Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa
File: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (raw, json)
Hash identifier: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=
Subject key identifier: 8C:F5:C9:96:1F:AD:E3:F5:D8:47:72:74:78:A2:A1:41:14:F3:98:C4
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 0194236921ABE2164D1B753AB7A497C33702
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa
Signing time: Wed 01 Jan 2025 19:47:59 +0000
ROA not before: Wed 01 Jan 2025 19:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15525
IP address blocks: 193.43.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:21:ab:e2:16:4d:1b:75:3a:b7:a4:97:c3:37:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Jan 1 19:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf5c9961fade3f5d847727478a2a14114f398c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:3f:64:66:ee:a3:67:ef:81:6a:d8:cf:83:
d9:d4:4e:f4:21:10:ea:87:c6:ae:b4:07:4f:d8:44:
f4:3f:3c:c0:72:0b:1c:fd:7d:cb:48:45:c4:d9:b6:
20:46:09:fe:6f:bb:f3:1e:28:b8:d0:66:b8:b3:30:
0d:d1:29:d9:4a:e1:fa:af:8c:75:5b:03:6d:93:d7:
c9:fe:a7:46:46:fb:d9:50:aa:91:40:d9:6b:c1:cc:
c6:8f:97:85:1e:81:1c:a6:6d:7e:56:7d:1a:3c:d9:
23:2a:2f:4b:6f:e1:70:f9:bf:2e:fa:bd:51:48:ca:
58:0e:0a:16:a9:6d:85:2a:9d:52:b6:86:94:95:d3:
66:df:b0:5c:24:92:ac:75:64:89:f2:29:35:06:47:
58:d4:c3:ab:39:c3:17:2a:4b:c9:0a:9c:27:11:73:
ea:0f:2a:08:b2:ec:ca:86:e8:91:42:41:e3:ef:56:
91:38:1b:52:f4:12:e8:a8:4e:a3:84:6d:54:35:eb:
42:46:d6:71:2c:f8:74:7f:82:0f:25:42:09:7e:9e:
e2:93:ff:f3:a2:4b:c0:dd:7a:11:4e:60:47:a5:bf:
0d:3a:54:31:ee:75:ee:0d:b0:0e:09:8a:97:55:da:
d9:cf:8d:5b:f0:ca:87:bb:77:ca:95:4f:99:f0:cf:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:C9:96:1F:AD:E3:F5:D8:47:72:74:78:A2:A1:41:14:F3:98:C4
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d8:71:4a:61:50:3a:eb:6b:d1:86:3c:16:18:32:82:33:2c:
f6:1e:03:f7:5d:4b:71:ff:44:e8:73:07:ac:b3:bd:cb:06:cd:
8d:a0:f8:9c:ee:29:6e:a7:27:f8:53:5f:6f:38:91:b5:51:25:
4c:da:21:9e:53:58:83:cd:22:7f:a9:08:27:82:54:de:d0:f8:
1d:93:ce:77:07:f0:01:b5:30:0e:5b:2a:94:bb:7f:0e:03:05:
53:2d:12:39:2e:29:55:dd:0e:5c:36:32:51:35:d4:7e:6b:02:
23:ba:4e:a9:85:18:a6:1f:cb:e3:9e:fc:9d:1c:6a:c4:64:47:
6e:bf:c1:ed:b2:84:5a:f2:3b:82:5b:9b:2b:4b:0d:e1:d5:ac:
6e:f4:25:0c:7d:fb:e5:41:d9:82:c2:eb:ac:d8:b6:8a:7b:1c:
e6:33:6d:58:aa:1d:fe:3a:12:d1:3b:e3:a8:39:4a:2c:15:15:
71:69:47:7b:72:03:26:04:f3:19:04:a3:db:5f:df:4f:81:a4:
70:ed:3a:8f:90:aa:2d:10:aa:43:17:5f:3b:a9:56:de:4d:2e:
af:f2:65:c1:9e:b4:41:20:1e:6c:ad:13:4e:94:8d:de:df:5e:
fb:94:0a:b8:56:df:2a:2b:1e:8f:d9:42:b5:42:d7:fd:1d:6f:
e4:99:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:15:30 2025 by rpki-client