Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/JY_1PGRtW2cwmX0NWILz4PaMA8o.roa
File: JY_1PGRtW2cwmX0NWILz4PaMA8o.roa (raw, json)
Hash identifier: AxD4kbD5rAUUpHE8TMidnBB9N4smWhsO8xiIIFzpjU0=
Subject key identifier: 25:8F:F5:3C:64:6D:5B:67:30:99:7D:0D:58:82:F3:E0:F6:8C:03:CA
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019422FC1D3B39F7198ED794FF4E566BBF10
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/JY_1PGRtW2cwmX0NWILz4PaMA8o.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40092
IP address blocks: 194.146.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1d:3b:39:f7:19:8e:d7:94:ff:4e:56:6b:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258ff53c646d5b6730997d0d5882f3e0f68c03ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:ee:50:fc:5c:4b:47:76:1b:55:2f:6b:1a:
87:84:87:3c:37:e1:3e:81:57:0e:99:ac:08:72:32:
79:d6:48:6d:74:8b:35:4f:fa:3f:53:68:67:69:cb:
fc:45:27:7a:55:51:30:84:69:e5:23:aa:09:24:f1:
3f:8f:bb:8b:47:0a:04:7c:95:5f:48:bf:88:8d:b5:
20:c0:29:91:c1:4d:51:89:d1:41:b2:70:b8:87:25:
2b:86:d2:f8:d3:5f:8c:e0:72:d8:5d:8c:bd:99:23:
f7:0f:81:e4:0c:e2:da:18:38:96:18:9e:6f:25:7f:
42:e7:09:7c:35:4f:94:4b:2e:ae:28:16:7d:ab:a4:
05:c3:0b:f5:28:2d:e2:9b:cd:44:8a:68:9b:3a:f5:
8d:73:22:2e:2c:83:61:e4:cd:de:c3:8a:18:2b:1f:
a2:4d:39:63:70:81:aa:d3:86:ed:f3:22:30:df:56:
c0:c6:7e:29:11:2f:7b:f0:ae:7a:a4:42:bb:ff:ee:
4b:77:77:4f:d0:d4:f8:90:45:d0:3d:e0:08:10:ec:
ad:9e:d1:93:8c:7d:55:6f:6e:18:0c:f5:27:bd:a9:
47:9d:60:b5:3e:60:eb:4a:af:c4:13:a1:65:b5:b1:
f3:24:71:ab:85:41:b9:5a:a5:c8:8c:e4:a8:21:75:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:F5:3C:64:6D:5B:67:30:99:7D:0D:58:82:F3:E0:F6:8C:03:CA
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/JY_1PGRtW2cwmX0NWILz4PaMA8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.124.0/24
Signature Algorithm: sha256WithRSAEncryption
87:53:eb:43:27:71:23:b9:7f:72:68:40:10:17:75:f2:a9:b2:
65:3b:79:42:2f:cc:cb:81:5b:7d:ad:5c:76:84:d1:6b:b3:27:
2e:3f:fb:68:ed:0d:38:44:48:a2:e5:56:1c:52:13:b9:5e:05:
97:67:b4:19:2f:85:18:cd:76:91:49:04:a1:77:4c:91:5b:51:
a0:89:e0:0b:76:b6:e9:84:bc:fc:ad:ee:0a:61:9a:91:cd:97:
8e:25:8e:75:55:b0:ea:f2:09:18:f2:b5:e9:f8:bd:aa:d6:30:
9d:d5:01:6d:c9:fa:2a:1e:45:9e:76:fa:39:e3:ca:1b:20:77:
c1:37:b2:78:b0:01:f6:50:9a:7b:c2:e5:c3:e3:82:7b:db:c0:
f7:15:9b:09:b1:dd:55:4f:f9:03:21:c9:08:c8:5b:4b:36:45:
35:24:a1:51:25:c9:17:10:64:68:c8:23:cf:27:1f:42:b9:78:
47:97:8c:50:d6:ec:87:ee:ec:95:cd:4e:2e:49:4c:63:28:41:
5a:c3:c6:ed:f4:10:fa:e7:d6:b0:ea:c2:9d:e6:54:53:cd:fa:
6a:34:49:b3:8d:5a:bf:fd:66:c7:4d:a7:2e:9b:65:4e:7b:86:
3c:f3:ec:58:29:c7:f8:63:98:dd:1a:b4:51:f1:93:9c:6f:42:
f6:ef:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:08 2025 by rpki-client