Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JxvXv1SK_8H7hNIOu3azheEUN_c.roa
File: JxvXv1SK_8H7hNIOu3azheEUN_c.roa (raw, json)
Hash identifier: x34KV2+MPw2bH9bEpIO2qyGptTiGLHv6QYjhlgGztgA=
Subject key identifier: 27:1B:D7:BF:54:8A:FF:C1:FB:84:D2:0E:BB:76:B3:85:E1:14:37:F7
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746ED6D6D38984711BFCFF95530DE03
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JxvXv1SK_8H7hNIOu3azheEUN_c.roa
Signing time: Thu 02 Jan 2025 13:49:07 +0000
ROA not before: Thu 02 Jan 2025 13:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.163.69.0/24 maxlen: 24
194.195.101.0/24 maxlen: 24
195.252.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ed:6d:6d:38:98:47:11:bf:cf:f9:55:30:de:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=271bd7bf548affc1fb84d20ebb76b385e11437f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:f4:c0:79:0a:77:95:50:1a:77:cd:57:9b:
0a:45:4c:75:cd:7e:12:7b:02:e3:3b:ad:85:00:ad:
71:86:ef:82:34:71:49:79:d9:c3:0b:9d:e8:18:1f:
3c:f1:be:41:df:bb:df:33:3c:a6:2c:48:1f:be:ef:
75:9a:b2:fc:bb:ab:2e:2e:31:5a:f4:e9:8f:af:df:
7c:b5:76:b0:03:5f:3b:e5:97:0d:cf:22:d8:47:b9:
78:0e:9f:0e:ea:55:fa:ab:95:fa:64:e5:93:29:c8:
64:53:b1:8f:58:b2:89:a3:3d:b1:bb:e5:e1:2c:1b:
eb:8d:2c:81:7e:7f:d2:3f:ef:d9:fa:8b:fa:c4:9e:
5a:3d:6e:00:56:e8:5f:85:2e:3d:41:02:50:f6:d3:
a4:83:a4:88:40:54:a2:3e:46:5c:ee:18:7a:84:2c:
36:c2:8f:5f:38:c9:26:d7:a4:e6:ea:57:4e:6a:c5:
07:90:d0:7a:52:dc:1c:4b:88:96:c6:10:4f:46:39:
de:5d:f5:f8:5a:90:6c:d5:e8:c0:2d:c0:2b:b6:4e:
f1:48:37:bb:ff:a3:b4:b8:35:29:8c:6a:59:19:0b:
36:f8:d5:90:4a:4d:eb:a3:19:99:b8:d9:19:2d:c8:
4c:a9:ed:71:f2:ae:ef:6a:d1:fd:cb:cd:2c:2a:ba:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:D7:BF:54:8A:FF:C1:FB:84:D2:0E:BB:76:B3:85:E1:14:37:F7
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JxvXv1SK_8H7hNIOu3azheEUN_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.69.0/24
194.195.101.0/24
195.252.172.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6e:8c:17:7b:9c:fc:59:a7:52:b6:6d:5b:32:02:ae:a3:f1:
03:6c:6f:2d:27:d4:19:f8:da:6d:11:a3:75:8a:a4:10:01:e7:
ab:ec:46:51:ad:4c:be:6f:b2:33:55:0f:c9:d5:1a:93:7e:08:
ee:3e:f8:f6:c2:3d:15:11:d1:9e:e1:85:31:68:a3:0b:36:55:
2f:a5:ac:71:7f:9a:c1:5f:a9:83:7a:60:74:c8:d3:ee:81:f1:
d3:0d:ec:11:d9:6f:47:8e:2c:0e:02:5d:15:ba:27:c1:5a:9a:
00:d5:2d:f7:c5:89:1e:26:1d:e0:af:0d:d0:d1:4c:35:88:9f:
79:f3:2c:33:4f:3e:99:5a:3f:b6:03:0a:d3:39:13:96:7d:d6:
ed:e5:0a:32:84:db:75:f9:80:3f:c6:b0:31:b9:8f:a9:6d:ba:
bc:6c:47:db:32:15:f3:6a:c0:b8:19:7f:56:82:f8:a7:9a:d1:
98:ee:36:06:dd:36:b3:c7:2b:f3:f4:30:32:80:53:d0:5e:95:
8c:e4:b6:41:83:1b:24:30:45:b7:6c:4d:f3:25:5a:cc:75:00:
3e:2a:82:fc:7c:06:47:72:4b:b6:f0:f8:b8:63:6d:5c:b4:24:
77:4f:26:03:a0:20:15:09:51:6d:6c:9f:fb:f7:bb:5d:db:37:
3b:60:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:44 2025 by rpki-client