Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_NuWQrWtuFb1QDZkDb8QDFrzSYo.roa
File: _NuWQrWtuFb1QDZkDb8QDFrzSYo.roa (raw, json)
Hash identifier: kP8Z9DBDtgp5MuWn4ot6UOrW0TR4+O5iNLNzhKvRmJY=
Subject key identifier: FC:DB:96:42:B5:AD:B8:56:F5:40:36:64:0D:BF:10:0C:5A:F3:49:8A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01946AAC08F60FE7661875FBB25C2826ADE4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_NuWQrWtuFb1QDZkDb8QDFrzSYo.roa
Signing time: Wed 15 Jan 2025 15:54:06 +0000
ROA not before: Wed 15 Jan 2025 15:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.227.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.4.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.24.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:ac:08:f6:0f:e7:66:18:75:fb:b2:5c:28:26:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 15 15:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcdb9642b5adb856f54036640dbf100c5af3498a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:c6:83:dc:ee:b5:7c:0b:25:a1:26:6d:7f:
1f:eb:eb:a0:78:3d:25:64:16:28:19:34:73:45:de:
a4:ba:95:5c:d2:60:a5:c3:c1:b4:d9:78:14:1b:f3:
0c:78:d5:b3:2e:57:61:d3:9c:ba:c5:f7:42:76:a5:
e1:45:fa:3a:7c:8a:bf:d5:61:ff:a2:1c:05:4f:88:
09:74:e3:51:7a:38:e8:95:69:d3:6d:37:59:18:66:
e3:f0:da:c2:9c:93:ff:5d:87:71:5f:f7:81:c6:df:
0d:e7:26:0d:86:c3:48:af:e6:88:9c:7a:33:ad:e9:
85:db:3e:81:cb:fa:69:26:5b:9c:ff:a4:b6:46:3e:
6b:67:46:59:e9:a3:f3:4f:9d:e5:4f:c4:37:e7:78:
c9:71:5b:07:fa:43:c0:e8:d0:a4:9f:ce:c1:fa:ed:
de:5c:de:ed:48:57:4d:d4:63:fe:94:ab:75:f4:88:
2e:6c:5f:a5:4b:42:b0:02:a5:05:fb:8e:9a:8f:2f:
91:e3:36:63:ba:e4:ef:43:89:ab:fd:be:0c:48:0a:
20:50:85:af:74:31:5d:8f:73:1d:35:42:4b:cf:ec:
86:d5:87:28:38:5d:84:2a:0a:af:6f:c7:98:4a:5e:
63:57:45:ef:d4:f4:3c:b4:6b:9f:39:e1:d1:70:93:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:96:42:B5:AD:B8:56:F5:40:36:64:0D:BF:10:0C:5A:F3:49:8A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_NuWQrWtuFb1QDZkDb8QDFrzSYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/23
185.72.10.0/24
192.124.181.0-192.124.183.255
192.124.188.0/24
192.124.190.0/24
193.124.4.0/24
194.87.3.0/24
194.87.24.0/24
194.87.33.0/24
194.87.36.0/24
194.87.90.0/24
194.87.165.0-194.87.166.255
194.87.229.0/24
194.87.231.0/24
195.133.35.0/24
195.133.56.0/23
195.133.60.0/23
212.192.242.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1a:44:8c:bc:08:54:58:ef:07:cf:68:50:62:28:88:20:62:
ca:a1:c4:4c:4b:80:68:36:45:19:ae:d7:7d:d3:39:dd:95:9f:
3b:b2:4a:7e:a8:f7:85:d0:44:e8:e0:ca:c2:e5:20:77:3d:75:
6b:9d:d4:9a:38:80:3f:7b:7e:ab:37:02:5c:88:c0:7f:4d:d3:
a8:27:de:e3:3d:26:fa:a2:09:af:0d:c3:e3:55:04:7a:af:f1:
be:55:ae:51:77:a5:53:d7:fb:3e:ea:1e:06:ea:06:22:da:e8:
a8:25:08:db:df:11:35:23:bd:00:e0:e1:a7:ea:28:9a:47:29:
0a:41:7b:84:b9:d9:8e:3f:96:1a:e5:88:c2:5e:2f:a8:a9:2f:
fe:3a:e8:1a:78:6b:80:10:44:bd:d1:90:69:16:a4:97:bc:c3:
04:a5:32:c9:b4:4a:a3:b8:af:fe:5a:f3:de:15:69:26:55:f6:
c4:a7:bc:44:c0:d1:e4:5c:f9:ba:51:c3:6b:93:72:02:0a:16:
37:0e:41:f5:2a:d3:e8:69:45:7d:74:c5:2b:e8:85:04:e3:7e:
d2:99:a7:d3:e1:02:69:58:36:d1:41:ac:79:d5:b0:90:18:9c:
f9:3a:d9:f0:61:9c:2e:41:a0:c2:df:6b:99:be:e5:19:64:ff:
d3:b0:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:23 2025 by rpki-client