Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/jbpo7UEJqge335LMUeNSgvCaNTI.roa
File: jbpo7UEJqge335LMUeNSgvCaNTI.roa (raw, json)
Hash identifier: MZqdVSw/apK3pc3ZeATkJS+ETEBWZhP6yk5oDbnCI8c=
Subject key identifier: 8D:BA:68:ED:41:09:AA:07:B7:DF:92:CC:51:E3:52:82:F0:9A:35:32
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019499A74F867534886260432FC99A0CFFA8
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/jbpo7UEJqge335LMUeNSgvCaNTI.roa
Signing time: Fri 24 Jan 2025 18:51:06 +0000
ROA not before: Fri 24 Jan 2025 18:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 185.249.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:a7:4f:86:75:34:88:62:60:43:2f:c9:9a:0c:ff:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jan 24 18:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dba68ed4109aa07b7df92cc51e35282f09a3532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:0d:08:98:e0:10:b9:bc:68:65:e2:36:5f:
ba:4e:d2:94:69:5a:25:ef:65:38:3a:78:fe:a0:86:
d0:47:79:a2:58:b7:1f:2a:e1:1b:4e:a3:03:cc:01:
47:95:c7:3d:b2:15:18:fe:6d:0a:3c:e2:2f:5b:f9:
36:52:2b:80:53:c5:32:27:c0:63:33:29:e4:ac:3a:
b0:bb:de:c9:d6:9c:f0:80:95:b9:48:20:60:7f:58:
a7:0d:3f:b9:e7:de:1f:4e:6c:00:1f:bd:72:5f:9c:
22:7e:04:ed:fc:ad:9c:af:e0:a9:83:af:35:cb:0f:
36:3b:b8:10:7b:c0:3b:da:8a:e5:5b:76:b2:2c:e4:
2d:ca:6a:99:01:30:ce:35:61:66:b8:81:c7:39:61:
b2:4a:3b:c9:71:71:69:5d:c4:de:a4:f7:4e:32:87:
b8:c2:e0:21:9c:e0:66:1e:29:5e:d8:62:69:20:49:
f3:8c:0b:37:9b:2d:2f:86:fa:e9:d7:56:4f:8e:f0:
7f:c3:f6:17:4d:ec:9c:ca:1e:21:26:ee:c1:f9:5d:
f7:b4:3f:f9:26:63:06:59:b7:90:84:86:dd:24:2f:
8f:f6:ac:27:b2:f4:63:13:fc:18:99:72:70:c1:6a:
3c:1f:51:7a:2f:29:84:95:5c:60:ab:07:21:0d:03:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:68:ED:41:09:AA:07:B7:DF:92:CC:51:E3:52:82:F0:9A:35:32
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/jbpo7UEJqge335LMUeNSgvCaNTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:c9:d8:b7:7e:7f:bd:ac:9c:72:48:be:2a:aa:ff:ff:13:fa:
b9:43:63:9e:86:4c:cf:3c:2b:4a:09:e7:3d:dd:3e:e2:4e:5f:
81:cb:26:2b:ec:7b:7c:2f:28:28:a4:96:a4:99:2b:10:17:34:
63:12:17:24:ed:00:b6:78:8d:88:ca:b5:44:cc:c7:9b:71:1c:
06:fd:d9:7d:b1:ea:78:12:67:10:0a:44:77:3f:bf:5a:62:ae:
24:b1:55:e0:89:1e:b8:d2:fa:0f:3c:7b:3c:6f:78:a8:85:8e:
4b:7f:5d:ff:f9:f5:0e:b9:bf:4a:e4:f9:64:a2:4a:45:16:1e:
09:a5:87:ac:75:bb:18:72:eb:3a:c5:3c:c5:6b:81:c5:3e:f4:
87:e2:f7:6f:ff:be:8a:92:30:4d:2e:16:4c:77:e5:29:a3:70:
20:a4:f2:04:67:f1:7a:fa:ae:c3:26:3c:66:65:07:70:2e:bd:
13:8f:42:3e:cb:4d:29:4b:ff:54:81:7d:ae:f5:4b:35:37:a9:
05:8b:c9:a5:bd:48:72:40:90:3a:dd:7a:3e:ec:8e:0b:88:41:
7d:9d:b6:e4:6c:31:a1:c3:38:0e:2c:4f:86:3e:dc:ed:6a:ad:
c2:a7:4c:6e:95:88:3a:f7:c8:2e:80:09:62:67:20:3d:40:a0:
93:dd:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:25:56 2025 by rpki-client