Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/JV8vvECKSM6MhYGQXgUKwnTBpCI.roa
File: JV8vvECKSM6MhYGQXgUKwnTBpCI.roa (raw, json)
Hash identifier: t0YayOPJVrY5cpofxU3iGspjBJfIRK4S0fUxF1Lghk4=
Subject key identifier: 25:5F:2F:BC:40:8A:48:CE:8C:85:81:90:5E:05:0A:C2:74:C1:A4:22
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 019530267A10DD72B646718061CBE75297CC
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/JV8vvECKSM6MhYGQXgUKwnTBpCI.roa
Signing time: Sun 23 Feb 2025 00:13:02 +0000
ROA not before: Sun 23 Feb 2025 00:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 94.124.160.0/24 maxlen: 24
193.160.8.0/24 maxlen: 24
193.160.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:30:26:7a:10:dd:72:b6:46:71:80:61:cb:e7:52:97:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Feb 23 00:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=255f2fbc408a48ce8c8581905e050ac274c1a422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:2a:e9:b9:cd:76:ec:6f:72:48:5f:63:1f:
78:12:28:7d:2b:32:a2:69:08:ed:80:5a:10:bf:6a:
02:d2:70:5c:eb:34:53:a9:49:e7:f7:4d:d9:31:cf:
cf:0e:2a:fc:e8:83:9d:16:cc:98:b5:1e:09:83:b1:
38:61:10:28:a0:2d:07:11:c3:aa:f9:0b:84:db:f7:
73:2c:15:f3:84:1c:f1:94:c2:b5:01:d6:80:db:35:
f8:c4:7d:6d:b2:64:12:d8:73:2a:67:7c:a8:83:83:
b5:1d:0e:d6:90:48:c4:12:78:9c:f7:e8:81:2e:58:
da:92:4f:e1:dc:8d:dd:72:ca:17:eb:a7:68:13:8e:
01:b8:a9:8f:66:da:ae:3f:8c:14:2c:8a:92:46:99:
89:78:0e:34:33:38:38:5d:9a:91:2f:5c:cd:88:24:
64:20:16:49:93:c4:40:e9:12:22:7b:d1:43:4b:4b:
10:2a:ff:1c:11:af:72:db:fb:ac:a6:e6:61:0a:95:
85:1f:9e:29:c9:17:6f:ed:b5:59:be:b5:39:5b:93:
8a:83:40:98:93:44:80:89:d9:8d:fe:3a:cd:e2:7b:
ff:4d:4e:e3:bc:e0:17:80:75:e2:83:d9:ad:5a:23:
4b:07:bf:1f:a0:e6:70:0e:9e:b1:ff:ef:e3:25:94:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5F:2F:BC:40:8A:48:CE:8C:85:81:90:5E:05:0A:C2:74:C1:A4:22
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/JV8vvECKSM6MhYGQXgUKwnTBpCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.160.0/24
193.160.8.0/24
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:45:4c:b7:e3:87:a1:ee:28:cc:cf:74:e7:15:21:c2:c6:67:
bd:19:5d:19:d0:e2:f6:19:d6:1d:0c:84:61:fe:2d:fd:56:5c:
c5:3e:10:3b:3b:28:db:4f:c4:94:9b:58:15:25:0e:7c:80:05:
3a:f8:e3:72:a7:c3:6a:59:81:f8:15:7e:d0:22:69:05:50:ed:
72:e4:a2:39:4a:a4:ec:84:a9:5d:71:14:44:75:8d:30:11:c0:
09:82:f3:ac:5a:11:a2:79:da:a9:ec:81:16:65:3f:8c:c8:30:
e1:f4:14:7d:8c:99:cb:08:c1:84:30:ad:4c:b3:65:65:be:5a:
c9:62:e9:64:b9:7d:db:78:a2:e3:d2:0e:c4:84:03:16:19:a9:
50:0f:1d:91:fe:6b:1d:73:56:ac:c5:97:3c:38:a8:f9:1a:1b:
ed:cd:93:f9:15:1f:34:d6:49:63:ce:24:3b:37:4d:11:88:6d:
40:d3:ab:fa:ce:f6:ad:dd:bb:ed:1d:c6:15:72:b1:e8:3b:eb:
9b:f1:23:99:81:50:4a:8e:a5:4c:77:c5:fd:a7:ed:db:e9:49:
19:4e:ae:ab:07:ab:77:ff:1a:14:87:71:80:e2:e1:aa:85:78:
4b:79:6d:7f:52:de:4e:1d:5a:61:ff:ee:f5:1a:18:40:67:71:
da:5e:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:25 2025 by rpki-client