Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jb05SAVt_B2sCxohdLmGLUqtVS0.roa
File: jb05SAVt_B2sCxohdLmGLUqtVS0.roa (raw, json)
Hash identifier: CgYoX04Mw7E+N7UHAhHYIXvq6TeTovrV3rONICBEVxA=
Subject key identifier: 8D:BD:39:48:05:6D:FC:1D:AC:0B:1A:21:74:B9:86:2D:4A:AD:55:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824AB81B3B940817370ECF0A0CDB5F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jb05SAVt_B2sCxohdLmGLUqtVS0.roa
Signing time: Thu 02 Jan 2025 17:51:19 +0000
ROA not before: Thu 02 Jan 2025 17:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ab:81:b3:b9:40:81:73:70:ec:f0:a0:cd:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dbd3948056dfc1dac0b1a2174b9862d4aad552d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:28:70:d8:73:c7:ae:87:31:a9:fd:07:df:
66:fc:94:5c:7d:74:8a:f1:4c:72:75:9d:35:16:19:
6a:64:43:4d:6a:a2:5c:6d:ac:67:7e:42:5b:7f:7e:
20:c4:5f:59:18:81:8e:0f:ca:cc:27:d7:10:b5:bb:
69:a7:2d:41:18:a0:d9:74:a6:21:da:05:29:45:0b:
9b:60:d2:9d:84:30:e0:eb:0d:52:db:79:94:94:90:
97:01:a5:21:1a:79:3a:2e:cd:e3:2c:4b:a0:95:db:
56:46:5e:13:32:71:47:47:01:93:81:33:73:d3:2a:
6c:21:4e:4e:39:d8:72:3c:49:21:80:af:8a:86:3f:
cb:25:5f:00:3c:eb:53:8b:21:3b:94:eb:98:ef:37:
8b:26:cf:81:31:ab:50:20:0c:d0:75:fd:6f:fe:91:
58:27:3c:92:b4:d7:37:2f:c2:09:68:e9:2c:dc:44:
6e:f1:70:82:10:28:ea:e5:1b:5c:e6:91:7f:00:b4:
d7:f2:f9:b6:2a:84:09:91:be:50:bc:04:a7:30:dc:
0c:51:c9:eb:89:a3:67:5d:7d:09:d1:fb:ce:35:e9:
da:7b:5f:9d:ba:9d:7d:14:96:ce:e2:8d:98:7d:95:
3e:3d:aa:59:e0:e2:2c:23:21:c4:8f:7c:6f:04:b4:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:39:48:05:6D:FC:1D:AC:0B:1A:21:74:B9:86:2D:4A:AD:55:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jb05SAVt_B2sCxohdLmGLUqtVS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.48.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:77:3c:75:b8:d9:8b:f8:b9:da:78:05:ca:88:35:8b:f6:56:
fa:96:9d:35:94:92:aa:89:3d:c8:b4:34:dd:ce:71:81:dd:68:
15:56:2c:c0:23:2a:d7:ad:4d:e1:65:77:13:26:b4:da:1d:3c:
92:e3:2c:ba:7e:87:5c:48:33:79:5c:0d:39:3e:60:56:37:00:
3b:a0:82:10:4e:0a:eb:6a:74:4d:4e:33:99:61:89:4e:f5:d4:
2e:af:67:73:e7:61:a4:da:ad:45:e6:5e:aa:f6:69:9d:75:56:
db:4c:c6:61:8c:63:ed:f4:2e:58:1a:e7:10:fe:13:13:6b:fa:
3e:47:67:77:73:bc:2d:7b:12:e4:a2:82:0c:7c:3b:a8:00:c5:
de:f3:e3:c9:7f:14:ee:48:31:b9:5a:10:cb:f5:a7:76:bd:f3:
48:52:6e:9a:34:f6:b0:e6:56:e9:87:bc:bd:74:76:cd:28:40:
90:6d:8e:df:93:a8:86:57:a0:e8:3a:fc:3a:72:06:f7:f6:e4:
20:45:0a:ea:13:b3:10:b6:f0:1b:db:46:6c:8a:a9:3f:75:bc:
ae:de:28:ae:e1:7f:2c:b9:d3:87:aa:6f:bc:49:96:e7:3c:65:
2f:58:ed:53:b1:ea:ff:cf:9b:78:d0:e8:2b:99:62:7a:e4:1d:
24:17:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:40 2025 by rpki-client