Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/J5ro2aFZDJg0YW82AssM36el4m8.roa
File: J5ro2aFZDJg0YW82AssM36el4m8.roa (raw, json)
Hash identifier: SUYkNWwBP5YCkzTiVqyl8auoXMHNZzT3jfdCMsJWbcE=
Subject key identifier: 27:9A:E8:D9:A1:59:0C:98:34:61:6F:36:02:CB:0C:DF:A7:A5:E2:6F
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067BFB7399B68FF51E10CC1298CC137
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/J5ro2aFZDJg0YW82AssM36el4m8.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12651
IP address blocks: 193.246.0.128/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bf:b7:39:9b:68:ff:51:e1:0c:c1:29:8c:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279ae8d9a1590c9834616f3602cb0cdfa7a5e26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:e5:99:e3:c7:fa:aa:80:a9:a4:ba:fb:f8:
3d:4d:2f:b9:fc:b6:02:5b:a4:fe:f7:01:a5:83:7e:
13:c3:b0:81:54:dc:6b:58:f1:7b:38:11:d2:32:9a:
43:ff:46:f6:66:9a:34:01:8d:f9:37:a4:96:6a:ed:
d1:75:36:75:3a:93:57:29:08:ce:a1:de:86:a0:c6:
47:77:4c:9b:b2:91:4c:31:53:a0:dd:06:9d:33:f0:
c2:dc:af:8f:55:ff:93:5d:3b:12:1c:60:93:3a:df:
e3:21:ac:10:2c:cc:46:33:d7:69:d6:5e:69:b9:66:
ed:ce:d4:be:d8:75:b0:48:82:cf:e0:a0:f8:46:56:
71:74:50:69:29:72:0f:a2:d4:c8:8c:8a:97:46:32:
67:fb:cb:d4:7f:db:e9:7a:0d:78:ca:93:3f:6c:03:
1c:ca:29:7e:53:4b:90:08:2a:27:7b:3f:d7:c0:bd:
93:ea:44:f1:e7:62:98:82:be:d2:54:bc:98:61:b5:
32:11:f0:0e:b5:14:51:8a:d9:e4:fa:39:98:29:ef:
4b:a5:63:bc:1e:58:67:b7:4c:dc:92:bb:a1:4a:97:
ef:8c:3f:0e:b2:3b:21:f0:72:bf:1b:e4:29:b5:ee:
a6:f6:a0:86:7a:e0:72:53:af:0b:24:ea:35:32:9d:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:E8:D9:A1:59:0C:98:34:61:6F:36:02:CB:0C:DF:A7:A5:E2:6F
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/J5ro2aFZDJg0YW82AssM36el4m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.0.128/29
Signature Algorithm: sha256WithRSAEncryption
82:13:29:c3:7b:b6:8d:3f:04:6e:07:b1:61:03:22:70:16:0d:
f9:47:47:aa:ed:93:89:bc:92:93:e2:80:87:c7:65:d6:66:64:
3a:0a:20:06:52:15:f3:da:e2:3b:31:32:be:eb:1a:90:88:f0:
d8:9b:48:7a:9f:85:f0:64:7b:7c:94:8a:59:e5:08:02:58:e4:
54:71:10:49:13:42:34:83:b1:3e:41:4c:10:45:53:64:e3:7d:
e4:8d:2c:60:22:e1:b1:69:e0:21:6c:4b:7f:89:b5:fe:6b:73:
98:83:3b:0d:c6:56:2e:2d:54:2d:6f:a5:81:23:90:a3:33:ee:
5c:af:fe:22:40:63:d5:d9:78:c7:3d:8e:c1:e0:c1:90:f4:9b:
bd:b0:24:58:c4:1e:c0:83:06:6c:ec:fc:78:e5:79:03:d4:85:
b2:94:5a:cf:3e:5f:12:de:b8:5c:3b:b1:f4:92:72:8c:4d:04:
8a:3a:5d:78:6b:41:6a:05:11:9a:07:3a:bd:be:c6:20:0b:e7:
d5:a9:b0:45:5f:46:63:88:9a:b2:0e:5b:57:d4:43:76:87:7f:
bf:a4:d3:29:4b:09:f7:36:02:5c:6a:b0:0b:3d:f9:be:3e:9f:
c5:6a:43:9b:12:33:7f:f3:0d:bc:30:c1:e9:a7:ee:85:6d:e0:
b0:8f:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:25:32 2025 by rpki-client