Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/JvZUEi7A7V388WY-38Um7sLP4iA.roa
File: JvZUEi7A7V388WY-38Um7sLP4iA.roa (raw, json)
Hash identifier: CvMgS2JS1B5/pFFOBX0cIZilf0BG410ECm9I/vEGJ5c=
Subject key identifier: 26:F6:54:12:2E:C0:ED:5D:FC:F1:66:3E:DF:C5:26:EE:C2:CF:E2:20
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019427B694F66703089AC3983E8C3AC54AAE
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/JvZUEi7A7V388WY-38Um7sLP4iA.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142111
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:94:f6:67:03:08:9a:c3:98:3e:8c:3a:c5:4a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26f654122ec0ed5dfcf1663edfc526eec2cfe220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:fc:47:4d:f2:74:78:01:a9:f0:c3:c5:6c:
04:3a:82:5d:93:96:6c:c3:74:7d:15:eb:5a:3b:c7:
67:99:8e:5d:66:59:80:3e:b6:0b:c0:df:3b:df:36:
58:34:12:b7:c8:fa:5b:b6:2a:16:ff:55:9b:e3:6c:
fa:56:5e:83:b4:9d:66:37:6d:cc:67:02:db:fc:ed:
c3:91:48:77:1c:f1:1a:ac:12:52:2c:87:a4:a6:de:
a3:f3:3f:da:5e:b9:09:93:fb:ad:50:cd:5b:d9:30:
73:e6:12:b0:e9:04:06:2a:d0:b1:7b:ae:90:35:1c:
e7:32:de:5f:dc:ce:b5:a9:ac:bd:85:16:25:11:d7:
7c:13:08:0b:c1:d0:49:d4:25:9e:a4:2f:5d:f4:5b:
51:88:09:55:df:01:b1:8a:2b:d5:13:4f:67:68:37:
1b:78:78:33:b4:f2:55:02:fe:98:0f:df:f3:7f:6c:
46:5b:b7:60:1b:54:ff:84:26:97:6c:19:15:c9:c4:
fc:78:38:92:46:80:6f:71:89:21:d2:b0:c2:57:6b:
ba:26:04:a6:48:f1:b0:2c:a2:3b:a1:2f:b3:28:fd:
37:be:47:e8:a2:13:27:96:97:8e:f3:42:ca:c7:61:
6f:ea:a2:d1:b8:b2:3e:24:c4:3e:4e:f9:14:89:bc:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F6:54:12:2E:C0:ED:5D:FC:F1:66:3E:DF:C5:26:EE:C2:CF:E2:20
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/JvZUEi7A7V388WY-38Um7sLP4iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8f:4e:88:ea:a2:d9:49:bd:ab:86:4a:1e:83:f1:43:4f:6d:
e5:dc:6c:01:dd:d6:82:ee:d8:68:23:e1:9a:43:85:39:97:7c:
ee:ba:a2:91:84:3b:07:dc:f8:65:f0:f4:5c:c9:d0:e0:cb:f6:
40:c6:2a:95:b5:73:57:75:e7:53:28:71:a5:bc:d6:93:e2:96:
d2:84:53:da:90:b0:ad:2a:35:74:28:e8:d1:66:fa:dd:51:e7:
25:7e:f2:b7:9b:93:5b:05:7c:3d:15:fc:c1:69:80:a0:2b:87:
b7:b3:ae:47:7a:8e:53:e0:0f:73:e8:f5:66:2a:14:87:22:ba:
cc:dc:d6:f7:ef:88:99:71:82:d7:23:fe:22:aa:bb:f1:99:9f:
44:71:de:32:62:d7:1d:9f:4f:7e:08:2f:0f:d3:70:02:b2:a4:
e5:57:a5:4a:c5:62:39:ce:96:07:4e:bc:4d:4d:0e:4f:9c:d5:
2b:15:9c:b6:f7:48:9a:08:bd:f7:5b:1e:34:8d:70:3c:1c:b6:
2c:36:5b:5d:9c:6e:74:39:f2:4d:2f:a0:8e:85:7f:aa:7f:ce:
42:04:47:bf:fd:5a:ac:a0:2e:b8:c8:8c:35:6c:9d:0b:dc:76:
02:e8:78:bf:47:68:c4:00:fd:91:5c:25:94:0f:4e:b1:98:0d:
b4:40:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:14:56 2025 by rpki-client