Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/NA4JD_GnqQvOyR7m4m3Vw9okgE8.roa
File: NA4JD_GnqQvOyR7m4m3Vw9okgE8.roa (raw, json)
Hash identifier: J1cBhjZo1uGeijpNkjCbQKnO6iIh1rl0/dVJtp6h+ew=
Subject key identifier: 34:0E:09:0F:F1:A7:A9:0B:CE:C9:1E:E6:E2:6D:D5:C3:DA:24:80:4F
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 0194221FAD4CDEDC17C1F9237AFFC4CB875D
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/NA4JD_GnqQvOyR7m4m3Vw9okgE8.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198605
IP address blocks: 5.62.16.0/24 maxlen: 24
5.62.17.0/24 maxlen: 24
5.62.18.0/24 maxlen: 24
5.62.19.0/24 maxlen: 24
5.62.20.0/24 maxlen: 24
5.62.24.0/24 maxlen: 24
5.62.25.0/24 maxlen: 24
5.62.30.0/24 maxlen: 24
5.62.32.0/24 maxlen: 24
5.62.36.0/23 maxlen: 23
5.62.38.0/23 maxlen: 24
5.62.38.0/24 maxlen: 24
5.62.40.0/23 maxlen: 23
5.62.42.0/23 maxlen: 23
5.62.44.0/23 maxlen: 23
5.62.46.0/23 maxlen: 23
5.62.46.0/24 maxlen: 24
5.62.47.0/24 maxlen: 24
5.62.48.0/23 maxlen: 23
5.62.50.0/24 maxlen: 24
5.62.52.0/24 maxlen: 24
5.62.53.0/24 maxlen: 24
5.62.54.0/24 maxlen: 24
5.62.55.0/24 maxlen: 24
5.62.56.0/23 maxlen: 23
5.62.56.0/24 maxlen: 24
5.62.57.0/24 maxlen: 24
5.62.58.0/23 maxlen: 23
5.62.60.0/23 maxlen: 23
5.62.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ad:4c:de:dc:17:c1:f9:23:7a:ff:c4:cb:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=340e090ff1a7a90bcec91ee6e26dd5c3da24804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:7b:1a:07:2c:ea:93:f6:5c:d1:92:7d:b5:
1a:91:33:42:1e:d9:c1:86:48:93:6a:11:32:3c:e0:
4e:f6:51:d2:a4:f7:7f:42:e2:c8:53:12:69:1f:44:
a0:52:20:60:c0:0c:b7:70:26:01:fc:79:4e:43:9f:
32:c2:30:e9:6f:8d:be:55:c7:01:3f:b7:76:18:e7:
ff:fa:2e:f5:83:b9:7a:0b:03:be:85:68:83:6d:e1:
47:fa:94:8a:c1:91:4d:31:39:87:bd:6f:f0:65:95:
b5:a2:5e:88:45:08:2b:ed:3e:49:06:5a:e0:f0:03:
f4:ef:38:38:b8:e4:fa:1c:7a:bb:79:7f:a9:ab:4a:
3e:fb:ae:29:f8:7d:ef:d8:33:8c:66:b6:60:6c:8d:
51:09:a6:7f:c8:b1:17:ed:59:b3:35:93:99:39:7f:
b7:84:e5:aa:8c:01:53:6e:d9:19:06:58:3d:fc:1a:
ac:96:fe:0d:ce:5d:07:fc:bc:47:84:a6:5d:3f:72:
e3:ea:98:53:bd:18:7d:3b:25:84:40:35:a6:ea:60:
40:29:de:52:43:88:aa:12:20:c1:38:79:67:d5:83:
b4:c1:1c:09:78:6a:24:f3:7b:0b:48:ba:bb:34:86:
1a:6c:2c:bd:bb:5b:80:33:74:7d:2a:82:79:d8:34:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:09:0F:F1:A7:A9:0B:CE:C9:1E:E6:E2:6D:D5:C3:DA:24:80:4F
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/NA4JD_GnqQvOyR7m4m3Vw9okgE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.16.0-5.62.20.255
5.62.24.0/23
5.62.30.0/24
5.62.32.0/24
5.62.36.0-5.62.50.255
5.62.52.0-5.62.63.255
Signature Algorithm: sha256WithRSAEncryption
0b:82:59:13:ff:30:a9:22:b5:30:51:24:90:54:eb:31:93:3f:
a1:db:1f:75:92:41:22:e3:91:d8:19:f0:fe:7f:ef:ed:01:cb:
5f:e6:4d:cb:41:35:41:fb:6d:1f:d7:05:e5:98:0d:57:b2:55:
ba:c5:35:85:78:17:fa:fe:f0:02:af:4c:0d:32:07:4d:6a:39:
18:08:9f:51:ef:d4:ac:85:e3:cd:b7:07:a0:41:f8:f2:88:5a:
33:d9:dc:8c:da:5d:a9:70:f0:55:8a:e2:66:b4:2c:34:55:3b:
ae:49:bc:e6:3a:cc:75:2a:e8:b7:a7:ee:19:26:c9:a9:8a:5f:
1f:5d:0e:13:29:30:d4:e7:c2:a1:8a:0b:a9:12:46:a9:2e:89:
56:f7:9e:c3:cf:ca:64:6c:12:b0:0a:c8:3b:9a:ab:3d:4a:81:
4c:c9:df:b6:f4:72:9f:59:49:7d:0c:9c:b4:18:ad:b8:94:d6:
a2:f7:60:81:68:ff:7f:e6:11:a6:d9:0f:c2:d1:4b:de:f4:bc:
20:c1:65:f0:aa:8c:b5:e4:e2:7f:9d:62:c6:7a:42:fe:4b:0a:
95:81:d8:65:21:8e:5b:bb:5f:70:97:77:0c:89:4a:35:8f:c9:
89:c0:14:91:52:8f:69:52:f1:b2:e2:57:e9:a9:0f:29:9a:ba:
a0:fe:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:06 2025 by rpki-client