Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa
File: ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa (raw, json)
Hash identifier: bPVF2gLa5okAyNdgsZQT7rjoKFmL6l2YkqA4bzlxF0s=
Subject key identifier: 64:9C:3F:26:E9:1B:A3:F8:5E:40:F4:4C:02:60:D6:70:19:4A:41:A4
Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial: 0194236A0D5303B444358A2277CC27365957
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206926
IP address blocks: 194.1.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0d:53:03:b4:44:35:8a:22:77:cc:27:36:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=649c3f26e91ba3f85e40f44c0260d670194a41a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1f:5e:aa:0c:81:0f:fd:34:6d:f6:86:26:fb:
c9:22:51:84:e3:06:7b:11:9b:64:b0:0b:3c:47:53:
be:b6:cf:43:d9:46:59:34:89:57:5e:19:44:db:23:
b4:59:84:60:15:e7:95:f7:21:e2:86:ef:b9:a1:d5:
53:d9:53:23:89:43:a1:81:a1:90:63:72:e2:53:00:
e3:e2:14:c6:d0:f2:51:84:cd:71:6d:8d:fd:37:5e:
bb:2d:ec:25:cb:71:5a:07:e2:69:e1:ae:aa:4e:71:
18:30:86:57:cc:73:75:27:64:53:53:96:54:b7:e3:
62:2e:b0:3d:f3:88:41:bd:ec:16:65:d6:04:3f:86:
6d:45:66:e4:80:ce:38:dc:22:9f:b0:66:c7:20:af:
d8:9c:f3:e6:4c:8a:83:76:f7:23:2c:7d:6f:dc:31:
18:29:c0:47:43:2e:a9:5c:18:c0:65:88:92:72:26:
90:36:c5:e8:7d:d2:b2:cf:9e:b7:c1:d1:44:26:44:
5b:31:8c:9d:27:8d:0e:40:4a:39:91:41:d0:fb:fc:
c0:1b:8b:d1:84:d6:7c:67:ff:08:f3:f2:65:b2:43:
7b:62:57:b3:89:6e:c2:33:0b:ad:fd:bf:4a:96:14:
59:c3:24:da:e9:82:03:2c:2e:57:c8:49:b4:5f:ef:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:3F:26:E9:1B:A3:F8:5E:40:F4:4C:02:60:D6:70:19:4A:41:A4
X509v3 Authority Key Identifier:
keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.145.0/24
Signature Algorithm: sha256WithRSAEncryption
37:09:20:1f:a1:ed:ea:da:ac:4f:7c:8e:cb:25:14:14:d4:5c:
6b:ea:29:61:9b:cc:ac:bb:e4:42:66:5b:68:4d:3d:27:b7:32:
13:46:31:d3:79:76:89:08:37:8a:86:21:a3:1c:c0:e1:05:2a:
95:5e:15:24:17:36:6a:22:07:b5:49:52:4f:9e:3d:c6:cd:60:
f2:0f:c9:f4:bf:fa:54:43:80:cd:83:78:bd:8c:d5:5d:b2:7e:
70:6e:67:d7:3e:0c:f1:5e:c2:2c:57:54:0a:dd:ab:77:d3:f4:
9d:fe:cc:58:64:b1:a8:43:82:98:a9:e6:17:c9:e1:fc:8f:e3:
30:69:dc:b7:b8:45:91:0a:db:8b:16:a7:d3:8f:38:55:da:5d:
0c:ac:bc:43:5d:f6:34:ed:f1:8f:d9:80:13:2a:86:e9:36:93:
15:5a:b9:b3:36:5c:62:25:2d:97:2f:63:68:eb:c2:2b:07:0e:
4a:36:bd:23:b1:ad:93:e6:13:d1:66:38:f9:22:52:0d:0c:a8:
be:5a:19:d5:29:e8:db:ef:93:a9:1b:98:01:e3:4b:05:9e:5b:
13:be:35:b3:37:ea:b3:b5:29:d0:3f:05:65:0a:c5:ed:b0:07:
4b:77:5f:6a:41:42:2e:79:f8:e9:e8:f4:b1:a5:68:34:ed:9c:
b5:bf:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:38 2025 by rpki-client