Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa
File: JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa (raw, json)
Hash identifier: 6ERBzyR/LP+xN6TeHFex8YjIPGVYO+nXSIcvpP7suhI=
Subject key identifier: 24:89:12:29:99:34:3A:D1:42:BC:CD:97:5D:AF:9C:45:68:E6:24:F0
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01869D76BA84C1BBF305D2CA0DC363080066
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa
Signing time: Wed 01 Mar 2023 13:57:29 +0000
ROA not before: Wed 01 Mar 2023 13:57:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 194.61.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:76:ba:84:c1:bb:f3:05:d2:ca:0d:c3:63:08:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Mar 1 13:57:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2489122999343ad142bccd975daf9c4568e624f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:6d:d4:76:e0:27:ea:85:6c:67:46:2e:20:
5e:4d:62:d0:da:39:04:a9:93:15:bb:28:ec:52:36:
3e:07:a4:a4:75:05:87:5a:b5:12:b5:1a:16:57:f6:
e2:2b:0a:09:9c:88:18:b4:5d:87:34:e3:9e:17:bf:
94:b3:32:40:43:26:b3:36:f2:f1:65:e3:09:a1:74:
44:c3:de:20:5c:02:64:ab:a7:ae:4a:92:9e:bd:6f:
bd:36:40:f4:b3:77:52:bb:db:0d:fb:03:7f:80:91:
d3:14:e6:1b:bf:0f:6b:9c:15:5e:74:e7:cb:14:0e:
00:da:ad:1d:03:f5:9c:21:36:45:38:0f:b8:80:b4:
3f:d9:05:56:4a:bc:13:f7:3b:f2:59:5b:b1:8b:ad:
e8:37:b0:50:44:ad:37:fb:68:ae:8e:94:ca:ae:d7:
b9:01:46:2f:f9:92:0a:4d:b4:f4:c4:cb:58:ae:bf:
83:cf:7f:3c:e7:2d:6b:b6:a2:9c:33:ad:fb:23:dd:
cd:b5:1b:5d:f7:ff:ab:b8:07:43:5c:bc:93:07:db:
94:b7:b6:8b:5e:fe:d5:83:b8:73:c4:34:06:16:d3:
36:bf:85:e3:76:e1:9d:e4:76:31:03:cd:29:9a:51:
69:0c:c4:e6:9c:07:6d:df:a6:44:e0:e7:92:87:6e:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:89:12:29:99:34:3A:D1:42:BC:CD:97:5D:AF:9C:45:68:E6:24:F0
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e3:c3:a0:06:68:d6:80:43:fb:cb:d1:c4:63:c6:27:f1:8a:
e5:0a:50:8f:2a:d7:a3:1c:71:96:31:ce:f4:11:fd:e9:37:a9:
75:87:f9:bd:50:62:bb:bf:26:0d:4c:79:e6:e3:03:82:ef:6b:
49:41:cc:e1:04:e3:0f:54:fc:af:25:6a:1e:8c:ee:6f:db:f5:
c2:ed:1a:7a:db:fb:2b:93:f6:d8:7d:e4:38:ae:01:56:b5:33:
d2:a4:43:9c:fd:cc:3a:df:33:0a:ce:b4:79:0b:cc:fd:d7:fd:
49:ef:29:f6:10:39:5a:f4:1b:87:50:85:60:57:e0:b0:24:dd:
ab:57:19:99:eb:6a:5b:d6:3f:b0:03:5f:be:3c:4b:e2:0a:fc:
13:7f:c9:bc:48:3a:0a:62:a1:3f:2a:d4:1f:36:cf:c2:6e:4b:
57:a7:67:24:f4:83:a5:b1:e1:a8:57:c3:48:cd:af:6b:e6:47:
54:0d:29:d9:b0:88:19:98:c3:13:aa:40:59:44:aa:35:36:41:
e0:ee:b3:8e:36:63:fa:dc:fe:d7:c2:02:91:ca:96:c5:11:43:
9f:f1:cd:ae:fb:d6:8e:55:ed:e5:b9:9b:d9:af:59:c1:91:62:
ba:d9:7f:e5:5d:48:f8:d3:e9:30:94:f5:62:9c:f1:e0:c2:af:
4c:30:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:06 2025 by rpki-client