Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/JByCSmpT_tKaghi6acJ1P7xlxi4.roa
File: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (raw, json)
Hash identifier: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=
Subject key identifier: 24:1C:82:4A:6A:53:FE:D2:9A:82:18:BA:69:C2:75:3F:BC:65:C6:2E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019422200669C68647E6C377C321C39B04C9
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/JByCSmpT_tKaghi6acJ1P7xlxi4.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 212.80.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:06:69:c6:86:47:e6:c3:77:c3:21:c3:9b:04:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=241c824a6a53fed29a8218ba69c2753fbc65c62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:78:79:b8:71:77:dd:cb:d3:56:fa:b5:ee:
f9:5f:43:40:cd:c7:27:f2:97:71:b3:7c:a8:aa:21:
be:5c:7f:85:5d:80:00:31:01:0b:ff:63:5a:a3:03:
d7:9e:f5:b5:82:15:ae:4f:43:f5:93:48:14:26:f3:
6c:67:1a:00:5f:f6:d7:2b:c4:fe:b2:c8:f2:a3:92:
23:65:de:ac:60:d1:ce:fa:a0:96:ad:8b:a5:20:e1:
a5:01:5a:bc:62:cb:8c:d1:f1:77:20:4d:3a:08:09:
52:8d:44:89:60:e5:68:0e:fe:44:4f:b6:71:d5:59:
35:3c:87:c8:74:28:75:6b:16:2f:fa:42:32:e1:2a:
c6:d5:14:bb:fe:3d:3d:02:df:1c:93:f3:95:74:19:
23:c3:43:e2:77:74:b9:53:dc:03:2c:73:1b:f8:4f:
c1:65:10:b8:ed:bb:8f:56:97:e8:86:e5:b7:42:2d:
a1:89:dc:71:e0:ff:e4:66:56:66:af:ff:f6:8b:75:
38:b0:c1:a4:da:9d:a3:a4:12:b0:34:bb:7c:34:29:
78:81:7d:99:b6:65:9b:e0:cb:8c:00:10:0c:c2:39:
15:55:75:60:dd:8a:bb:6c:dd:e2:8b:11:2f:33:9b:
bc:23:27:ee:99:5b:55:96:0d:88:06:9c:73:11:8b:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:82:4A:6A:53:FE:D2:9A:82:18:BA:69:C2:75:3F:BC:65:C6:2E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/JByCSmpT_tKaghi6acJ1P7xlxi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:df:8f:de:17:29:19:13:24:e6:d9:78:69:ac:d1:42:82:0a:
08:53:7d:6b:fa:b1:36:c2:54:15:37:88:56:e8:c1:2b:01:4e:
de:d8:15:26:45:cc:df:52:2b:ce:1d:65:09:ef:66:75:c0:a8:
7d:1d:55:95:05:fd:ea:58:b4:b7:cf:04:60:1b:28:75:2b:31:
06:7c:98:42:1d:fa:55:22:86:ca:aa:6c:0c:e4:83:b6:7d:e0:
51:88:9d:ea:f4:80:2f:95:55:c4:8b:a7:c0:4b:55:bb:d0:51:
5d:05:a6:bb:53:19:8e:6c:36:4b:84:72:45:90:8c:28:bf:5b:
58:fa:52:4a:cf:9a:ef:87:c8:cf:94:bc:08:58:3a:15:1c:b1:
1e:78:b8:02:66:8e:ec:35:22:25:3a:36:a3:c3:f1:8c:3d:d9:
8b:de:2c:c7:0f:32:71:f7:8e:a9:76:a8:23:23:2a:4b:b3:48:
8c:2e:d4:9f:05:86:69:44:f7:0f:3f:11:13:11:ce:b1:29:44:
b0:4f:83:9d:04:6f:d3:46:3e:59:37:19:cd:d1:78:9e:7f:14:
bb:68:17:ca:3f:db:fc:33:9d:92:81:6c:3d:2e:b9:43:b4:3e:
0b:87:33:f0:a5:03:86:8e:39:6d:9e:86:71:c1:67:46:a7:be:
7b:a8:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:39 2025 by rpki-client