Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gZqj_vJzrhXYyXZrF1ZFW7HVE6U.roa
File: gZqj_vJzrhXYyXZrF1ZFW7HVE6U.roa (raw, json)
Hash identifier: y7TGDtDNKIYsbBsdxkb7U5+IYmb7g4l5xRmpzgE0vqc=
Subject key identifier: 81:9A:A3:FE:F2:73:AE:15:D8:C9:76:6B:17:56:45:5B:B1:D5:13:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194ACDA4CB5D59BBC7028CEC301CD0296EC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gZqj_vJzrhXYyXZrF1ZFW7HVE6U.roa
Signing time: Tue 28 Jan 2025 12:19:35 +0000
ROA not before: Tue 28 Jan 2025 12:19:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 195.58.35.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:da:4c:b5:d5:9b:bc:70:28:ce:c3:01:cd:02:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 28 12:19:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819aa3fef273ae15d8c9766b1756455bb1d513a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:15:82:33:a8:e7:74:6e:5d:c9:f1:4c:9f:
c2:ee:2f:7a:77:29:37:ae:c5:3b:c0:21:b1:66:fb:
54:66:9d:c4:ae:9d:b6:a2:e1:59:c0:ad:9a:c4:14:
14:80:b7:81:44:04:3a:15:f0:00:79:65:f3:ae:7c:
05:24:77:78:33:81:a2:ae:74:50:9e:15:04:94:e0:
ff:d0:04:c0:ed:ae:e1:c6:17:bb:ac:d1:70:2a:d7:
1a:fb:df:3d:d1:0a:b4:70:da:02:80:2c:d1:bc:bf:
1d:73:14:97:20:3c:eb:ab:90:a4:4d:c1:58:bf:a3:
a7:6c:77:9c:ff:88:e0:e1:b7:10:f5:fe:8e:b7:b7:
cb:ec:13:2c:a3:30:c8:bf:f7:61:f7:1d:83:6c:50:
c8:f0:7e:9e:f1:d4:b5:93:76:b9:84:89:16:0a:9c:
de:4e:f7:43:f7:6d:b3:6f:37:20:e9:20:33:f0:a7:
52:17:ea:8c:42:53:b0:19:9f:45:79:6b:41:e2:ab:
2f:70:44:8b:7d:eb:a8:55:14:9b:8f:6b:cf:4a:c9:
d1:dd:85:69:b5:62:b1:ed:d2:bb:ac:5b:f1:2d:90:
9e:89:9f:40:87:c6:ff:62:b3:6c:36:02:c0:36:1c:
bd:7c:95:34:92:d4:11:76:3e:2a:f6:71:92:32:ef:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:A3:FE:F2:73:AE:15:D8:C9:76:6B:17:56:45:5B:B1:D5:13:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gZqj_vJzrhXYyXZrF1ZFW7HVE6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.35.0/24
212.192.254.0/24
Signature Algorithm: sha256WithRSAEncryption
46:60:c6:52:42:74:fd:f9:dd:26:fd:be:d2:c9:2d:1f:18:fa:
c5:e8:ff:f5:b4:42:6a:c2:91:10:c4:2a:86:72:29:ee:a7:c6:
df:f3:2f:74:2d:1e:bd:c4:40:3f:8e:a3:05:94:51:d8:7e:22:
78:f8:ae:a6:1b:ad:15:0c:a2:5f:c7:0c:6d:f5:9f:e4:4b:2c:
27:db:e3:bc:72:08:9f:ed:49:85:7f:91:79:47:8c:6a:5b:21:
4f:25:56:d9:d4:33:e5:b3:1d:c3:e4:5f:44:2c:f5:b4:79:89:
93:ba:0c:49:d1:69:6f:cc:39:63:89:27:32:73:6f:45:57:c8:
c1:13:51:17:46:c4:83:b2:b5:2c:d5:53:ac:73:6c:ef:ed:7e:
ed:52:81:bd:65:65:42:9b:2c:6e:fa:6d:29:84:38:bd:27:83:
45:9b:b6:f3:b4:bb:d5:59:a8:6f:ba:dc:fc:9b:21:2f:c8:b0:
5b:6f:11:46:c9:66:70:4b:41:5d:6a:ca:b9:07:b2:49:99:e6:
e5:1f:e9:ba:7c:65:a7:88:ea:28:9b:c3:a3:d0:78:7a:6a:0e:
3e:8b:c6:ff:14:bd:f6:49:02:c7:74:54:50:70:fa:4c:d0:ce:
7c:c5:24:7d:3d:73:77:e3:f1:70:ef:bb:39:0b:38:a4:f4:c6:
c8:9b:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:32 2025 by rpki-client