Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/saj-6seGjxdmUbifeNJvW_LjaF8.roa
File: saj-6seGjxdmUbifeNJvW_LjaF8.roa (raw, json)
Hash identifier: O4b1y8+uTEcNwAuT2Vp3OrGxpFXzD30149NauyrIq/w=
Subject key identifier: B1:A8:FE:EA:C7:86:8F:17:66:51:B8:9F:78:D2:6F:5B:F2:E3:68:5F
Certificate issuer: /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial: 019425FDA56ACC2F44FC5810604579674AC3
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/saj-6seGjxdmUbifeNJvW_LjaF8.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209622
IP address blocks: 5.154.240.0/24 maxlen: 24
88.218.118.0/24 maxlen: 24
185.201.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:6a:cc:2f:44:fc:58:10:60:45:79:67:4a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a8feeac7868f176651b89f78d26f5bf2e3685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:55:64:32:8f:dc:a1:cd:36:c9:6a:55:fe:
98:6c:ba:db:ae:2d:77:ef:80:dd:c3:5b:3e:ce:91:
a6:01:df:a6:20:6c:71:32:a2:64:20:11:0a:58:dd:
7d:1e:46:34:d0:37:e8:31:45:07:a3:f4:02:79:a4:
90:71:ef:98:28:b0:a2:e9:2d:f6:f0:de:c4:a0:a9:
38:fe:2b:06:8f:7a:8d:02:60:1d:cf:a9:12:0b:9b:
e9:93:e9:73:d6:ff:88:7f:9d:d1:6e:e3:da:68:bb:
04:ce:09:5a:8a:4e:b2:af:4e:7b:53:3d:9c:ad:6d:
d9:9c:02:3c:b8:a8:a5:fd:48:62:5a:db:65:8f:23:
66:29:dd:80:89:ea:cc:ed:2e:b7:d8:b3:a3:43:a9:
76:c5:da:c9:b1:42:02:37:48:e9:2b:fc:10:72:c4:
a8:74:a1:2c:9a:79:ff:c0:e4:54:77:92:cb:bd:12:
30:65:55:b5:37:3a:08:89:86:cf:6a:a7:11:63:09:
50:27:56:01:7c:49:22:ac:9f:b2:79:2d:6b:2d:d2:
ff:2f:fe:14:ba:c6:b1:20:e9:9a:04:83:be:af:fe:
dc:4c:12:0f:0d:b5:bd:d1:1f:51:18:6d:50:7b:c5:
98:c0:60:9c:26:d8:5c:06:be:75:d7:63:c9:d3:69:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:FE:EA:C7:86:8F:17:66:51:B8:9F:78:D2:6F:5B:F2:E3:68:5F
X509v3 Authority Key Identifier:
keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/saj-6seGjxdmUbifeNJvW_LjaF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.240.0/24
88.218.118.0/24
185.201.151.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e4:f0:19:38:d3:45:aa:47:be:16:93:ea:5b:db:c8:16:85:
40:af:ea:9c:9d:ab:a5:72:c8:24:e9:1f:ce:80:39:39:e6:9c:
30:b4:16:56:c6:28:c3:f9:cd:a0:a7:6a:c4:8c:77:94:16:9c:
f3:60:d4:df:97:c1:9a:65:f6:e0:c3:4e:50:6d:47:c3:ba:87:
46:06:09:88:8e:cb:f3:73:05:10:26:14:43:90:c3:ad:17:f5:
c7:74:18:04:31:c2:09:3a:8b:be:7e:cf:a3:fa:2a:d2:c7:b4:
a7:5b:6c:b8:b6:e0:41:40:7b:8d:9e:1e:02:a2:e2:2e:fd:76:
e4:f3:c8:1c:3d:7c:5e:1a:cf:1e:c5:17:38:d5:07:e4:3a:97:
28:78:33:d8:23:00:48:7d:97:dc:9b:c2:ad:d4:fb:ba:3d:c7:
74:94:a1:06:7d:b4:4f:14:7d:d1:a5:03:77:63:ca:ce:50:83:
d2:52:cf:0b:89:9e:bb:25:84:d0:d3:85:12:19:62:97:03:f7:
85:4b:6c:78:35:4c:3f:b1:86:35:a4:40:04:7d:31:ea:4e:4f:
11:1a:b3:d9:18:68:07:20:0f:7c:ce:b3:45:ea:0e:1a:b0:01:
c8:32:f8:22:21:3e:9c:d8:35:14:ff:c5:11:f2:2e:ef:56:9f:
11:ce:1f:e6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/aVqzC9E/FgQYEV5Z0rDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjQzZmI4N2U4MDQ5MjJkMWM2ZDA3ZTI1OTdiNjFlMDRl
ZTE3ZjAwHhcNMjUwMTAyMDc0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWE4ZmVlYWM3ODY4ZjE3NjY1MWI4OWY3OGQyNmY1YmYyZTM2ODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EpVZDKP3KHNNslqVf6YbLrbri13
74Ddw1s+zpGmAd+mIGxxMqJkIBEKWN19HkY00DfoMUUHo/QCeaSQce+YKLCi6S32
8N7EoKk4/isGj3qNAmAdz6kSC5vpk+lz1v+If53RbuPaaLsEzglaik6yr057Uz2c
rW3ZnAI8uKil/UhiWttljyNmKd2AierM7S632LOjQ6l2xdrJsUICN0jpK/wQcsSo
dKEsmnn/wORUd5LLvRIwZVW1NzoIiYbPaqcRYwlQJ1YBfEkirJ+yeS1rLdL/L/4U
usaxIOmaBIO+r/7cTBIPDbW90R9RGG1Qe8WYwGCcJthcBr5112PJ02mA5wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLGo/urHho8XZlG4n3jSb1vy42hfMB8GA1UdIwQY
MBaAFBa0P7h+gEki0cbQfiWXth4E7hfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2Qt
ZmNlMjc5NWZkODBiLzEvc2FqLTZzZUdqeGRtVWJpZmVOSnZXX0xqYUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2QtZmNlMjc5NWZkODBi
LzEvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABZrwAwQA
WNp2AwQAucmXMA0GCSqGSIb3DQEBCwUAA4IBAQBp5PAZONNFqke+FpPqW9vIFoVA
r+qcnaulcsgk6R/OgDk55pwwtBZWxijD+c2gp2rEjHeUFpzzYNTfl8GaZfbgw05Q
bUfDuodGBgmIjsvzcwUQJhRDkMOtF/XHdBgEMcIJOou+fs+j+irSx7SnW2y4tuBB
QHuNnh4CouIu/Xbk88gcPXxeGs8exRc41QfkOpcoeDPYIwBIfZfcm8Kt1Pu6Pcd0
lKEGfbRPFH3RpQN3Y8rOUIPSUs8LiZ67JYTQ04USGWKXA/eFS2x4NUw/sYY1pEAE
fTHqTk8RGrPZGGgHIA98zrNF6g4asAHIMvgiIT6c2DUU/8UR8i7vVp8Rzh/m
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:58:15 2025 by rpki-client