Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/J_dY_b5V_0eOFmmu9n6O8BB5xfM.roa
File: J_dY_b5V_0eOFmmu9n6O8BB5xfM.roa (raw, json)
Hash identifier: jRolE3Y0N8DbR4Z/rurwGopDqTj2wOJ233AsehWL47s=
Subject key identifier: 27:F7:58:FD:BE:55:FF:47:8E:16:69:AE:F6:7E:8E:F0:10:79:C5:F3
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE82F723A079E54EA381F2F4E78E4
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/J_dY_b5V_0eOFmmu9n6O8BB5xfM.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49874
IP address blocks: 188.234.120.0/21 maxlen: 21
2a02:2698:a004::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e8:2f:72:3a:07:9e:54:ea:38:1f:2f:4e:78:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f758fdbe55ff478e1669aef67e8ef01079c5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:2a:93:48:06:9b:6d:f4:30:ff:31:c4:08:
a2:b0:f8:21:11:cf:d5:21:02:04:bd:c8:6c:3e:52:
ff:ce:b6:b7:ee:89:ad:05:a1:b0:7d:d5:e3:a0:b5:
7d:d1:13:54:ca:c8:0a:5e:58:d7:17:d3:fd:22:65:
71:e1:a3:46:af:9d:70:8a:32:63:6b:22:cf:e5:ef:
e5:a3:88:cb:00:b3:5e:33:cc:ca:00:78:0d:33:af:
5e:5a:17:bb:6b:cc:fb:64:03:e9:e4:c1:1e:5f:24:
1e:0c:b7:5f:b7:d4:4e:9e:ce:a5:6b:71:2c:60:93:
84:e8:f6:5f:73:6c:c8:ca:bf:c5:69:97:b6:e0:63:
25:2b:84:07:4e:ac:00:92:0c:89:f5:df:46:16:79:
0a:b9:b3:7e:51:52:3d:82:ae:15:58:e0:54:71:bf:
77:25:fa:f5:f0:64:1b:a8:92:f2:4a:e0:34:01:df:
f0:d2:22:6c:82:08:bb:3c:d3:f3:3e:b9:6c:cc:b3:
6e:73:05:32:ef:7a:f3:8d:5c:33:ea:16:8b:4e:ca:
fa:47:7d:a7:92:36:ec:2f:bc:07:a6:07:16:1e:4e:
57:70:9f:15:0a:43:2c:33:3c:c3:31:9b:a7:c3:c6:
59:44:82:ce:e5:83:d9:a2:00:f6:68:0e:55:6c:97:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F7:58:FD:BE:55:FF:47:8E:16:69:AE:F6:7E:8E:F0:10:79:C5:F3
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/J_dY_b5V_0eOFmmu9n6O8BB5xfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.234.120.0/21
IPv6:
2a02:2698:a004::/46
Signature Algorithm: sha256WithRSAEncryption
34:88:cc:0d:3b:82:5d:40:62:93:55:99:28:3f:41:a6:c4:e6:
f5:81:06:d0:09:b0:06:0c:c3:a1:26:56:85:2d:a8:6f:cf:38:
05:0e:84:4b:52:9d:60:61:de:1d:b8:73:cc:db:31:16:a2:b6:
52:4b:07:97:97:af:4e:bd:c4:ca:6f:ac:98:42:53:98:8a:e8:
5e:43:8d:41:87:a1:37:7c:67:5b:2a:73:40:63:9d:8b:e2:60:
94:f3:90:21:ce:08:81:9b:3c:d5:f5:df:dd:6c:d6:9e:c9:13:
63:47:ff:4d:97:7c:dd:4c:97:6d:fd:34:3d:48:ad:45:d7:db:
e7:9a:71:e9:04:04:3e:71:c7:46:8f:c9:d0:a0:d0:2a:ca:43:
8a:e9:b8:f0:8e:cb:5f:3f:fb:08:86:10:38:0a:80:60:76:ba:
24:b7:d1:67:ba:8f:cf:d1:be:5a:7a:9e:c6:34:77:f5:36:e6:
00:01:94:12:d6:c2:de:ff:cc:c1:ea:94:e5:cf:f7:08:f1:a5:
c0:d6:2b:5f:58:33:21:28:09:45:75:0e:e4:ca:6e:f0:09:c6:
b1:ae:92:d7:8e:93:15:b6:74:4c:3a:fe:72:d2:4a:e1:69:44:
4f:09:74:3c:42:53:f9:7a:df:0b:be:36:8f:12:30:a8:6d:9e:
b2:1c:be:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:14 2025 by rpki-client