Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NjXC87Dkp78s8F_xHmU1suOvnto.roa
File: NjXC87Dkp78s8F_xHmU1suOvnto.roa (raw, json)
Hash identifier: xN0c/OZcA0Kq3QPDtJ9zWzsfqHJ0CdIN7RNJf07IGn4=
Subject key identifier: 36:35:C2:F3:B0:E4:A7:BF:2C:F0:5F:F1:1E:65:35:B2:E3:AF:9E:DA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019538E1489CA3CD9F6B6C2427F6E5E586F6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NjXC87Dkp78s8F_xHmU1suOvnto.roa
Signing time: Mon 24 Feb 2025 16:54:03 +0000
ROA not before: Mon 24 Feb 2025 16:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214822
IP address blocks: 193.124.121.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:e1:48:9c:a3:cd:9f:6b:6c:24:27:f6:e5:e5:86:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 24 16:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3635c2f3b0e4a7bf2cf05ff11e6535b2e3af9eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:96:00:88:16:2b:a8:26:74:54:7c:10:ce:
8d:0d:3d:15:da:05:10:46:d1:ee:b3:28:db:75:63:
f4:3f:3f:62:af:c5:83:3d:5b:a5:0d:6f:9d:00:91:
19:8b:78:78:e6:52:05:76:48:9b:ed:fe:f9:1d:dc:
2a:16:a6:59:f3:c5:ac:ff:8f:70:f7:90:a6:fb:34:
f8:ff:8a:fd:22:71:df:09:e6:ca:c1:25:59:83:ed:
f7:d4:ee:d7:a4:ad:85:2e:e4:ff:ed:46:e5:41:d3:
e6:00:c1:31:84:0d:55:0d:40:c0:5f:16:93:fe:4c:
df:e8:ad:4f:9f:9d:25:f7:bc:1d:fe:74:e0:8c:9d:
c2:e3:88:26:5b:32:ab:63:ee:50:eb:b6:10:99:55:
15:79:ec:ef:a3:bf:7c:4e:37:ae:3c:c1:95:a9:4a:
66:44:ac:32:a4:d3:d8:5c:b5:ea:5c:f1:92:3e:15:
b9:d2:9a:3a:cb:36:58:49:67:e3:db:58:cd:3f:b5:
08:f3:43:4a:19:ec:c0:99:00:30:7d:be:42:47:36:
36:3b:a5:7e:15:31:a3:c3:6f:dd:ed:88:2e:57:13:
76:6f:67:6c:43:07:a5:76:bc:60:25:e3:83:95:fb:
12:e5:ad:f4:37:ad:c2:df:ad:92:cf:3d:f1:ce:7f:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:C2:F3:B0:E4:A7:BF:2C:F0:5F:F1:1E:65:35:B2:E3:AF:9E:DA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NjXC87Dkp78s8F_xHmU1suOvnto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.121.0/24
195.133.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b4:46:21:83:28:7a:c4:8b:40:ac:93:b0:fb:7e:f6:00:d7:
6d:c6:8a:59:48:06:82:20:fb:81:a3:bf:19:f5:d4:fa:84:a6:
59:c7:64:bf:d8:a3:96:e0:a0:3b:57:18:c9:55:a0:7a:6d:a0:
fb:a0:cd:85:66:6b:99:39:05:0f:88:96:a6:f2:da:65:20:98:
c2:6f:83:37:a7:e6:9d:ae:48:d1:60:3b:f8:12:4a:41:c1:90:
12:61:6e:b1:ae:db:d8:a6:04:46:f7:cf:17:c4:05:79:41:69:
9e:78:eb:fe:16:1c:bb:be:05:79:f3:c1:77:82:2c:61:23:f7:
bb:b4:6d:87:9f:48:78:ea:af:23:a2:ae:e6:e0:fc:97:67:ac:
75:5b:a8:5a:59:6a:c4:f1:61:18:cf:45:13:e6:b3:d1:f2:e5:
4b:90:12:90:0f:81:82:19:a2:39:79:8f:e3:73:c0:23:fe:f8:
17:f7:2f:ac:61:2d:41:8d:32:e3:48:5b:ea:ee:6d:9f:48:b7:
27:a2:3c:4b:29:e8:94:b2:4e:34:d3:e7:75:8f:54:ed:de:f4:
28:98:47:2a:90:42:75:64:89:9d:46:bc:f5:07:f0:73:ff:92:
d8:53:b8:fb:1b:f6:c6:c2:2a:a2:24:c3:8b:c1:23:90:17:17:
3f:0a:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:51 2025 by rpki-client