Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa
File: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (raw, json)
Hash identifier: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=
Subject key identifier: 35:E8:3E:19:A2:A0:75:8E:A0:9E:95:C2:10:7C:E4:2F:D2:65:85:2D
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F6310B4DEB415D0101D971053AB92
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 212.30.35.0/24 maxlen: 24
212.30.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:63:10:b4:de:b4:15:d0:10:1d:97:10:53:ab:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e83e19a2a0758ea09e95c2107ce42fd265852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:72:c3:9d:0e:1a:c2:dc:6c:c1:bd:c8:7d:
47:ac:38:41:a5:0b:bc:af:10:68:00:e1:34:b3:61:
d4:b2:86:e7:ab:96:ab:a4:3e:47:b9:4d:5c:99:c5:
9a:e5:15:a9:ad:a8:c9:7c:20:42:f6:ee:b4:47:3e:
e6:2a:b6:c8:4e:a9:0c:60:f0:01:d0:b7:ba:c9:2f:
70:66:5f:d0:2d:14:4a:b8:7c:b4:d9:7a:8e:fe:69:
e9:27:e0:11:2d:db:bf:37:08:6d:3a:0d:a3:5e:0b:
44:cf:f1:04:74:0f:17:ef:7b:e8:f0:0a:b3:4a:5d:
15:39:42:f3:ba:6b:2b:31:b3:18:61:a6:1e:4f:61:
3a:e3:bc:40:f6:8c:bc:b5:68:db:92:b5:33:6c:d1:
61:96:fa:cb:b4:14:f7:6d:56:bf:92:84:79:25:00:
c3:d0:82:31:b4:3a:86:5d:95:b3:f0:f4:76:fb:2e:
fc:df:ab:fc:cc:0a:9f:00:6a:c1:ec:51:29:10:8d:
02:7e:0f:37:59:5a:c3:4b:bf:87:2f:a8:7e:9f:a7:
35:d9:60:3b:5c:ac:fb:cc:2b:d1:6a:5b:68:ba:f7:
e1:26:46:6b:1c:17:ec:95:dc:8e:8f:5a:d8:c2:8f:
21:4f:36:c6:5b:39:a4:b3:b2:fa:1a:a2:82:e4:0b:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E8:3E:19:A2:A0:75:8E:A0:9E:95:C2:10:7C:E4:2F:D2:65:85:2D
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.35.0/24
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
22:72:72:4e:d4:2b:42:61:88:02:ed:ea:f2:12:73:03:15:6f:
2a:b3:b8:be:28:8a:db:0f:84:6b:8f:37:f8:92:58:68:38:4a:
a5:76:58:ff:0d:2d:a6:25:85:99:a6:46:ec:38:ce:6c:34:2b:
27:b2:99:c3:cd:6c:b4:3f:16:11:e7:1d:e1:e5:86:12:cc:6f:
d5:39:6b:f5:fd:69:6d:4b:73:8b:6a:68:78:ed:fd:46:c3:8b:
ea:e7:9d:29:18:ec:b9:0b:77:6f:af:0c:30:eb:dd:ea:74:6b:
78:a1:3f:8e:e7:6b:67:46:a1:51:b6:05:ac:0b:a0:1b:b8:19:
df:75:84:0a:47:08:8a:f6:15:c3:cc:f2:e5:8f:f6:f3:e4:1a:
f2:ff:e9:3f:b8:29:f5:8d:26:1d:ad:67:e1:57:45:9a:99:01:
cd:88:db:58:43:89:61:e2:d2:f1:32:cd:02:89:2d:fd:9f:7d:
5b:df:a4:95:0d:3b:85:7c:31:ae:ac:ca:46:87:20:c6:8e:10:
9e:57:3e:23:bf:62:66:61:28:89:ab:e9:dd:52:96:69:f5:df:
4d:ba:ef:56:86:30:3b:9b:d0:65:6f:b7:fe:94:aa:36:63:cc:
49:53:40:68:9f:c0:63:8c:96:23:78:f5:5e:95:12:ce:c7:4e:
a1:ce:28:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:45 2025 by rpki-client