Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Jc387TmtDV_DzUPYNeoIg9E33A0.roa
File: Jc387TmtDV_DzUPYNeoIg9E33A0.roa (raw, json)
Hash identifier: s24NtE5UXDc2WukE00Cp3sVkp7j43WWazSrbu1sWBwQ=
Subject key identifier: 25:CD:FC:ED:39:AD:0D:5F:C3:CD:43:D8:35:EA:08:83:D1:37:DC:0D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01954CB70E522407A2ED235BD2CFA5BFCFFF
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Jc387TmtDV_DzUPYNeoIg9E33A0.roa
Signing time: Fri 28 Feb 2025 13:20:19 +0000
ROA not before: Fri 28 Feb 2025 13:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136557
IP address blocks: 155.2.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:b7:0e:52:24:07:a2:ed:23:5b:d2:cf:a5:bf:cf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 28 13:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25cdfced39ad0d5fc3cd43d835ea0883d137dc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:23:ca:5f:5f:2f:6d:5d:83:c3:24:84:66:
7f:ad:8b:47:f0:31:07:83:4d:48:d6:26:f9:86:12:
d4:85:c3:c9:ed:ba:2a:6a:14:14:9d:89:e9:35:24:
8c:93:83:b2:f0:30:03:2a:f6:7b:63:ca:a2:e8:d0:
7b:00:1d:5d:59:ee:96:48:41:32:fb:94:87:66:19:
fd:27:d5:02:d2:41:cc:65:25:65:0c:ab:87:23:e7:
cd:97:e6:0b:62:80:f4:e7:3c:8c:b4:41:03:35:0f:
96:cd:44:f8:61:84:2a:33:83:35:f9:e7:13:f9:b4:
27:cc:58:8c:ab:bf:00:90:87:30:ad:a8:d9:49:bd:
24:1c:e2:01:89:51:96:a5:38:19:88:83:2f:5a:fa:
59:c7:34:44:44:5e:37:1e:97:32:1a:f8:d8:9d:66:
77:77:d3:23:cc:8d:a7:6c:2c:ec:10:5f:3d:18:d8:
e1:bc:d4:d1:e9:04:20:66:26:95:81:b2:ee:07:27:
29:13:59:df:b4:03:9f:63:f8:53:95:47:eb:62:56:
4f:c5:fc:bf:62:ac:94:0c:68:b2:66:0d:45:2d:85:
d4:12:ae:17:6f:81:8b:4c:0f:ff:d6:65:1b:a8:35:
dd:24:b6:59:35:8f:f0:97:5c:44:c3:6e:96:b0:92:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:FC:ED:39:AD:0D:5F:C3:CD:43:D8:35:EA:08:83:D1:37:DC:0D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Jc387TmtDV_DzUPYNeoIg9E33A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.2.191.0/24
Signature Algorithm: sha256WithRSAEncryption
53:df:27:55:d7:fd:6e:51:af:8c:42:06:f2:95:f7:bd:3d:1f:
6d:a0:24:f5:0a:2c:d5:89:0c:28:19:6c:48:eb:51:d1:c0:d9:
07:7a:fb:d6:11:17:67:da:3d:c6:94:f6:c9:f7:0d:de:30:81:
a1:16:d9:9c:48:b4:e6:db:1d:dd:0e:62:ee:1d:80:2d:f3:5a:
9a:97:dd:99:1b:37:f2:a9:9a:9c:2f:6e:a4:b1:7d:f0:b4:9e:
98:7c:4d:78:bc:10:28:81:bf:26:3b:64:66:cc:97:21:7d:78:
9c:96:66:2e:16:03:1c:da:4d:10:eb:ab:b1:27:3e:85:83:ab:
2e:96:11:1a:8a:c6:84:9a:4a:b4:e4:18:69:78:ca:5c:b4:43:
a0:24:81:86:ac:c5:b2:e5:6d:37:38:ee:41:06:11:5b:a2:0a:
d5:e8:17:ff:f0:f0:5c:88:83:81:1b:43:2a:96:e9:7a:73:46:
f1:06:7b:94:4d:6f:02:bb:9f:5b:f4:0b:24:2f:56:b7:b0:41:
b2:45:c4:7a:5d:f6:0a:4a:e8:cf:f0:a8:78:96:dd:24:2f:dd:
ab:5f:45:fd:b3:88:43:b8:be:2b:7c:77:53:c5:82:ce:f6:0d:
0c:6d:42:91:3f:3e:6b:a8:c3:66:ef:d7:2f:ed:7b:11:49:5e:
eb:1f:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:38 2025 by rpki-client