Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/jJb63WHX8LsB3QDuigxBrD65ZR0.roa
File: jJb63WHX8LsB3QDuigxBrD65ZR0.roa (raw, json)
Hash identifier: +ilD7JtRRxaEC6UNmKq5fdG6fZrQuNb1tHL4KgM7JRQ=
Subject key identifier: 8C:96:FA:DD:61:D7:F0:BB:01:DD:00:EE:8A:0C:41:AC:3E:B9:65:1D
Certificate issuer: /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial: 0194266B58507653D904ED902DDACF4E7D2F
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/jJb63WHX8LsB3QDuigxBrD65ZR0.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 194.53.128.0/23 maxlen: 24
194.53.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:58:50:76:53:d9:04:ed:90:2d:da:cf:4e:7d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c96fadd61d7f0bb01dd00ee8a0c41ac3eb9651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:78:91:d2:04:4c:5d:97:6b:36:ab:12:fa:
58:68:7b:28:f3:4a:43:d7:21:81:bf:17:16:7b:c6:
ae:77:6d:6a:e2:3a:7f:a6:d1:bc:85:9f:fa:f1:41:
2a:b9:2f:7c:c2:10:b6:33:08:9f:d4:f3:83:bc:dd:
82:15:51:37:0d:ec:85:90:d4:a0:4a:0d:46:c8:dd:
32:d8:cc:80:64:80:03:65:db:09:0d:ee:63:db:11:
eb:37:f4:c4:63:2e:38:ee:0d:f0:02:b2:9d:55:f8:
55:9c:d0:12:74:42:8d:fe:c4:0a:7e:97:6a:f2:e4:
17:0b:24:3f:6e:71:0f:fd:12:bb:4c:69:48:a6:fd:
55:ce:3f:bc:6e:bd:91:c3:16:e2:fc:42:75:5b:2b:
5e:a8:1e:e3:78:02:14:3a:d3:a8:4f:30:61:ec:2b:
44:d1:da:dd:66:28:a7:e2:77:33:55:28:b3:84:01:
53:d5:d4:62:b9:3d:ab:24:8e:a2:9a:da:f6:a7:50:
a3:77:d6:fc:a4:bb:69:5f:83:9b:c1:5a:36:fc:ee:
d7:47:10:1f:4e:77:17:4c:c1:cc:33:3b:29:d4:b6:
77:c4:e9:05:67:67:1b:f3:0d:33:0a:2c:73:3f:79:
73:8b:9e:ae:f2:b4:3c:27:43:eb:a0:b8:b5:29:3f:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:FA:DD:61:D7:F0:BB:01:DD:00:EE:8A:0C:41:AC:3E:B9:65:1D
X509v3 Authority Key Identifier:
keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/jJb63WHX8LsB3QDuigxBrD65ZR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.128.0/23
194.53.214.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f8:17:70:3e:4d:66:0c:92:97:01:63:cc:42:08:ca:9a:bc:
7c:ea:9d:69:86:b6:8a:e7:9a:51:63:b4:b0:ae:b0:bf:d7:78:
10:e8:bc:8e:b9:5a:82:a6:e2:92:18:42:9b:61:af:82:3c:7b:
ab:5a:a9:bd:f8:11:3f:39:03:2b:8d:3f:8a:31:f2:52:e0:5d:
b8:76:49:91:b5:84:5c:02:64:01:ad:81:56:b8:79:5e:0b:1c:
57:3d:ba:ee:36:0b:93:ca:9e:c4:38:c4:a7:38:d0:53:47:30:
76:cf:67:e3:4d:1c:91:d9:85:3f:a4:6c:be:4d:13:40:84:84:
2c:fc:9d:ea:18:f8:d0:bc:e6:15:3d:f5:7a:f8:b0:49:64:8c:
7d:d0:aa:49:6a:ad:db:32:19:bf:56:7f:26:6a:03:1f:ef:ac:
67:0b:9b:96:a5:51:d7:ee:a5:cb:cc:bf:ce:cd:c5:e2:55:e8:
8d:e4:c6:69:7a:d8:ec:12:73:eb:2b:57:ea:18:9f:67:60:2a:
53:40:c7:81:07:33:a8:de:1a:f7:fa:cd:9a:fa:c9:9c:73:02:
e4:d4:a4:d1:1f:0f:f6:f8:7e:f8:24:e4:f3:3d:66:10:cd:0c:
ea:a1:e0:95:70:e9:7c:a4:9f:38:67:26:3d:2d:58:dd:5e:dc:
46:90:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:22 2025 by rpki-client