Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/j3Yd5Ltu5X29iBSj7jP42f5QXXA.roa
File: j3Yd5Ltu5X29iBSj7jP42f5QXXA.roa (raw, json)
Hash identifier: FJYX/rMm1HqX39ADzYMKZZf0h1Ft/HqAxA8gLjKNmS0=
Subject key identifier: 8F:76:1D:E4:BB:6E:E5:7D:BD:88:14:A3:EE:33:F8:D9:FE:50:5D:70
Certificate issuer: /CN=278f3c551309ffa461b77dfcc781a8a3ec669239
Certificate serial: 01857082AB50740D88B1FA2313C707CD2A3C
Authority key identifier: 27:8F:3C:55:13:09:FF:A4:61:B7:7D:FC:C7:81:A8:A3:EC:66:92:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J488VRMJ_6Rht338x4Goo-xmkjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/j3Yd5Ltu5X29iBSj7jP42f5QXXA.roa
Signing time: Mon 02 Jan 2023 03:24:49 +0000
ROA not before: Mon 02 Jan 2023 03:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.191.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ab:50:74:0d:88:b1:fa:23:13:c7:07:cd:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f3c551309ffa461b77dfcc781a8a3ec669239
Validity
Not Before: Jan 2 03:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f761de4bb6ee57dbd8814a3ee33f8d9fe505d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:8a:d3:c5:ff:bf:1c:59:a9:dc:d7:13:22:
1f:2d:3e:72:c4:20:76:6d:25:9f:27:f2:89:81:50:
8b:b7:29:72:3a:9b:24:d4:6a:75:a1:87:ec:8a:bc:
e8:a8:41:8e:5a:15:0f:e9:64:bf:42:ca:20:c7:11:
8f:88:5b:87:6f:2c:4e:07:36:ec:0b:5d:18:aa:1b:
84:8e:cf:59:15:8e:2b:39:27:4b:90:db:f9:8e:fd:
cf:c9:8b:9e:07:bc:64:69:3f:ce:dd:f0:20:47:c8:
4e:1b:08:46:70:54:a6:03:5c:60:dc:21:41:69:0d:
20:8b:3f:28:64:05:f9:ab:10:0d:78:c9:90:37:87:
61:2b:d0:ff:f1:11:91:b7:89:58:22:6b:8a:11:bd:
69:70:a4:b0:53:94:94:62:8a:be:28:95:5f:f1:98:
d4:67:f8:6c:ad:89:68:d0:27:16:af:df:97:60:f0:
14:9c:d6:24:73:db:89:27:be:ba:d3:fc:d2:ef:45:
a3:81:db:da:7f:70:99:58:97:d0:5a:0e:44:87:33:
42:7e:3b:c5:62:87:25:16:11:4c:8c:3c:18:e8:3c:
bb:b1:1c:69:32:96:16:9e:d6:ea:90:f9:34:28:2b:
23:4b:85:50:e1:51:f2:e5:5d:bb:bd:2c:65:ca:42:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:1D:E4:BB:6E:E5:7D:BD:88:14:A3:EE:33:F8:D9:FE:50:5D:70
X509v3 Authority Key Identifier:
keyid:27:8F:3C:55:13:09:FF:A4:61:B7:7D:FC:C7:81:A8:A3:EC:66:92:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J488VRMJ_6Rht338x4Goo-xmkjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/j3Yd5Ltu5X29iBSj7jP42f5QXXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/c7c423-d861-461f-9c87-f31cd68f3a30/1/J488VRMJ_6Rht338x4Goo-xmkjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.99.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2b:56:1c:eb:19:80:1f:9b:53:44:3e:e3:dd:51:c6:a2:83:
a7:90:4e:cb:aa:34:ae:1a:c5:4b:3d:b9:4e:e3:e3:40:6d:78:
38:b4:9b:c7:1d:0e:3f:37:0d:d2:6f:e0:41:54:1a:e9:f4:82:
ed:05:6d:6a:d2:4e:11:8b:06:09:72:49:84:13:08:0b:8c:24:
81:08:cf:6c:c1:b8:74:d5:b2:a9:9a:85:0f:7c:25:ce:91:af:
b9:89:9c:86:76:f3:7b:0b:69:e9:d7:08:dd:d1:5c:60:5e:ae:
60:e2:23:d4:60:03:07:5f:df:55:82:97:34:54:a4:1b:81:2f:
2d:64:cd:db:01:36:18:aa:da:18:8e:22:fb:5e:51:98:b9:da:
03:8e:c0:17:52:48:cd:f3:82:0d:b4:c6:66:7a:08:49:6a:18:
fb:79:57:a1:87:78:a4:e7:4c:85:e2:86:06:c1:cb:3b:cc:19:
9a:67:11:0c:d1:6e:94:67:27:90:08:8a:37:42:95:07:71:cb:
77:36:49:b8:5b:4a:f2:d0:12:42:87:57:1b:39:3f:f2:36:53:
31:6b:e5:de:b9:b6:5e:5a:94:3f:e4:5b:ac:01:2b:a1:ee:bf:
f6:27:1b:3f:cd:79:a1:ad:b9:07:63:b3:e7:64:ef:56:28:98:
c0:9d:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:40 2025 by rpki-client