Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JBAZC12MOoBD78Jx3ehNyo8Wjzo.roa
File: JBAZC12MOoBD78Jx3ehNyo8Wjzo.roa (raw, json)
Hash identifier: g6BG1i3GvpwwukGtN0JEytSNRGN5+PIq1m3pSK0iB2g=
Subject key identifier: 24:10:19:0B:5D:8C:3A:80:43:EF:C2:71:DD:E8:4D:CA:8F:16:8F:3A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01951D857E8BFF40225874ED318A9735373E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JBAZC12MOoBD78Jx3ehNyo8Wjzo.roa
Signing time: Wed 19 Feb 2025 09:24:02 +0000
ROA not before: Wed 19 Feb 2025 09:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48753
IP address blocks: 194.102.104.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:85:7e:8b:ff:40:22:58:74:ed:31:8a:97:35:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 19 09:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2410190b5d8c3a8043efc271dde84dca8f168f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:29:09:d6:9c:6e:89:2d:73:05:e0:7e:d1:
fe:2d:69:22:aa:a9:f6:a2:a8:9c:eb:fd:ec:ff:6e:
8b:ae:bd:66:25:77:dc:1a:58:94:ea:25:2d:ad:f0:
7f:c0:a5:8c:7b:c2:ff:6d:0e:8f:d2:de:24:7e:ea:
84:0b:98:af:06:95:c3:05:0f:63:c3:94:95:1c:ac:
8d:10:83:1e:34:17:36:37:f2:3e:33:3d:99:62:ed:
00:d5:f8:bd:ef:c0:ca:85:28:eb:13:80:e9:e7:16:
be:8f:15:ef:4d:50:68:db:26:84:93:03:9a:f9:c9:
03:c0:33:d0:ca:eb:a9:38:9c:fd:a9:96:86:49:78:
70:bb:4f:1c:b2:ef:27:40:fb:d2:d7:46:61:bc:e1:
19:84:3f:84:dd:34:6e:22:0d:8d:4e:74:ed:35:0c:
40:7f:97:bc:c2:37:84:95:b9:11:21:2c:f8:44:8f:
6d:ee:ea:ec:5c:96:0b:4e:8c:2c:c6:d3:90:3d:20:
1a:d0:b2:13:32:c9:bd:99:bc:f6:5d:42:f9:7d:3e:
40:41:ed:6b:85:8a:ad:f3:15:77:3f:ee:60:6d:12:
ee:ff:bc:4a:a1:57:d0:58:35:6b:07:23:53:74:9c:
bb:3c:c6:9b:00:41:1a:30:48:29:d1:7f:2f:9c:92:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:19:0B:5D:8C:3A:80:43:EF:C2:71:DD:E8:4D:CA:8F:16:8F:3A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JBAZC12MOoBD78Jx3ehNyo8Wjzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.104.0/24
217.156.66.0/23
217.156.122.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:69:8d:7a:f7:e8:db:8d:0c:a6:61:8e:25:52:a7:d7:32:
69:d9:f9:91:20:f8:65:46:36:4e:ca:5e:23:2d:f1:95:71:82:
7e:47:f3:1f:c5:9b:43:d3:6c:45:b9:f8:21:fa:76:87:a4:81:
0a:03:68:36:8d:0a:96:7c:17:65:16:8e:e6:d9:70:c1:c7:db:
47:58:ed:27:b6:6a:24:16:b0:ce:84:22:fc:fb:f1:27:7b:eb:
a0:21:94:af:30:85:a0:cb:c2:c0:d2:07:66:37:fa:7b:76:10:
c6:2f:a3:2c:66:76:d9:8d:f8:96:27:8f:78:93:68:e3:f4:af:
33:64:fa:4d:1e:a9:3e:aa:c5:8b:32:c4:e7:fd:59:f0:8b:4d:
7e:87:d7:06:9a:40:69:a5:24:ad:1b:fa:4b:31:51:31:0a:c8:
c2:91:96:f6:f6:14:ac:96:32:67:be:53:3e:b6:ec:4b:32:b1:
82:07:9f:5a:c9:42:03:d7:90:df:70:15:39:6a:cf:c3:24:02:
2e:ba:66:11:4a:11:f6:44:e3:ca:8e:3d:a1:79:2f:e5:1b:3a:
f9:a6:fe:1c:da:18:f4:5e:d5:c7:8a:22:f1:b2:eb:62:f0:34:
51:ea:cb:b8:da:6a:a1:cb:b9:df:dc:f5:52:b8:e4:9b:f3:b0:
69:92:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:19 2025 by rpki-client