Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/jaAQVqLk3N6vXmbGkwSHtHbashQ.roa
File: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (raw, json)
Hash identifier: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=
Subject key identifier: 8D:A0:10:56:A2:E4:DC:DE:AF:5E:66:C6:93:04:87:B4:76:DA:B2:14
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019421440A94FD0373354AFFE62B7C05A67A
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/jaAQVqLk3N6vXmbGkwSHtHbashQ.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41730
IP address blocks: 193.201.240.0/24 maxlen: 24
193.201.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0a:94:fd:03:73:35:4a:ff:e6:2b:7c:05:a6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8da01056a2e4dcdeaf5e66c6930487b476dab214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:2e:42:4b:7e:b0:a5:d1:3d:9f:7d:97:62:
67:55:51:9a:eb:9e:cd:c2:e2:56:01:dc:9e:06:87:
89:6f:8f:ca:9a:6a:20:6a:55:60:f8:e0:55:72:0c:
18:7d:fa:5f:83:fc:26:68:b9:e2:34:8a:fb:83:47:
95:5e:75:73:70:5d:d3:44:ff:52:f6:10:70:ad:57:
29:d1:42:47:07:b9:7c:17:54:dd:29:8a:3c:67:37:
c4:2a:4c:de:71:c9:b8:55:b8:7f:f5:db:42:9e:80:
18:40:e4:88:df:1d:02:77:27:13:e2:dd:bf:04:62:
f0:07:1d:fb:2d:bd:0d:76:63:77:15:7e:e6:a3:6a:
81:70:bc:ca:bd:03:4f:e5:56:6e:1b:41:14:e3:ac:
5a:ec:c5:d2:8e:a9:a7:e6:4f:a3:ea:6e:be:b1:a1:
27:94:65:d9:1f:86:ca:b2:6b:6b:4e:24:82:a3:7d:
22:65:11:b8:bd:87:fe:11:f3:33:39:b9:ce:c5:68:
fa:16:64:3f:44:f5:26:32:e1:e7:58:7f:4b:21:d3:
5f:46:fa:d5:e5:94:f0:76:f2:2c:b5:80:71:8a:2a:
2c:a7:7a:e1:0c:91:55:3b:2c:28:af:e6:df:69:96:
e7:1d:e4:f3:81:e2:f1:a1:58:62:d2:3e:3b:cb:2e:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:10:56:A2:E4:DC:DE:AF:5E:66:C6:93:04:87:B4:76:DA:B2:14
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/jaAQVqLk3N6vXmbGkwSHtHbashQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.240.0/23
Signature Algorithm: sha256WithRSAEncryption
81:eb:8d:20:46:a7:7b:91:a4:6c:1e:36:bd:3e:8f:b8:a7:cd:
92:ca:3e:16:91:52:67:b2:3a:ee:95:ed:20:b6:5c:be:6f:da:
6c:6e:8e:1c:72:dc:f8:9c:f5:63:91:5a:96:98:ea:7b:86:e6:
6e:67:20:49:0d:50:81:27:0b:ee:b9:7f:54:19:85:39:86:94:
62:21:9f:2d:94:cd:d4:7a:da:c1:48:6e:1c:4e:67:9f:f2:b9:
92:24:8a:35:11:8f:70:45:eb:fb:33:cf:1d:e1:d5:41:cd:c5:
5a:bc:25:c6:1f:22:1a:67:25:18:2c:a4:00:e5:20:43:d5:55:
ce:4a:ac:f8:40:29:2f:8e:9e:03:5b:9c:02:a6:5b:39:ff:ae:
55:66:99:da:7f:49:d6:31:d0:c0:5d:43:05:56:bb:3e:e9:eb:
05:cc:3e:cd:72:8d:0d:72:37:05:32:99:70:dc:5d:bc:3b:70:
d0:d4:b1:c3:5e:ff:1a:7c:d6:76:a8:49:c9:80:46:68:8a:9f:
6a:59:f3:63:f4:8e:09:8d:e4:c7:e5:96:42:12:6a:3a:95:67:
1e:b1:6d:4b:a3:b0:95:2e:64:db:6c:31:82:7f:2e:a7:8b:7f:
52:09:e3:c3:4c:db:c6:10:b1:a1:c9:b7:38:2b:ec:b5:a0:bd:
e9:db:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:58 2025 by rpki-client