Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/jjO9-8epil2wlX6yxQCCJh1ujj8.roa
File: jjO9-8epil2wlX6yxQCCJh1ujj8.roa (raw, json)
Hash identifier: DJvQxhaQyTqs1pTzZZ0ZDy3iI3rFaXIi8i+iJulEcM4=
Subject key identifier: 8E:33:BD:FB:C7:A9:8A:5D:B0:95:7E:B2:C5:00:82:26:1D:6E:8E:3F
Certificate issuer: /CN=0acf0a954639c83582974bd29c1992272b3683a3
Certificate serial: 021C15EE
Authority key identifier: 0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/jjO9-8epil2wlX6yxQCCJh1ujj8.roa
Signing time: Tue 26 Apr 2022 19:38:06 +0000
ROA not before: Tue 26 Apr 2022 19:38:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.202.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35395054 (0x21c15ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf0a954639c83582974bd29c1992272b3683a3
Validity
Not Before: Apr 26 19:38:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e33bdfbc7a98a5db0957eb2c50082261d6e8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:02:38:56:e3:c0:1d:a2:63:1a:20:6e:99:
79:aa:8e:1a:77:53:56:29:3c:43:0b:ab:c5:a6:07:
e9:87:7c:3e:e0:4d:f2:66:90:af:20:6d:5f:3c:1c:
ad:da:26:42:39:7d:19:99:9e:e5:6f:fb:4a:6f:ea:
44:dd:b2:a2:78:56:85:cf:30:a0:f0:b2:4a:54:00:
5e:3f:d1:7b:1b:d0:ac:9b:10:52:7b:f4:3d:07:7a:
54:a2:04:12:d7:f8:2f:62:ac:ce:75:b4:bc:82:a4:
18:2e:62:4b:14:21:cd:49:0c:44:fa:21:93:75:b1:
55:08:80:11:9c:9d:ea:c4:77:1a:40:68:35:df:ad:
f1:e9:d3:19:4d:1f:78:04:fa:e4:de:e0:12:ab:02:
6a:f2:31:9f:13:6f:41:89:b9:3b:8c:98:cb:0a:3d:
41:10:ab:6f:50:6a:f8:77:9a:5c:8f:c5:31:0d:8d:
f7:68:9e:41:de:b7:5c:cf:51:94:b9:91:af:e6:7e:
05:c0:08:a6:dc:b6:ac:61:7c:74:d9:e1:d5:68:42:
90:c3:f6:ac:cb:41:94:e2:e6:12:1c:4b:95:18:e0:
dc:76:39:b8:aa:ff:83:10:67:10:82:75:fd:7e:10:
80:45:02:04:48:4e:50:ca:10:b5:2f:d4:fa:68:3d:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:BD:FB:C7:A9:8A:5D:B0:95:7E:B2:C5:00:82:26:1D:6E:8E:3F
X509v3 Authority Key Identifier:
keyid:0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/jjO9-8epil2wlX6yxQCCJh1ujj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.110.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1e:e6:8c:a4:82:2c:85:b6:a4:82:35:48:56:19:bd:e5:29:
88:41:a4:3c:fc:b5:87:3d:67:3b:ce:78:d6:7c:b3:b6:46:80:
75:3e:be:ef:c8:b0:7e:44:a6:2a:df:e5:35:0a:d5:5e:16:70:
05:ce:57:3b:a1:32:7b:47:b1:65:cd:f9:9c:7c:b6:26:ab:11:
85:7b:22:e6:f2:aa:24:0b:55:9d:87:bf:91:ad:a4:7c:fc:cf:
af:ae:cb:98:6d:ac:80:2e:ee:a0:94:02:1e:6d:b3:6d:41:eb:
e8:a8:26:2f:89:e7:af:08:54:da:ff:46:c1:33:6f:29:bf:bd:
b9:1b:5e:1c:b6:e0:75:25:3e:ba:60:b5:29:91:0d:87:7b:b4:
e7:d8:bf:c2:e6:97:44:c2:cf:22:95:a3:26:ce:5a:c0:41:95:
d4:e5:40:36:b1:6a:2f:fe:8d:b9:00:79:8a:89:0a:78:05:83:
30:65:a5:34:7a:5e:6b:6f:03:c9:29:13:4e:8b:d0:d5:29:86:
22:29:b6:8d:dc:c1:33:5a:11:fc:08:d2:e8:93:4b:8f:e6:2f:
67:af:0a:f3:50:f9:2a:c6:0b:e8:33:e3:ee:c6:07:ca:c4:5b:
64:f7:e8:7b:13:a8:d7:9f:b9:ac:e3:ce:20:e3:0f:78:ad:b7:
5d:5d:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:36:28 2025 by rpki-client