Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/jzjK_8qHx4Wha5G7ZblPA9yTiD0.roa
File: jzjK_8qHx4Wha5G7ZblPA9yTiD0.roa (raw, json)
Hash identifier: wPg5X5p6ig6aWoLV8LpvOgW3NWdlqx/zFKoOXhql7Zw=
Subject key identifier: 8F:38:CA:FF:CA:87:C7:85:A1:6B:91:BB:65:B9:4F:03:DC:93:88:3D
Certificate issuer: /CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Certificate serial: 01856E667A3B3B66583C8A67A6BEA7FDDC93
Authority key identifier: CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/jzjK_8qHx4Wha5G7ZblPA9yTiD0.roa
Signing time: Sun 01 Jan 2023 17:34:47 +0000
ROA not before: Sun 01 Jan 2023 17:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 185.161.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:7a:3b:3b:66:58:3c:8a:67:a6:be:a7:fd:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Validity
Not Before: Jan 1 17:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f38caffca87c785a16b91bb65b94f03dc93883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:6e:f3:68:f5:c7:2a:e7:59:f4:ec:15:53:
db:53:27:a4:59:f3:fb:a7:f9:6b:a8:72:1e:f7:6a:
00:d8:44:9b:a5:a1:ee:72:a2:76:09:f6:d9:99:7e:
d4:5b:2d:1b:80:c7:27:d9:b8:e0:f2:3a:b4:98:e5:
0e:b6:f5:59:b1:25:44:4d:7f:dc:7f:c6:24:2c:43:
f9:89:f1:82:ff:4a:e6:e5:ab:95:c9:e6:60:1f:4e:
ee:35:a7:b4:1f:bd:27:a2:34:90:a3:9b:16:6a:11:
89:38:b9:6b:2c:69:45:f0:82:05:a4:06:52:e0:d3:
91:32:7b:42:b8:9e:b9:ac:47:56:38:be:14:24:3e:
2d:f2:41:65:86:d4:57:f8:ab:ca:ee:1c:68:ec:0f:
30:62:a9:d2:7f:c3:b9:bc:57:e7:bb:31:4d:d3:fc:
7b:94:74:b2:bc:a2:a7:18:34:71:ad:89:4b:9b:67:
f9:63:53:fc:33:dd:42:30:4b:ee:71:64:48:e9:a1:
e9:6b:2a:f5:69:9a:1e:03:57:8c:cc:44:2e:3c:c1:
91:8d:b1:55:44:df:59:b3:09:dd:94:60:5a:7e:65:
09:ac:b3:92:91:46:78:4b:f5:1b:af:92:b9:1d:ba:
7b:ac:96:58:ee:fa:74:c7:c8:3b:fe:19:fd:0a:ef:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:CA:FF:CA:87:C7:85:A1:6B:91:BB:65:B9:4F:03:DC:93:88:3D
X509v3 Authority Key Identifier:
keyid:CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/jzjK_8qHx4Wha5G7ZblPA9yTiD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:da:eb:95:ed:82:92:ba:01:d7:cb:c5:c4:78:b7:ff:98:87:
79:d3:c2:bf:e0:16:bb:41:9b:a5:07:2e:b0:45:77:b8:bf:09:
77:a9:84:79:84:90:91:06:12:71:a6:b3:35:21:98:c1:b9:66:
e9:d6:80:d6:1a:1a:f4:b7:33:32:ee:8c:0c:c1:3a:62:82:f1:
85:fd:37:7d:e5:e1:81:4b:9b:a4:0f:e2:26:08:8f:19:53:c2:
e4:d1:2b:ea:c9:35:db:66:ba:d7:94:a0:64:03:ff:10:c8:9e:
0f:25:7c:b4:81:6a:1b:08:00:87:40:7c:55:b0:a3:e4:97:24:
79:21:2e:35:e2:8d:ed:79:ec:dd:4e:10:95:29:9b:e5:f9:72:
d1:c3:bc:01:a9:b0:13:bb:27:89:b0:50:2a:76:80:24:ab:b3:
f9:99:3c:f6:0c:8f:ce:14:bb:8f:78:57:29:c1:5d:43:67:ed:
1c:d4:51:1c:1b:6d:6f:f4:05:7b:b0:cb:bd:58:63:a7:ad:6c:
9e:2c:49:4b:86:28:92:76:95:30:1d:d4:00:08:ca:94:19:55:
e0:ff:03:f7:3f:89:0b:73:99:0c:20:98:5c:05:6e:97:1c:d5:
50:fc:90:b6:45:7e:c8:f3:88:51:10:1d:a4:18:d4:92:35:64:
fb:42:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:26 2025 by rpki-client