Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/ALjfx6CpJea_kzUES-73DSY_1tc.roa
File: ALjfx6CpJea_kzUES-73DSY_1tc.roa (raw, json)
Hash identifier: YLGbfEbEQFv7HytZDdFbBRA4Ug5ozlQbHd8gwEIfR6k=
Subject key identifier: 00:B8:DF:C7:A0:A9:25:E6:BF:93:35:04:4B:EE:F7:0D:26:3F:D6:D7
Certificate issuer: /CN=b236f231f35beef1bc6c2fc241750b4460f468c3
Certificate serial: 019424455463E15DA18A01A500DB65AF964E
Authority key identifier: B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/ALjfx6CpJea_kzUES-73DSY_1tc.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35057
IP address blocks: 194.150.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:54:63:e1:5d:a1:8a:01:a5:00:db:65:af:96:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f231f35beef1bc6c2fc241750b4460f468c3
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00b8dfc7a0a925e6bf9335044beef70d263fd6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:6b:b8:98:16:e7:70:b4:47:ca:af:4c:b0:
8c:67:72:6d:45:7f:82:e2:45:c1:a1:24:c4:47:26:
97:03:df:06:d9:e6:e0:3a:8e:0c:c6:83:5a:86:f8:
6c:59:0f:49:ea:0f:23:da:cd:d5:da:75:6b:32:f0:
f6:ad:ae:b0:c6:10:d4:44:e3:98:c3:97:13:76:fe:
92:15:99:c7:92:00:61:29:c0:72:d5:d8:63:28:81:
cf:55:95:95:48:f8:fc:44:12:e7:07:be:4b:e8:a7:
43:23:71:2f:d8:43:2b:32:31:ed:c4:cd:f4:18:fa:
9f:76:5b:2d:a7:4e:01:e7:95:d7:7b:64:2d:a4:2e:
9c:5a:21:c8:c1:ad:89:86:a1:e4:4f:f0:2d:12:8b:
c6:99:1a:8a:ad:1c:77:94:5d:c5:6b:94:08:fd:33:
78:89:a9:0e:ca:22:7f:e0:84:7c:31:da:0a:b3:3c:
9c:19:83:96:65:03:c8:be:f3:62:c9:a0:b3:81:b1:
ea:a2:79:ea:0b:4b:57:db:72:ae:ab:64:92:21:72:
86:3c:44:20:64:c5:61:f5:ae:35:87:5e:d0:ed:ba:
20:f6:1b:d5:ef:e3:75:97:65:bf:7c:29:d1:50:34:
87:8b:27:22:9f:ff:cc:bb:a6:1d:68:49:d0:0f:8e:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:DF:C7:A0:A9:25:E6:BF:93:35:04:4B:EE:F7:0D:26:3F:D6:D7
X509v3 Authority Key Identifier:
keyid:B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/ALjfx6CpJea_kzUES-73DSY_1tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/sjbyMfNb7vG8bC_CQXULRGD0aMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.232.0/24
Signature Algorithm: sha256WithRSAEncryption
53:34:26:6f:88:3c:b2:a0:7c:93:55:ce:58:7c:10:c5:1a:ad:
16:37:0d:86:fc:e5:a8:5d:01:da:77:a5:57:a3:75:14:62:cf:
41:3e:33:08:c0:81:8a:fc:a7:ad:9f:7d:fb:4a:9a:42:fc:17:
07:76:54:df:6e:79:f6:3c:dc:ea:f2:9a:af:ae:2f:55:0b:c3:
76:2d:91:f4:5e:14:88:33:cc:5a:b7:cc:41:f0:74:99:fc:56:
3a:bd:5a:5b:ae:2b:1a:e5:69:25:cb:9d:e3:f2:b8:12:20:1c:
55:75:95:b0:68:ae:1f:11:ae:23:89:c6:83:a0:c1:54:d2:fb:
88:02:44:e9:17:1b:d6:ca:2c:d8:a7:5a:54:77:50:f8:d0:a2:
ad:23:54:6f:76:be:f3:f3:0a:78:eb:e1:32:08:77:ff:65:cc:
c2:fb:80:ec:84:45:44:65:b5:38:aa:60:71:d3:2a:ec:d8:f4:
33:56:fb:94:69:f2:9b:c2:b4:a2:09:fb:fe:78:3f:a6:3a:5d:
6d:82:e6:8f:76:49:bd:c3:cf:a8:17:97:c3:9f:3c:a0:fa:7d:
51:96:86:8c:f1:cc:89:16:10:17:25:b1:ba:7f:19:1d:b9:d5:
4a:05:e7:c0:07:86:73:ce:1d:ba:69:24:b9:ba:c9:1b:89:7a:
07:b4:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:56:39 2025 by rpki-client