Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/Naw5SESv6F-7xw8AlzszEkwan9U.roa
File: Naw5SESv6F-7xw8AlzszEkwan9U.roa (raw, json)
Hash identifier: Mbo3Jub5v2CNI5HfXQyreqoCmBqpJFtpKsAqTMduHgY=
Subject key identifier: 35:AC:39:48:44:AF:E8:5F:BB:C7:0F:00:97:3B:33:12:4C:1A:9F:D5
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 0194258EFC39213B0FCCF8283EE0D6C52714
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/Naw5SESv6F-7xw8AlzszEkwan9U.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62095
IP address blocks: 185.48.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fc:39:21:3b:0f:cc:f8:28:3e:e0:d6:c5:27:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ac394844afe85fbbc70f00973b33124c1a9fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:29:69:08:1f:c6:50:9b:c9:f8:72:96:82:
b4:69:97:15:77:38:9f:6a:cc:50:e5:f0:ac:7c:32:
bf:d7:63:a9:ab:96:e5:ff:85:84:e6:e4:0f:36:de:
61:c5:2d:06:02:1a:a0:ad:0e:14:8c:51:9f:46:67:
fd:8e:c9:f8:94:0a:b2:ac:5e:a8:be:3b:2e:65:7c:
87:40:8b:ba:16:43:67:f0:09:14:68:5a:45:ef:b4:
32:27:ac:98:a3:f3:c6:48:89:04:e1:10:bd:5d:44:
df:fb:6d:78:02:48:21:b4:03:33:56:1c:14:67:da:
49:8b:00:2d:17:67:43:88:bf:68:04:89:cd:4c:ac:
bb:9a:20:e9:14:5b:f9:fe:69:be:02:f5:55:d1:a7:
19:34:0f:63:ed:d6:58:c5:03:45:a2:d7:96:be:a1:
9b:cd:8f:71:48:6e:0e:1a:f1:37:d9:28:25:22:57:
2b:81:75:dd:38:03:1c:9d:d3:20:46:aa:0b:81:dd:
bc:fa:7f:7a:35:9e:70:9e:73:d2:01:93:40:74:ea:
36:64:74:53:2c:4d:e7:b9:1f:3b:8b:31:07:72:6f:
99:05:29:6b:7e:e7:71:93:31:db:a5:26:f7:9c:17:
d3:3d:75:c1:1c:ff:eb:61:57:67:21:9c:ae:b7:d1:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:39:48:44:AF:E8:5F:BB:C7:0F:00:97:3B:33:12:4C:1A:9F:D5
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/Naw5SESv6F-7xw8AlzszEkwan9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a7:3d:bf:3f:95:35:f7:67:fb:b5:8d:73:cb:09:24:7a:b6:
0d:f2:32:f9:05:60:d0:90:4e:f8:e7:a6:83:6c:98:d1:f4:e9:
44:fb:74:e3:7f:39:3d:b0:14:a1:14:38:cf:db:bd:32:09:02:
0f:ee:1a:ad:d7:61:e7:e7:bf:b4:7a:6a:94:76:cb:ea:f4:26:
d1:aa:9c:10:1b:42:ac:d1:dd:c5:ca:57:11:bb:ed:b8:95:63:
4e:af:f5:45:f8:5a:09:b5:28:31:90:05:fc:4e:d0:36:e9:46:
51:96:b7:67:17:3a:28:49:64:bd:96:a3:08:a4:12:b6:46:d6:
a1:38:ad:3d:f2:6d:d0:ad:a0:7f:10:87:61:d3:ce:5a:72:70:
1e:73:0d:cf:4b:ff:29:9a:01:69:c9:14:17:35:8b:53:1b:6e:
45:40:b5:bd:ef:33:08:b1:6e:e8:20:ac:87:4c:48:b2:51:23:
20:74:43:77:1f:a1:af:11:69:71:98:1e:85:ac:56:c0:83:40:
fb:93:c6:2e:e0:4a:59:95:ad:f9:da:98:dc:45:31:6e:17:80:
1c:55:35:3e:7f:7f:b2:e0:78:f1:5e:e7:b7:bb:e6:86:bc:89:
0e:fe:29:e3:db:3e:e7:69:f3:97:f2:04:b3:df:6f:4e:dc:36:
84:0e:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:02 2025 by rpki-client