Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/JPjFNybLk9iwie2mNffFvcqH3TI.roa
File: JPjFNybLk9iwie2mNffFvcqH3TI.roa (raw, json)
Hash identifier: mZ6/1/ZJPjgepmiSSSZFdPn+NofzGUBv9GZQemfpOAE=
Subject key identifier: 24:F8:C5:37:26:CB:93:D8:B0:89:ED:A6:35:F7:C5:BD:CA:87:DD:32
Certificate issuer: /CN=543b0e6e50655043357a552d4b6c2b302de597f0
Certificate serial: 8DBC33
Authority key identifier: 54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDsOblBlUEM1elUtS2wrMC3ll_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/JPjFNybLk9iwie2mNffFvcqH3TI.roa
Signing time: Sat 01 Jan 2022 03:56:17 +0000
ROA not before: Sat 01 Jan 2022 03:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211114
IP address blocks: 193.3.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9288755 (0x8dbc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543b0e6e50655043357a552d4b6c2b302de597f0
Validity
Not Before: Jan 1 03:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24f8c53726cb93d8b089eda635f7c5bdca87dd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:41:2f:ed:b3:4c:ba:89:91:2c:4e:96:20:
1a:c1:35:ed:d8:e4:48:3d:75:41:7c:d7:bc:77:19:
f6:1a:09:b6:77:58:8f:69:43:35:e0:91:80:ef:e0:
5d:2e:19:5a:ff:77:3e:e2:4e:09:ba:76:90:e3:7a:
a5:34:b8:39:29:84:09:bc:a7:8c:1b:55:ff:4a:48:
b7:14:ec:0f:f9:d0:f7:f4:77:54:98:0f:c2:af:85:
51:cd:d1:2a:b9:c7:2f:b7:6d:20:11:92:b7:30:2e:
a2:3d:a9:98:4a:5a:d4:23:6c:97:60:49:bc:42:7e:
f6:ae:ae:f7:b7:5f:c7:4d:b7:c5:d7:0e:e0:90:ee:
ef:1c:f4:05:8c:7a:76:b4:68:82:59:3f:13:47:3e:
1e:13:9d:74:dc:5a:e3:5a:83:86:bd:b3:d9:6e:c4:
0b:fb:7e:8c:0a:57:70:bc:2d:05:47:0d:d4:8b:7b:
2c:c0:f3:5a:f4:4f:0f:eb:74:a7:6c:e3:52:32:da:
8a:63:b7:fd:a2:28:e5:d1:03:46:93:b5:ea:7d:39:
d5:f3:45:e9:2c:37:88:0c:7e:42:56:24:3b:11:91:
58:55:ed:42:ba:07:63:c1:b3:f1:90:41:85:27:aa:
ab:e4:b2:70:60:05:9a:51:2b:5c:d4:33:d5:e9:8d:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:C5:37:26:CB:93:D8:B0:89:ED:A6:35:F7:C5:BD:CA:87:DD:32
X509v3 Authority Key Identifier:
keyid:54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDsOblBlUEM1elUtS2wrMC3ll_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/JPjFNybLk9iwie2mNffFvcqH3TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.167.0/24
Signature Algorithm: sha256WithRSAEncryption
39:85:c0:b5:63:10:48:2b:2d:bf:85:78:12:12:25:7a:fa:61:
0b:44:77:e1:8f:a2:2b:8a:b2:a5:57:e4:9c:dc:e2:ec:74:4f:
7d:5a:5c:e2:83:e8:8b:d3:97:05:88:ed:c4:df:ea:cd:d4:a1:
dc:dd:23:4d:b9:de:5a:bc:3d:9c:c8:6f:e4:8b:57:79:a6:d6:
36:1a:1f:ad:74:13:3d:f9:b7:75:50:ed:97:99:11:4b:82:eb:
0d:27:b9:7c:05:88:ee:23:28:cc:fe:6d:9e:71:d9:cd:89:09:
6e:72:60:c6:b7:99:12:70:af:51:8d:c2:88:95:ea:6f:05:98:
0b:14:e9:e0:6e:82:62:65:bb:e2:73:ab:df:d2:5f:23:8e:bc:
50:63:e3:c5:a4:b6:c3:8c:46:ec:c9:00:ca:9b:c8:b4:77:c5:
9a:90:c0:17:88:84:8c:2f:56:0e:5f:28:41:78:f5:4b:0f:1c:
a9:b8:d3:74:49:1c:8d:69:29:6d:84:f3:e2:c6:86:38:2a:ff:
34:9f:27:b7:d9:56:57:ff:e6:a0:7e:5b:f9:25:9c:61:b3:64:
1e:d3:3a:44:a2:5d:b5:37:99:7c:f3:27:14:66:b8:39:76:18:
d6:d4:b1:a3:eb:f3:af:4e:5a:58:fc:9c:07:14:73:a6:aa:7f:
3a:1d:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:49 2025 by rpki-client