Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/JkWwBURcFGhQXBTXcyXYeBLRT88.roa
File: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (raw, json)
Hash identifier: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=
Subject key identifier: 26:45:B0:05:44:5C:14:68:50:5C:14:D7:73:25:D8:78:12:D1:4F:CF
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 019425FD4C0663BCB370E10FDEB47E8B8A09
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/JkWwBURcFGhQXBTXcyXYeBLRT88.roa
Signing time: Thu 02 Jan 2025 07:49:04 +0000
ROA not before: Thu 02 Jan 2025 07:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21472
IP address blocks: 78.143.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4c:06:63:bc:b3:70:e1:0f:de:b4:7e:8b:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2645b005445c1468505c14d77325d87812d14fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:07:cb:91:ac:c7:28:7e:28:5c:aa:aa:1e:
15:4e:50:ab:b6:33:21:5f:16:94:f5:e0:99:7c:f7:
64:35:48:d1:36:85:4b:d0:e8:4b:3d:88:ce:5c:4d:
7b:ce:1c:90:ce:fa:4f:36:fc:04:7e:56:7e:3f:d1:
eb:76:b4:6c:26:94:08:58:96:d5:58:ed:39:93:8e:
6e:ec:15:9c:c1:10:cd:a0:0f:be:b0:17:7d:73:95:
83:55:be:95:99:c9:00:11:60:23:84:fc:f7:24:dc:
80:3c:90:2e:cb:4e:f6:4d:64:5a:cc:87:87:0a:ed:
ee:0f:53:eb:91:96:72:18:61:e1:e4:c1:4d:5e:81:
2a:04:1d:26:2e:72:76:e8:d3:8a:14:be:cd:ba:d2:
3a:c0:7b:8a:e6:4d:6a:f7:1e:d7:46:0e:a0:23:9f:
c2:c6:1e:fe:3c:99:5c:25:5f:cb:bc:25:34:6c:e9:
1c:cf:7e:91:a5:53:5a:2c:ad:31:d7:36:be:52:fa:
a5:2d:bd:6a:1f:57:69:72:b3:a6:2a:29:f5:b2:ec:
f8:20:1b:1b:0f:3e:68:29:3d:a3:f2:2e:54:6e:67:
01:98:9b:0c:17:34:7c:72:39:24:6f:c7:e0:75:2a:
89:c2:ec:47:32:d5:6d:93:15:b5:95:35:36:f1:05:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:B0:05:44:5C:14:68:50:5C:14:D7:73:25:D8:78:12:D1:4F:CF
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/JkWwBURcFGhQXBTXcyXYeBLRT88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.255.0/24
Signature Algorithm: sha256WithRSAEncryption
71:29:4a:73:91:40:73:99:c9:eb:11:e9:a3:78:f9:78:c4:f2:
47:f4:d3:02:c2:18:50:ab:ff:0e:83:d3:b7:38:cf:ad:a7:3d:
19:de:05:f0:64:37:62:b5:6c:b3:f2:d3:ae:a3:75:00:ad:18:
92:4f:2c:b4:53:37:34:23:44:60:b3:73:9a:2b:72:3b:74:4e:
58:26:63:df:28:78:ae:83:c2:35:8b:a4:66:ac:57:5d:c4:74:
9f:4c:bc:50:2d:9d:07:5b:6c:ac:2e:b4:b9:f8:aa:d5:2f:11:
00:37:dd:49:56:ea:07:ec:0c:62:b8:b1:42:0c:dc:f6:aa:ad:
13:6c:19:87:b5:84:70:1a:ee:82:ee:51:ea:46:94:9d:12:20:
62:79:5e:a8:07:82:3a:e3:cf:7f:00:f2:db:0f:05:25:28:10:
2c:db:04:70:70:8d:ac:62:dd:c3:f1:c2:a2:01:67:20:29:f9:
8d:a2:34:ed:ed:97:a4:4d:7e:6d:2d:a4:9a:07:85:8b:84:d9:
55:77:95:59:09:d7:77:59:65:4f:ce:9b:23:04:23:15:f3:3d:
a3:22:1c:10:be:ad:4e:19:e8:b4:c3:38:cc:47:16:e3:b9:4a:
c6:31:1f:fe:ee:e8:af:dd:65:19:80:6d:88:6b:4e:21:a6:0b:
fc:aa:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:04 2025 by rpki-client