Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa
File: jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa (raw, json)
Hash identifier: /ylqB7KyfpIhWFWFpFGMmmVvMNfolX67eNrbZDEUJW4=
Subject key identifier: 8E:77:F8:89:72:8E:93:64:9B:DC:91:78:7C:0B:D9:12:76:B8:A1:9D
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01942068065BC4C6481360F803D976FF2A05
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135983
IP address blocks: 2a0e:cbc3:8000::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:06:5b:c4:c6:48:13:60:f8:03:d9:76:ff:2a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e77f889728e93649bdc91787c0bd91276b8a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:91:72:23:b3:12:2f:47:39:aa:76:d7:38:
ff:47:9a:9c:4e:aa:d4:25:f8:81:f7:d8:75:50:48:
8c:d6:52:74:95:51:4a:a1:c8:d0:02:43:1f:db:8e:
12:54:4e:e7:f7:e0:0c:60:8b:50:ce:28:ba:64:0f:
65:4b:16:4c:9e:5c:a8:48:50:ef:13:27:e5:e1:f6:
0c:37:81:b5:b7:45:05:94:b2:ed:9b:68:67:dc:ad:
f9:ca:e6:86:c8:5f:f7:a3:46:6f:0a:18:01:e9:e9:
78:6b:e5:ab:5d:21:de:8e:a2:f1:54:5c:0b:db:8c:
57:b0:6b:5d:2c:90:e7:76:b9:9e:bd:8a:fb:fd:64:
cb:6e:ed:c6:61:69:50:45:49:6d:e4:1f:a0:e3:c0:
be:44:07:83:26:6e:96:7a:ee:44:09:87:1c:52:c7:
af:f4:8d:60:87:16:d4:d2:16:c0:39:c0:eb:18:8a:
6b:bd:fc:ef:7e:20:60:1f:a0:ba:b1:bc:1c:77:9a:
f1:c7:81:f8:07:3a:90:a3:be:75:e9:39:ea:38:24:
28:44:c9:bb:5a:b3:95:92:0e:5c:ba:71:45:61:ed:
a4:0e:c6:4c:50:9c:4e:b9:e6:f0:f5:ce:d2:12:ed:
bb:d7:02:dd:c4:cf:60:68:f2:63:50:a4:8d:95:c3:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:77:F8:89:72:8E:93:64:9B:DC:91:78:7C:0B:D9:12:76:B8:A1:9D
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:cbc3:8000::/33
Signature Algorithm: sha256WithRSAEncryption
ae:5f:8f:87:2a:17:81:77:b1:02:15:a7:4e:46:d2:ab:b0:f2:
ae:87:ae:83:1d:de:f5:c4:30:90:45:ba:02:2f:02:1f:7a:58:
47:fa:ed:f1:d0:b6:bf:34:dd:c2:9e:ac:28:34:03:13:c7:46:
57:fb:fc:94:97:48:96:26:6e:b0:36:e5:e1:32:86:a9:1c:e0:
d1:79:74:e4:23:37:1f:e8:bb:2e:30:d0:89:c8:1e:9a:e9:50:
24:63:f7:0a:6c:a9:0b:ab:6d:2c:35:5a:6f:4b:f4:bc:e5:13:
c7:b2:8e:81:33:1a:e6:fc:41:4e:08:0f:a2:13:8a:fb:0e:b4:
47:db:d9:14:5e:20:06:65:61:f6:cd:08:0e:00:6f:c1:df:bb:
21:9f:88:e7:e0:cf:da:80:34:7a:3f:6e:0d:9c:72:c0:39:d0:
0c:05:f5:f3:f9:2f:ac:62:b4:b4:0d:00:53:e7:ea:df:49:84:
7f:ee:6b:e8:22:3f:d8:d5:43:b2:bf:0a:aa:96:b6:94:e0:ef:
c4:84:11:00:c1:c7:64:b0:15:64:0a:bd:49:46:e1:d9:72:e1:
b6:80:d4:89:c2:48:a3:82:86:3c:48:e4:05:da:4b:32:b5:8e:
04:9a:65:d0:c2:7b:db:bf:e8:91:93:a2:51:d8:5f:4f:e1:b4:
f4:53:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:43:05 2025 by rpki-client