Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SJNXu3wGwe1Bagn1OzaasU6v_TM.roa
File: SJNXu3wGwe1Bagn1OzaasU6v_TM.roa (raw, json)
Hash identifier: qXM31QdcAgYTiti1KHLgRJnF/wNwenCPcU8qwLfhqDQ=
Subject key identifier: 48:93:57:BB:7C:06:C1:ED:41:6A:09:F5:3B:36:9A:B1:4E:AF:FD:33
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428250D243FFC7690DC5B8A200FED507A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SJNXu3wGwe1Bagn1OzaasU6v_TM.roa
Signing time: Thu 02 Jan 2025 17:51:44 +0000
ROA not before: Thu 02 Jan 2025 17:51:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 194.87.139.0/24 maxlen: 24
195.58.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:0d:24:3f:fc:76:90:dc:5b:8a:20:0f:ed:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=489357bb7c06c1ed416a09f53b369ab14eaffd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:e7:9c:f5:91:ff:2a:eb:5e:b8:30:73:16:
b9:11:1a:30:87:25:27:2e:12:da:df:c2:d9:f6:e1:
bb:9b:98:4f:ae:fb:de:ed:e5:94:c8:80:6d:5a:83:
0b:08:e8:a4:36:4d:a8:92:05:67:50:55:0e:de:05:
3f:5a:51:bf:22:ba:fd:74:81:e7:8c:9d:19:f6:30:
c5:1a:6d:37:c6:09:91:74:14:5a:de:7e:d5:ec:7f:
fb:7b:66:e2:32:71:4c:53:ae:f3:09:da:91:4f:70:
8c:a2:1a:ca:e0:4b:f8:b5:16:e7:19:4b:cd:c6:82:
77:da:65:80:55:8f:7a:f2:fb:4a:a6:cb:8a:a7:93:
45:77:3a:1d:21:ac:51:b1:2e:18:eb:43:c3:b9:12:
c6:aa:b2:4d:47:00:09:83:18:82:77:a8:d0:16:c4:
be:36:73:0c:b3:1c:b5:e4:05:66:db:ad:2a:dd:51:
cc:a7:2c:37:2f:5a:0a:25:90:68:cd:f0:85:30:95:
5e:c1:6a:5a:13:0d:96:fc:85:c7:35:4d:28:a3:1a:
61:ba:01:fe:35:92:0e:e2:3d:9c:7c:b4:e0:ea:c4:
bb:ab:01:96:94:90:34:1a:4c:ba:f1:7e:d0:8c:b0:
49:4c:e1:6e:6f:eb:21:e6:bb:fe:38:3c:c6:c7:a4:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:57:BB:7C:06:C1:ED:41:6A:09:F5:3B:36:9A:B1:4E:AF:FD:33
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SJNXu3wGwe1Bagn1OzaasU6v_TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.139.0/24
195.58.57.0/24
Signature Algorithm: sha256WithRSAEncryption
16:88:d1:9d:72:7e:42:8e:83:90:89:f1:e1:e0:9f:3e:3a:3a:
b8:72:aa:fa:27:db:e5:48:52:0b:a1:0b:48:00:6d:1d:02:16:
f4:e2:00:98:96:80:49:96:2d:36:1c:c2:2e:4e:e5:be:80:10:
1f:81:ee:ae:51:f2:9d:ab:28:8b:74:d4:d6:ec:d8:dc:9c:c1:
5d:11:f4:5c:54:fc:1c:d6:95:54:47:e4:11:d0:22:b7:d1:11:
e5:bd:ea:8c:3c:3f:7c:86:ed:1e:e4:4a:82:79:ab:ff:71:26:
e5:8d:cb:75:1e:18:58:a6:58:60:d6:b2:03:6b:af:d7:3e:8c:
c0:ca:50:0b:ef:6a:f3:d1:6c:e1:52:59:54:76:a4:d4:6f:bc:
8e:2a:d8:f7:2a:6d:1d:4b:78:01:95:71:45:8d:8b:a7:55:1c:
17:f1:a5:23:93:ff:d9:22:4d:a2:6e:06:77:01:a0:a6:0a:5b:
d4:9d:04:c8:ae:cb:42:95:6b:9d:77:90:a9:0e:6b:43:d5:61:
3d:13:b5:e0:24:e0:bf:45:15:a8:d3:1e:8e:f9:c2:ba:52:c5:
53:bd:eb:78:26:7c:fd:16:a1:5c:f3:79:11:65:8e:15:24:d3:
33:9d:3c:05:f1:25:7f:c6:6d:98:d3:9c:bc:33:d4:2b:23:32:
8c:99:2b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:39:30 2025 by rpki-client