Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/NuQX-8skluVLUKgcemUYBFqCQQY.roa
File: NuQX-8skluVLUKgcemUYBFqCQQY.roa (raw, json)
Hash identifier: Ka8FRM5I7Q4Freq8fYpmSV/sUu163+RSCBiKo5fsGMg=
Subject key identifier: 36:E4:17:FB:CB:24:96:E5:4B:50:A8:1C:7A:65:18:04:5A:82:41:06
Certificate issuer: /CN=986b772dc18934e51f27b52cbe65b3241261bf65
Certificate serial: 018220896EDD2CD095AD915E0D73DA8A0D9D
Authority key identifier: 98:6B:77:2D:C1:89:34:E5:1F:27:B5:2C:BE:65:B3:24:12:61:BF:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/NuQX-8skluVLUKgcemUYBFqCQQY.roa
Signing time: Thu 21 Jul 2022 11:34:13 +0000
ROA not before: Thu 21 Jul 2022 11:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 195.96.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:89:6e:dd:2c:d0:95:ad:91:5e:0d:73:da:8a:0d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986b772dc18934e51f27b52cbe65b3241261bf65
Validity
Not Before: Jul 21 11:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36e417fbcb2496e54b50a81c7a6518045a824106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:ff:3e:55:b2:cc:c8:fd:0d:37:80:42:7c:
ce:d3:61:05:8f:cc:1b:0b:b5:bb:ba:95:ec:50:b2:
7e:08:6c:ae:8e:4d:cf:db:2e:48:71:ee:dc:c0:3a:
d3:ec:83:82:96:c9:43:b2:2c:88:ee:42:8a:50:26:
ec:f6:40:a2:b5:c2:c0:a0:b5:61:a1:a2:94:d2:eb:
b7:9b:78:d5:aa:61:17:c4:2b:3a:b5:10:da:54:fd:
de:b8:da:3a:69:31:b9:c2:e5:dd:77:e5:97:56:17:
b7:fe:19:5a:8d:1b:5e:2b:f8:14:cf:fd:f2:c5:a9:
fd:03:06:8d:65:c7:04:d7:23:5f:d5:62:f7:78:70:
b3:1e:40:d3:98:f2:2d:e0:9f:3a:b2:3c:48:78:d7:
a4:1d:72:c7:ae:92:fa:c0:2d:a7:e2:97:84:02:4a:
67:09:33:55:23:b5:82:db:57:d0:cf:16:81:2f:e9:
1e:3a:c1:22:09:15:e7:7b:d6:98:c0:a7:e9:37:c9:
8e:e5:70:84:49:46:48:44:ce:46:53:c2:59:13:95:
99:ed:52:92:02:39:42:04:05:3b:aa:d1:cb:32:f3:
a7:cf:f4:7f:84:16:6b:e3:16:47:3a:44:e8:36:96:
7a:79:94:03:5f:8f:f0:a4:77:ac:80:81:71:ed:55:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:17:FB:CB:24:96:E5:4B:50:A8:1C:7A:65:18:04:5A:82:41:06
X509v3 Authority Key Identifier:
keyid:98:6B:77:2D:C1:89:34:E5:1F:27:B5:2C:BE:65:B3:24:12:61:BF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/NuQX-8skluVLUKgcemUYBFqCQQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:19:0d:ff:dd:b8:e7:54:92:ba:9b:da:65:f4:b8:bf:0e:c9:
4f:15:4d:a5:80:99:2a:de:26:75:8b:b1:f0:b3:3c:09:b8:e5:
a9:50:fe:6f:b8:a5:eb:7f:f0:04:ea:10:e3:53:f1:04:c7:54:
