Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/JuHOqqyp6gPUNYRm3uhGk9D1za0.roa
File: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (raw, json)
Hash identifier: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=
Subject key identifier: 26:E1:CE:AA:AC:A9:EA:03:D4:35:84:66:DE:E8:46:93:D0:F5:CD:AD
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B65BE9F504D198B4DAC7ACDD0CDD7A
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/JuHOqqyp6gPUNYRm3uhGk9D1za0.roa
Signing time: Thu 02 Jan 2025 15:50:49 +0000
ROA not before: Thu 02 Jan 2025 15:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400746
IP address blocks: 188.121.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5b:e9:f5:04:d1:98:b4:da:c7:ac:dd:0c:dd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26e1ceaaaca9ea03d4358466dee84693d0f5cdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:69:ff:8f:64:23:5e:d9:f1:f1:2f:66:b6:
9b:af:aa:3e:7d:f2:1d:b8:f8:be:a2:7b:13:df:35:
0e:6e:1c:7a:0d:41:97:b1:55:7c:7b:a9:4a:db:85:
d7:8c:ca:3e:fa:02:95:2e:61:a7:4e:b0:96:ef:ec:
06:06:87:1d:36:3f:d9:c2:f9:1f:36:d9:14:70:9c:
99:cf:f9:2c:1f:d3:83:8b:3b:81:7d:da:8a:9c:1f:
4a:b9:c0:d0:c4:f3:f2:64:d7:97:03:ed:cb:f3:88:
a9:93:13:74:72:ab:69:a7:3d:23:43:f3:99:b4:c5:
9e:fe:08:53:e5:9e:e2:d8:f2:46:cf:cf:f9:ca:1c:
cd:86:08:b6:ca:e0:9f:0d:ba:23:c1:e5:63:78:5b:
67:63:d0:df:2f:58:be:b8:f6:15:b8:3f:66:07:b4:
36:7f:3e:36:ce:7b:96:6b:af:d6:74:e0:48:32:4b:
04:51:ae:ef:65:46:c9:c8:22:6f:99:95:74:22:a5:
b3:3c:07:73:9b:d9:6c:69:6f:e1:2a:32:83:bb:5d:
2a:18:e1:5b:50:34:38:f8:38:22:fe:df:be:bd:a8:
26:95:db:96:24:a4:fb:f1:4b:57:9e:ba:0a:45:05:
14:f9:16:53:7f:6b:a5:e8:c7:90:9c:e2:e4:7a:72:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:CE:AA:AC:A9:EA:03:D4:35:84:66:DE:E8:46:93:D0:F5:CD:AD
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/JuHOqqyp6gPUNYRm3uhGk9D1za0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.121.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:25:25:57:0f:9e:20:c0:1f:ae:d0:01:1d:1f:7e:63:b7:69:
c7:b4:83:47:2a:44:ef:33:52:f3:65:2a:7a:9a:a6:80:08:04:
be:27:27:e4:c8:e3:25:0a:93:95:cb:fe:14:a4:e7:89:26:af:
66:f1:3f:33:d6:f9:3a:94:95:32:c2:d3:89:8f:f7:2e:f7:41:
d8:70:2d:00:85:87:40:51:1c:17:9f:30:ed:99:77:81:24:b0:
f6:02:b5:06:71:6a:8b:a4:ea:e7:40:b1:4b:5a:3a:65:e2:cc:
84:44:08:41:44:17:69:2e:bb:39:b6:62:58:f0:02:b5:6f:00:
9c:51:f1:62:59:da:7a:0b:26:7a:28:ed:26:f4:ae:29:c8:b4:
d7:37:8c:f7:a4:89:5e:27:0d:2c:fe:90:dd:5d:21:c8:f9:b3:
01:74:05:5e:9a:2a:75:49:27:21:84:2c:0b:1e:b3:91:4a:fe:
c0:d2:7e:f4:79:e7:e7:08:39:ae:cf:fb:51:c2:c5:05:7d:2e:
24:1b:fa:c3:e5:90:cb:08:3b:bc:8b:89:08:8d:26:ea:51:6b:
48:68:54:ed:a6:94:0c:6d:bd:a6:1a:f2:7f:23:89:75:69:b0:
6d:b0:31:b7:6d:66:6e:e6:63:c0:81:7f:0d:a7:e4:1b:4f:c9:
8e:07:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:43 2025 by rpki-client