXViez-cjeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.81.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fc:87:5d:59:fd:99:64:76:5c:ce:c6:0e:d1:77:ad:db:4f:
41:d1:d2:25:a9:da:88:0f:6d:f8:09:22:e2:db:d6:2a:35:b6:
b1:ac:73:59:d9:ac:c0:fe:6a:10:ba:25:1e:5e:3b:93:96:08:
39:a5:d8:1d:33:92:6c:da:8a:00:88:19:d1:55:ff:8c:70:c7:
c9:d0:a1:8e:b5:17:b6:ec:88:68:62:8f:25:92:88:cb:6d:00:
35:9e:db:6f:b0:34:09:56:66:c7:7d:ed:79:60:9c:88:98:2b:
b3:8b:45:48:72:ef:d5:f0:0f:ef:31:9f:64:b2:e9:03:59:5a:
47:4b:69:40:ac:0e:4f:b1:ae:b4:09:b0:6a:ca:54:3d:ef:36:
1a:ae:94:53:98:75:7a:c7:2c:c1:15:0b:ef:5a:64:98:a1:4f:
d5:29:ee:cd:49:0c:1d:35:22:0c:1e:f9:d2:63:1a:65:b6:26:
92:15:56:74:60:f3:86:6e:36:97:58:08:36:a1:f8:e3:70:72:
ed:21:fb:05:25:8d:6a:21:b8:8f:71:b6:77:5f:a5:88:30:e4:
b3:39:98:a1:a5:7b:50:73:80:5d:a6:86:36:6c:48:3c:87:ab:
c0:ad:08:1d:6c:cf:03:e6:db:0d:c6:d8:15:d1:44:1f:dd:36:
12:a0:b5:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllSsMIaRL0vKXqc88sUWRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2N2ZlNjBlZTdiMDc4YWYyM2NmYTVmNjJkNzU2MjdiM2Y5
YzhkZTUwHhcNMjMwNzE3MTkxOTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWJiMDQ5MzU0M2NhYTIxMTZjMzIzZDY5YWUxYzhhZjI5NGMxNzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54nd2psk+XE2lDFzDfSE5e97WjAL
mdLfK+J+u3s+H+RiIPtQyYVXvZ/W1sp0RJ/1CccRRQ7Cvi9w/5PrRtWp+c1DbDpx
C8lP5fRLPhRgD2vV6sim83f880w8UCJJ3c9JO1uMGpitjaVJCqu0Ajta8fnRXROL
NYjIH/STCYQ7KZbHVhz/SOn8hoAkFUKZtcBHqaxKw73RWiEpIk2LgxsqSTcWCchO
sQZrb96TgDeHHkfQk3jX+WAvFydhCroCN/ub3vy1OnlwEv9JgUpWprygel8x7nnw
JOO1LBdk0ygwRX+ocv6Q383J9y/xUG6FWt0U3behjtTKc3KEm6dd5vDmKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDW7BJNUPKohFsMj1prhyK8pTBcgMB8GA1UdIwQY
MBaAFBZ/5g7nsHivI8+l9i11Yns/nI3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5fbUR1ZXdlSzhqejZYMkxYVmllei1jamVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xMmRlMGEtOGNjMS00MWIwLWFlYWQt
N2QyY2JmYTE3MGE2LzEvTmJzRWsxUThxaUVXd3lQV211SElyeWxNRnlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xMmRlMGEtOGNjMS00MWIwLWFlYWQtN2QyY2JmYTE3MGE2
LzEvRm5fbUR1ZXdlSzhqejZYMkxYVmllei1jamVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPZRMA0G
CSqGSIb3DQEBCwUAA4IBAQCY/IddWf2ZZHZczsYO0Xet209B0dIlqdqID234CSLi
29YqNbaxrHNZ2azA/moQuiUeXjuTlgg5pdgdM5Js2ooAiBnRVf+McMfJ0KGOtRe2
7IhoYo8lkojLbQA1nttvsDQJVmbHfe15YJyImCuzi0VIcu/V8A/vMZ9ksukDWVpH
S2lArA5Psa60CbBqylQ97zYarpRTmHV6xyzBFQvvWmSYoU/VKe7NSQwdNSIMHvnS
YxpltiaSFVZ0YPOGbjaXWAg2ofjjcHLtIfsFJY1qIbiPcbZ3X6WIMOSzOZihpXtQ
c4BdpoY2bEg8h6vArQgdbM8D5tsNxtgV0UQf3TYSoLUl
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:40:16 2025 by rpki-client