Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iSTJISA50sD3ARwGwfqAZflTT04.roa
File: iSTJISA50sD3ARwGwfqAZflTT04.roa (raw, json)
Hash identifier: pFj0ZIjCKyt7KB77r/XCUOyGaopETuu8o7r6dc2+Ahg=
Subject key identifier: 89:24:C9:21:20:39:D2:C0:F7:01:1C:06:C1:FA:80:65:F9:53:4F:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194F07D25975977ED55FC18DAEC27B0169E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iSTJISA50sD3ARwGwfqAZflTT04.roa
Signing time: Mon 10 Feb 2025 15:32:00 +0000
ROA not before: Mon 10 Feb 2025 15:32:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213446
IP address blocks: 193.25.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:7d:25:97:59:77:ed:55:fc:18:da:ec:27:b0:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 10 15:32:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8924c9212039d2c0f7011c06c1fa8065f9534f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:58:a0:86:2a:85:69:5e:e5:35:f5:49:9b:
9e:13:26:48:b6:20:6d:4a:38:b7:81:55:54:33:e8:
f9:fd:c6:14:f4:d6:fd:6f:74:dd:de:49:90:69:d4:
00:95:e6:a4:a0:fa:03:e9:7e:73:6f:99:45:03:f3:
dc:d0:6a:c7:26:e3:e7:1e:95:41:a4:34:18:6a:3a:
d1:71:6d:fa:81:37:14:1f:99:e2:28:6d:fb:56:0c:
9f:4f:b6:fd:44:2d:7f:71:ae:5f:1a:c2:ef:dc:f4:
20:60:95:85:c0:17:81:9b:c7:9b:d7:ed:94:40:01:
9b:97:fd:9d:a8:db:9e:7c:f9:25:2a:ad:2d:bd:39:
f5:eb:00:17:a5:7d:ee:33:91:1e:ed:31:88:af:94:
01:32:fa:2a:ed:ed:7f:bd:01:02:bb:4a:64:c3:b1:
8e:7e:f1:ee:82:ce:a3:b5:a6:ba:5f:c9:d8:0e:3d:
08:0d:6b:12:9d:39:09:fe:f6:ef:2f:94:e5:11:da:
ba:c6:1f:e4:5c:1f:5b:10:90:05:4f:d1:08:c0:a2:
ac:fa:bc:20:24:67:7a:88:f1:fa:9b:32:cf:d6:ff:
00:e8:22:9e:aa:80:7a:de:ba:03:41:7c:c2:4c:fe:
55:1c:45:10:ee:61:59:58:ce:aa:86:eb:e8:2f:30:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:C9:21:20:39:D2:C0:F7:01:1C:06:C1:FA:80:65:F9:53:4F:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iSTJISA50sD3ARwGwfqAZflTT04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3e:91:07:71:bf:bd:a4:9b:ae:41:68:4d:67:96:5f:35:55:
e2:4f:27:e8:59:67:8e:28:50:40:56:0f:9d:41:5d:42:09:f0:
ef:34:39:94:5c:46:e1:b3:38:b6:c2:55:3e:d4:8b:aa:44:0a:
06:dd:a3:e0:5e:c3:d3:91:d9:d3:ae:ef:22:13:4e:42:f6:d8:
5b:0d:b3:7f:48:4a:e7:52:a7:18:b9:68:d0:05:56:c4:16:c8:
6a:33:b0:28:af:43:ab:ed:5d:a2:37:69:a5:d9:42:92:67:59:
a2:da:d8:e0:47:f7:42:fb:c8:cb:49:67:11:90:e9:b2:4d:eb:
9e:31:38:ae:96:b5:53:5f:3d:35:d8:35:ae:6a:6f:4e:15:57:
b5:13:58:00:57:6a:57:1c:66:95:8e:b5:e0:e2:ca:de:59:d8:
71:7e:a5:5e:4a:66:b8:a9:2d:77:c8:27:99:b3:bd:7f:7b:9a:
27:f7:2b:00:22:0d:96:5c:8c:3f:12:1b:0d:fc:f7:6d:b8:51:
8c:cc:95:4c:57:b1:20:39:53:20:ee:4c:43:b3:f4:8f:1e:72:
bf:5c:5c:7d:0a:3e:db:d3:5b:c3:93:f8:99:64:37:6f:b1:7a:
ea:bd:d7:69:0e:39:27:d8:83:9d:4f:5b:60:b3:84:09:f2:fd:
a7:58:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:09 2025 by rpki-client