Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Njz6tF05e2JuE_pdVlzt9icM_i0.roa
File: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (raw, json)
Hash identifier: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=
Subject key identifier: 36:3C:FA:B4:5D:39:7B:62:6E:13:FA:5D:56:5C:ED:F6:27:0C:FE:2D
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D990223543445144622323E856DF62
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Njz6tF05e2JuE_pdVlzt9icM_i0.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214638
IP address blocks: 89.36.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:90:22:35:43:44:51:44:62:23:23:e8:56:df:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=363cfab45d397b626e13fa5d565cedf6270cfe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:fe:ab:ad:bd:bb:f8:80:dd:40:fb:1e:a5:
be:f2:35:3a:50:50:62:64:93:7b:95:c2:9a:d8:b8:
1d:7e:82:71:c1:a8:d3:39:36:9f:b9:37:ed:af:67:
21:ef:d8:f2:f1:6c:28:78:6c:6d:9c:73:55:8f:af:
61:f1:23:81:f1:c7:d4:aa:70:bb:9f:c5:be:3f:13:
97:c9:85:39:d0:66:d6:a1:5f:68:47:95:6d:14:dc:
d7:8d:ab:5b:1e:58:33:98:85:5d:a2:47:8a:8a:bb:
d9:fb:54:9d:ae:d9:72:19:00:23:2d:33:28:4d:77:
1a:fb:94:5f:cb:4d:03:d4:37:97:1c:74:c1:bb:a3:
06:cd:47:9e:61:de:f1:93:db:15:6e:9b:38:a9:9e:
4b:df:0a:ed:4c:52:32:77:aa:52:9d:63:26:c1:cc:
3a:01:a6:7c:33:30:cf:f8:3a:a4:ed:09:e8:35:49:
ec:95:1b:85:c7:48:a8:15:3d:c3:91:38:80:54:fa:
21:b5:bf:88:5d:05:a8:f4:31:03:08:4b:41:41:73:
f0:9e:27:6c:49:bd:0d:2d:a2:1d:0b:f7:ad:47:ee:
11:5f:a3:5e:61:bf:d7:89:85:5c:82:4c:9e:91:61:
ab:c4:cd:40:05:74:35:5d:26:9f:13:fc:1f:94:3b:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3C:FA:B4:5D:39:7B:62:6E:13:FA:5D:56:5C:ED:F6:27:0C:FE:2D
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Njz6tF05e2JuE_pdVlzt9icM_i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:04:bb:de:e4:a3:b0:83:2a:d9:d2:f8:64:8c:45:17:a4:19:
e0:6b:f5:22:eb:20:2a:f7:72:8d:a6:40:ac:db:53:37:58:e8:
1f:08:5e:28:73:3f:e6:bf:b0:0c:3f:a2:cf:1e:ba:18:8c:9d:
5b:82:c0:14:aa:ba:6a:fc:dd:38:b7:9e:ac:3d:ef:10:6d:3f:
30:45:16:81:98:56:04:43:d1:fc:08:76:91:83:0c:06:9d:5a:
95:3a:c8:6a:9e:ec:8e:b3:69:4b:bb:d0:80:ad:59:dd:ae:24:
1e:9b:68:2f:a3:54:2b:02:7d:c6:43:5b:a6:2a:16:c0:85:4b:
a9:e4:4c:fb:fb:b6:62:95:6e:bf:ae:b4:b8:6d:50:22:23:0d:
fe:45:bc:c1:6e:4e:a9:d1:9b:3d:f6:dd:8e:c4:af:2d:d9:f7:
09:5f:7e:99:97:8f:cf:ee:40:63:ff:19:e1:0c:55:23:ca:2f:
0c:81:6f:7b:7c:6e:ab:0b:68:76:fc:2e:ce:66:9d:bc:9b:c7:
39:91:b0:9d:df:76:0d:e1:21:71:6c:6c:8e:b2:3e:c1:48:c0:
bf:e6:13:80:16:12:4e:e6:fd:8b:16:4e:81:d6:fa:c3:90:13:
52:bc:f5:20:c9:41:47:63:1d:08:b8:4c:e0:69:04:64:e0:85:
24:0f:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:45 2025 by rpki-client