Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/jGd-_6kIrafDkiBg2CrmRuasbPo.roa
File: jGd-_6kIrafDkiBg2CrmRuasbPo.roa (raw, json)
Hash identifier: 6T4xwMmHT8HY/61aXk9AZr2V9P7kaRm31MWmFEWn+gc=
Subject key identifier: 8C:67:7E:FF:A9:08:AD:A7:C3:92:20:60:D8:2A:E6:46:E6:AC:6C:FA
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC04B5D1B308EC0326754D28674F2D
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/jGd-_6kIrafDkiBg2CrmRuasbPo.roa
Signing time: Thu 15 Jun 2023 06:44:04 +0000
ROA not before: Thu 15 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 193.109.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:04:b5:d1:b3:08:ec:03:26:75:4d:28:67:4f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c677effa908ada7c3922060d82ae646e6ac6cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:69:42:1d:f5:25:63:c4:b8:34:7b:e1:39:
51:c9:a5:5c:c7:7e:3c:40:28:a1:fb:a4:3f:44:9e:
44:db:26:bc:a5:2a:16:58:ca:22:01:07:72:03:67:
87:81:83:12:ff:d8:78:91:8b:d1:91:c9:ef:16:bd:
c5:85:b7:24:2e:80:9f:d3:77:69:2e:c5:22:ba:a9:
e6:ba:0e:70:8d:f1:01:db:28:62:18:84:94:ac:c4:
55:93:9c:cf:e0:33:e3:b6:f4:6d:b2:2d:5a:44:8c:
2e:e4:84:1e:e2:a3:0f:f2:d1:76:d1:13:0b:64:18:
fb:d7:92:c6:2d:e4:10:d4:f3:21:2c:32:7e:46:4f:
df:d0:4a:16:5f:57:86:66:7e:23:a9:22:9b:48:f8:
fd:8b:8f:1f:a2:dd:b9:88:2b:c6:db:1e:87:72:73:
29:24:65:29:6c:be:aa:eb:43:cb:04:be:72:96:e4:
87:8a:ac:8c:10:c8:6d:14:e9:61:75:72:e3:57:28:
7a:de:e2:d9:ea:cc:e2:bd:b6:04:c4:00:71:fd:fe:
00:e6:36:eb:94:ea:6d:c5:00:36:00:fa:d4:f1:07:
4a:bd:b6:5e:e5:95:03:7f:fe:b4:0e:19:18:7b:fd:
44:e1:a2:41:4f:53:ec:64:2a:69:f9:23:87:c7:9d:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:67:7E:FF:A9:08:AD:A7:C3:92:20:60:D8:2A:E6:46:E6:AC:6C:FA
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/jGd-_6kIrafDkiBg2CrmRuasbPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ab:f1:84:40:4e:f2:6c:de:11:3b:19:98:fd:60:a6:07:83:
c3:3c:c3:62:39:c2:e0:64:31:cc:08:d4:9a:15:7d:85:64:17:
b4:7e:db:f1:cb:c7:4f:0b:57:da:67:bd:db:99:83:e1:e5:98:
cc:7a:0c:d8:18:2b:78:16:24:75:11:aa:1a:00:d7:d9:dd:ef:
2b:8d:4b:aa:96:fd:2e:d5:cf:71:25:be:ef:3a:83:f4:b5:d1:
eb:45:75:6d:19:ac:ae:e1:d0:1c:5b:d2:67:cb:ed:ec:fa:d6:
04:c5:9c:db:4e:79:54:14:52:fa:de:f2:b9:d5:5c:46:3d:d5:
cf:f8:e9:59:b4:ce:29:a2:a3:21:15:28:a1:bb:e3:9c:a1:8e:
15:43:b8:c9:43:3c:a7:4b:0c:3f:01:b8:24:90:1e:03:bc:91:
7a:ba:de:ad:55:99:41:42:b4:16:88:d5:ac:7a:52:8e:a7:51:
fa:23:d3:8c:70:c1:cf:d8:4a:8d:bd:6a:12:ad:ce:87:8e:e0:
c0:65:b5:b4:7a:41:36:af:ea:99:b1:94:84:aa:ab:1e:20:af:
78:02:e4:eb:6e:da:91:85:16:b5:fd:8d:55:a5:0d:a8:5f:6c:
a2:a9:f3:b3:3a:99:9d:e2:27:0a:46:f7:68:5a:a0:de:6f:b5:
2d:33:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:51 2025 by rpki-client