Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sk5QkKRvLIMDe_jy4tshpZ9g_Fo.roa
File: sk5QkKRvLIMDe_jy4tshpZ9g_Fo.roa (raw, json)
Hash identifier: TOi1pkRxwdwCH6hmfmTqqiGh3dVCjvT4xZpwlO3W6eY=
Subject key identifier: B2:4E:50:90:A4:6F:2C:83:03:7B:F8:F2:E2:DB:21:A5:9F:60:FC:5A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01948933E330F0F209213D44A0610C5F2E24
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sk5QkKRvLIMDe_jy4tshpZ9g_Fo.roa
Signing time: Tue 21 Jan 2025 14:11:06 +0000
ROA not before: Tue 21 Jan 2025 14:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
62.76.238.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:33:e3:30:f0:f2:09:21:3d:44:a0:61:0c:5f:2e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 21 14:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b24e5090a46f2c83037bf8f2e2db21a59f60fc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:2a:b6:bc:25:de:1c:1a:fb:8c:09:9b:12:
1a:5d:7e:03:0d:b6:9d:de:89:af:bf:14:f5:3e:75:
8a:54:fd:60:89:f5:23:e4:64:73:ef:e3:6c:37:42:
4e:ba:68:75:8c:6d:db:ce:6e:ca:10:ef:74:f7:97:
e7:6c:8c:26:70:23:09:a9:b8:fd:de:b4:c2:e8:5b:
dd:e7:4b:95:42:91:42:3d:03:d5:66:57:33:99:63:
7e:96:d7:f7:fe:b4:1d:e9:38:ce:bc:7b:90:04:af:
d5:f6:8c:e3:52:fe:b8:b6:32:7a:98:76:3b:79:29:
0a:bb:4e:60:9e:ee:c8:bb:df:de:57:4f:ae:d4:42:
a6:cd:ce:a1:c1:b6:0d:a4:99:7c:82:bf:a5:55:7e:
7d:28:66:bb:62:e3:c2:08:20:13:41:30:25:0a:50:
f6:33:f5:07:2e:72:53:3f:f4:12:15:33:ab:63:89:
52:66:69:f3:da:3e:66:11:4c:14:9a:9c:71:d7:5c:
6e:7f:36:d5:dc:a0:91:fb:fb:85:a7:73:dc:b0:43:
16:c4:a3:c1:33:4b:92:0c:99:fd:87:14:cc:b5:79:
c2:e8:b0:9c:28:ce:b3:af:a1:84:4f:a2:c2:fc:91:
ec:66:33:84:82:9b:52:e1:91:55:7f:8a:ff:d3:5e:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4E:50:90:A4:6F:2C:83:03:7B:F8:F2:E2:DB:21:A5:9F:60:FC:5A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sk5QkKRvLIMDe_jy4tshpZ9g_Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0-62.76.238.255
193.124.17.0/24
194.58.56.0/24
194.58.154.0/23
194.58.223.0/24
194.87.1.0/24
194.87.51.0/24
194.87.122.0/24
194.87.128.0/24
194.87.179.0/24
194.87.233.0/24
194.87.255.0/24
195.133.9.0/24
Signature Algorithm: sha256WithRSAEncryption
42:77:06:63:6e:66:6a:ba:60:5f:f1:0a:99:50:ac:f7:28:4d:
0a:5d:ee:e0:4c:f5:bb:f1:95:5d:f6:31:8e:f3:64:c5:97:09:
ec:d8:0f:02:d3:16:06:97:99:29:51:f7:f9:dd:9f:4e:79:01:
38:52:6a:cc:40:d3:84:a4:ea:ac:1d:d7:56:69:49:9f:fd:b9:
c5:cd:15:7b:f9:8c:11:e0:79:e8:cf:61:98:96:54:11:6f:42:
3e:9a:3d:9e:a7:77:7b:09:a7:8d:11:72:fc:c0:e4:14:27:a2:
1d:8b:c3:92:0e:1e:fd:f1:c9:e3:ea:a7:7a:f2:6d:b9:15:16:
70:21:b9:a5:07:46:26:7b:d7:2f:d4:7c:e2:0e:9c:90:93:c3:
37:35:9d:ac:d3:76:f1:81:d9:9e:f0:19:fe:21:39:04:14:a0:
09:04:4c:85:76:5f:7c:ea:98:c5:a2:5b:e0:af:65:03:ec:6d:
60:e1:97:da:e6:f8:06:50:0e:d9:e9:c6:74:c0:ef:ac:1a:52:
0b:2c:22:e9:fa:ba:5b:ba:4a:84:99:ba:c7:4c:19:35:70:89:
03:65:d5:86:53:19:ac:19:84:4c:5c:c3:64:75:67:a4:4c:2d:
81:08:53:ad:30:a6:25:e6:fd:3b:24:e0:15:3d:d9:3f:4d:c7:
08:53:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:51 2025 by rpki-client