4d:b7:96:33:1e:07:3f:6c:f6:5d:a1:64:28:59:fc:f4:5b:db:
82:d5:8d:65:dd:c6:31:82:75:05:56:8f:78:b0:49:7b:83:9c:
a9:71:31:84:d3:f0:3f:49:76:55:66:32:2c:b1:1f:65:17:e8:
07:44:ee:39:1d:09:2f:40:62:94:0c:c6:df:8e:c2:f1:56:ef:
23:6e:16:01:10:5f:49:69:b7:82:70:50:f6:82:43:45:de:64:
13:dc:4b:ad:ab:49:39:25:53:62:d6:a6:75:29:89:8e:f1:ac:
8c:38:9c:f0:62:90:ad:02:0b:27:2e:14:31:c0:40:53:d6:31:
c0:61:07:5b:ab:b6:7c:c6:91:e9:fd:ff:81:42:34:ea:04:29:
26:1b:3e:b6:fc:11:ee:66:ef:de:6d:2a:34:22:3b:70:f0:17:
ae:a6:47:06:25:23:86:11:30:f3:65:69:45:70:df:8f:bb:45:
50:fe:20:fd:e0:6b:ca:1d:ff:b5:06:97:0f:3c:ec:03:66:72:
4c:8c:3b:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgiW7dLNCVrZFeDXPaig2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NmI3NzJkYzE4OTM0ZTUxZjI3YjUyY2JlNjViMzI0MTI2
MWJmNjUwHhcNMjIwNzIxMTEzNDEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmU0MTdmYmNiMjQ5NmU1NGI1MGE4MWM3YTY1MTgwNDVhODI0MTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dv/PlWyzMj9DTeAQnzO02EFj8wb
C7W7upXsULJ+CGyujk3P2y5Ice7cwDrT7IOClslDsiyI7kKKUCbs9kCitcLAoLVh
oaKU0uu3m3jVqmEXxCs6tRDaVP3euNo6aTG5wuXdd+WXVhe3/hlajRteK/gUz/3y
xan9AwaNZccE1yNf1WL3eHCzHkDTmPIt4J86sjxIeNekHXLHrpL6wC2n4peEAkpn
CTNVI7WC21fQzxaBL+keOsEiCRXne9aYwKfpN8mO5XCESUZIRM5GU8JZE5WZ7VKS
AjlCBAU7qtHLMvOnz/R/hBZr4xZHOkToNpZ6eZQDX4/wpHesgIFx7VU5gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDbkF/vLJJblS1CoHHplGARagkEGMB8GA1UdIwQY
MBaAFJhrdy3BiTTlHye1LL5lsyQSYb9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUd0M0xjR0pOT1VmSjdVc3ZtV3pKQkpodjJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iOGFlZjctNWJlOS00ZGIwLWJmZmMt
ZjQ2N2Q1YTBiYWZhLzEvTnVRWC04c2tsdVZMVUtnY2VtVVlCRnFDUVFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iOGFlZjctNWJlOS00ZGIwLWJmZmMtZjQ2N2Q1YTBiYWZh
LzEvbUd0M0xjR0pOT1VmSjdVc3ZtV3pKQkpodjJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CDMA0G
CSqGSIb3DQEBCwUAA4IBAQCyGQ3/3bjnVJK6m9pl9Li/DslPFU2lgJkq3iZ1i7Hw
szwJuOWpUP5vuKXrf/AE6hDjU/EEx1RNt5YzHgc/bPZdoWQoWfz0W9uC1Y1l3cYx
gnUFVo94sEl7g5ypcTGE0/A/SXZVZjIssR9lF+gHRO45HQkvQGKUDMbfjsLxVu8j
bhYBEF9JabeCcFD2gkNF3mQT3Eutq0k5JVNi1qZ1KYmO8ayMOJzwYpCtAgsnLhQx
wEBT1jHAYQdbq7Z8xpHp/f+BQjTqBCkmGz62/BHuZu/ebSo0Ijtw8BeupkcGJSOG
ETDzZWlFcN+Pu0VQ/iD94GvKHf+1BpcPPOwDZnJMjDsA
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:53:59 2025 by rpki-client