Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ji-VMlbuJzilVRarMThUkAVoNtc.roa
File: ji-VMlbuJzilVRarMThUkAVoNtc.roa (raw, json)
Hash identifier: slwch1nRHl0v6TFzvpz7gVDLXoB9DWz1PBzYXdI5ZvY=
Subject key identifier: 8E:2F:95:32:56:EE:27:38:A5:55:16:AB:31:38:54:90:05:68:36:D7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE4A37B8A95FDF7AFB6BBAC00C6D8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ji-VMlbuJzilVRarMThUkAVoNtc.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209833
IP address blocks: 2a0c:9a40:8130::/44 maxlen: 48
2a0c:9a40:8130::/48 maxlen: 48
2a0e:7d40::/32 maxlen: 32
2a0e:7d40:20::/44 maxlen: 44
2a0e:7d40:30::/44 maxlen: 44
2a0e:7d40:40::/44 maxlen: 44
2a0e:7d40:41::/48 maxlen: 48
2a0e:7d40:42::/48 maxlen: 48
2a0e:7d40:43::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e4:a3:7b:8a:95:fd:f7:af:b6:bb:ac:00:c6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e2f953256ee2738a55516ab31385490056836d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:40:75:c4:7a:90:e0:0e:0b:66:41:05:e0:
10:ab:84:44:a5:05:81:66:e3:66:18:3a:1f:33:48:
34:81:ca:2d:49:2f:8f:af:7b:67:dd:6e:9c:c7:20:
48:3c:8e:46:a8:fe:c6:e9:a9:93:24:1e:79:e3:9e:
6f:a5:a7:cc:47:91:51:7a:9d:ae:d0:9c:96:82:5b:
07:ae:12:52:ab:d8:25:1b:7a:40:96:0b:3a:ec:7c:
c2:90:ab:bb:84:bf:01:49:9e:86:e2:f6:52:92:52:
8b:1b:92:76:88:f4:45:91:0f:6e:1a:db:1d:a0:a6:
18:3b:8a:2c:6a:eb:76:bb:f2:59:06:d5:9e:de:d6:
2f:6c:24:02:30:88:7c:9f:e1:53:cb:3c:ee:8a:a4:
83:30:00:3c:8e:2f:c9:19:a2:07:97:44:ad:14:08:
8c:ba:07:d9:d8:44:96:8e:89:2c:4e:be:51:a7:fe:
91:60:40:d1:10:cd:3d:3c:71:e5:2b:3c:b2:de:2c:
fe:ae:a2:cf:e7:48:22:09:99:c4:c8:18:f5:c4:80:
bd:ee:15:ae:42:4b:8d:bc:01:61:ac:9f:dc:26:2e:
a3:54:0e:f3:75:32:3a:73:d7:36:d6:28:77:d4:b5:
ed:60:57:68:4d:4a:28:48:b5:59:25:8e:01:30:19:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2F:95:32:56:EE:27:38:A5:55:16:AB:31:38:54:90:05:68:36:D7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ji-VMlbuJzilVRarMThUkAVoNtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8130::/44
2a0e:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
bf:69:ca:0a:70:66:fb:81:c7:7a:2b:b8:0b:39:a2:cf:40:eb:
bb:9d:e9:e4:14:0b:d8:c4:be:e8:74:7b:46:5d:92:d5:7d:a4:
36:07:60:e2:ec:19:a4:95:90:01:d6:2a:54:2e:dc:0b:99:16:
2d:df:41:86:42:f6:06:a8:aa:f6:53:c1:59:e7:af:6c:01:39:
28:e8:f5:3b:d2:78:43:e3:d2:ef:c6:05:7d:cb:16:a8:e4:7e:
0c:e2:32:4d:b9:82:91:f0:af:b1:d6:7d:27:e1:06:5f:d1:fa:
75:91:3b:a5:fe:24:56:07:1f:23:8e:5d:31:df:4e:fd:d0:d7:
9d:61:7f:33:d9:31:19:2f:da:89:69:b9:57:d5:95:5e:ee:ea:
b5:a1:ee:e1:63:1a:d4:3c:8c:b3:e1:3c:6c:d3:de:d5:28:22:
53:99:b2:e8:3a:77:03:28:68:b0:c7:f3:4e:9b:a9:77:8a:09:
86:d2:e8:8f:a8:c2:e2:91:b1:96:65:80:ab:da:fe:9a:c6:c8:
be:f0:96:9e:44:75:f2:36:5a:bb:99:67:8b:75:71:88:15:96:
b1:4a:79:de:bc:55:39:ca:1d:c4:35:5b:18:82:92:2d:9c:7f:
62:6b:9d:53:b9:42:c9:38:a8:09:db:50:01:1d:4b:9b:71:ed:
29:64:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:45 2025 by rpki-client