Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JLR4eUTLxHy9n7Qw8yvOKKJ9lK0.roa
File: JLR4eUTLxHy9n7Qw8yvOKKJ9lK0.roa (raw, json)
Hash identifier: KcrDw28artdIj8oxyIQCg6n2bUhyyEHQL6I3CjlEEM4=
Subject key identifier: 24:B4:78:79:44:CB:C4:7C:BD:9F:B4:30:F3:2B:CE:28:A2:7D:94:AD
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03437366
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JLR4eUTLxHy9n7Qw8yvOKKJ9lK0.roa
Signing time: Tue 18 Jan 2022 15:59:21 +0000
ROA not before: Tue 18 Jan 2022 15:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 193.161.245.0/24 maxlen: 24
193.142.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54752102 (0x3437366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jan 18 15:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24b4787944cbc47cbd9fb430f32bce28a27d94ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:eb:4f:1a:dc:ef:99:08:4f:13:23:3b:b1:
f3:85:a5:ae:5f:4f:ed:7c:af:21:e7:f2:9c:54:23:
ea:9d:24:2e:01:9b:73:86:3d:18:bc:c6:78:e4:ad:
c8:bc:a6:38:89:be:b5:c0:33:d3:c9:75:f3:74:da:
c7:70:70:e0:ad:21:54:0d:ff:b2:8d:f7:57:f0:23:
01:dd:85:e4:de:fe:f8:b2:d8:92:ba:32:d0:ee:b5:
a7:9b:41:d0:d4:59:77:6a:f2:71:56:c7:b7:a2:e5:
03:0f:00:cf:4e:2c:87:c2:c1:63:2d:94:83:87:88:
ba:02:87:b2:4a:07:d4:dd:ed:40:06:79:92:80:f9:
57:8b:a9:b1:7d:ee:b9:99:cf:52:43:c3:6b:d3:9a:
b5:8a:f4:43:87:47:6e:44:b8:07:c9:11:e4:68:af:
4a:47:64:b1:f2:0c:03:4b:fc:2d:2e:ef:50:34:ce:
26:55:ce:64:6a:9a:74:fa:cb:5a:d7:3c:b0:43:e8:
e5:68:0a:f1:f7:ac:52:a9:1a:73:6d:04:c1:94:67:
2e:86:cb:1b:c0:85:7d:61:32:2c:ff:bc:49:4d:6d:
59:44:79:f0:ea:d4:0f:96:a2:14:26:12:fe:34:f2:
f0:df:ff:f6:27:a8:28:79:dd:0c:00:25:4d:a7:5c:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B4:78:79:44:CB:C4:7C:BD:9F:B4:30:F3:2B:CE:28:A2:7D:94:AD
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JLR4eUTLxHy9n7Qw8yvOKKJ9lK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.18.0/24
193.161.245.0/24
Signature Algorithm: sha256WithRSAEncryption
74:49:c9:dd:69:3d:73:fc:5b:70:62:de:15:4e:09:e4:b5:24:
a1:54:ac:76:d5:f1:91:0c:a7:85:94:c6:83:ea:7d:23:c9:88:
fb:f1:f8:7d:86:d7:f5:ea:b3:a1:03:1c:ab:6c:ab:26:43:c6:
22:f3:e6:bb:62:ce:69:16:a6:a0:b9:e4:02:9c:18:9d:69:a2:
fa:b9:f1:1a:d7:2a:3f:a1:18:96:92:41:34:cd:a1:1b:58:a5:
e8:0f:93:1e:44:a4:cd:ef:1b:22:ee:36:08:44:da:9e:9f:e4:
64:16:11:85:86:8f:a7:e0:59:5d:88:91:c0:40:e0:eb:a4:d6:
db:64:72:28:fe:8b:65:b7:9a:d8:dc:35:20:b3:90:57:7f:d8:
de:1c:d2:37:a9:0c:85:61:9a:62:88:e7:0d:ee:6f:59:e4:d7:
64:f8:53:bd:93:73:9e:0b:51:29:4c:5d:3d:17:88:d0:ab:b0:
1d:fd:61:1e:bd:51:19:21:bd:5d:c7:fd:52:b5:d2:0e:81:cb:
cd:3f:87:f0:19:64:37:81:d9:e8:20:af:3a:50:67:79:f7:08:
e1:81:92:da:75:e7:17:e3:fe:5c:fe:3b:7a:76:33:ee:38:7b:
d0:1b:7a:81:bd:c1:ed:73:19:f0:41:db:96:11:e8:02:1e:85:
2d:58:19:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org