Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/jspyUx9ST8voDl5_tqWBwcBNmkM.roa
File: jspyUx9ST8voDl5_tqWBwcBNmkM.roa (raw, json)
Hash identifier: SfpYqBa5cBKvJ+tqYMut/aNUqpOjF1yLt8SdC4pXT2Q=
Subject key identifier: 8E:CA:72:53:1F:52:4F:CB:E8:0E:5E:7F:B6:A5:81:C1:C0:4D:9A:43
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0194FA89CE40F74250D0E6A50193FDD0C09D
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/jspyUx9ST8voDl5_tqWBwcBNmkM.roa
Signing time: Wed 12 Feb 2025 14:22:02 +0000
ROA not before: Wed 12 Feb 2025 14:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 194.179.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:89:ce:40:f7:42:50:d0:e6:a5:01:93:fd:d0:c0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Feb 12 14:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eca72531f524fcbe80e5e7fb6a581c1c04d9a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:9f:c8:35:f1:3c:67:c9:05:e9:44:c1:51:
70:57:f6:b8:75:13:7d:f8:c7:99:b4:ed:87:28:00:
0c:f6:06:d2:41:50:ff:da:62:04:25:61:1f:32:6d:
ac:da:a5:bf:2c:3f:40:17:fd:f7:93:d5:ce:67:8a:
2f:70:0a:23:d1:ff:34:79:ba:1a:2f:19:11:d8:28:
bf:bf:77:ba:2e:87:70:32:2f:25:d1:05:5a:dc:52:
67:8f:b1:02:9b:ad:42:c0:c8:2e:c1:33:ab:4d:ed:
3f:51:c7:87:75:3e:f3:57:b3:2b:14:06:d5:9d:7e:
4c:5f:ad:69:09:bc:57:18:0b:8c:a3:fc:86:ea:fe:
19:56:75:2e:a6:4b:b3:11:46:b4:59:15:9d:97:78:
63:19:28:1f:bb:5d:aa:ad:04:d4:22:38:8c:e7:2a:
7e:e2:6c:6c:c6:e0:3b:a2:fa:7d:05:5a:b5:5d:0f:
03:42:18:db:6d:5e:39:d5:03:d3:c4:4c:6f:14:88:
7a:08:0e:4a:5b:3f:b7:6b:20:c5:97:fe:9a:6c:e7:
5c:bf:ff:4f:37:43:7c:0c:1f:d9:ec:7f:09:f3:01:
7e:f9:04:9e:03:6f:c9:56:f7:bb:02:68:0a:7a:fa:
ee:a1:8f:37:e8:5c:e4:a8:cd:4a:2a:4b:89:50:39:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CA:72:53:1F:52:4F:CB:E8:0E:5E:7F:B6:A5:81:C1:C0:4D:9A:43
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/jspyUx9ST8voDl5_tqWBwcBNmkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:91:aa:93:ee:fa:44:38:a1:85:f4:d1:8d:a6:88:13:88:9c:
be:70:ae:01:0f:55:3c:01:2a:04:6d:0f:58:fb:f7:4f:5b:3f:
f7:6e:12:8a:c1:64:9b:88:0e:8e:dd:bf:61:88:75:0c:4a:b5:
22:38:f9:0f:b8:4d:ad:ed:56:ad:2d:d2:ae:29:29:49:e0:9d:
fa:3b:d3:31:cb:48:2d:77:c1:38:4f:d9:97:af:53:7e:e5:86:
e3:5a:44:12:f0:7d:a0:fb:7b:98:fe:9f:0c:f2:df:90:5e:b1:
bd:0a:7e:24:38:a6:09:98:66:85:37:55:0c:11:41:63:9a:c8:
60:a7:ea:3b:37:09:05:cb:87:55:41:1e:91:86:5c:5a:9c:01:
2b:fc:cb:36:17:0f:e5:b0:09:3b:b9:43:d0:e1:98:ea:46:d8:
a6:70:20:43:6d:3d:f1:1b:f8:e0:5e:97:c2:1b:ef:8a:97:37:
73:c2:eb:d8:c9:09:63:48:07:47:1d:d8:89:12:fe:fe:d0:4b:
4f:f8:92:a1:32:16:89:91:8e:a9:fe:1f:ab:f5:af:eb:4b:82:
0f:c1:8d:4e:2b:43:5e:29:e5:1f:e5:d7:15:d5:26:ff:15:f1:
fc:87:cd:13:58:ab:b2:e8:1d:23:3a:98:c9:aa:65:63:d9:96:
c2:38:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:19 2025 by rpki-client